$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: U3JqA+RqHLp2d3/Yn+LshXXNwZwnizMw3RmkR6hcMMs= Subject key identifier: 05:2B:98:A9:8F:F9:C2:31:6C:34:EC:8B:16:EF:1A:4C:89:46:7C:50 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 03FE Signing time: Tue 01 Jul 2025 01:08:19 +0000 Manifest this update: Tue 01 Jul 2025 01:08:18 +0000 Manifest next update: Tue 08 Jul 2025 01:08:18 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: 26+fbbclz0/AK/ZqX/Wyf72b2R1xZiOdrFWPiaS4NtI=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Jul 1 01:08:18 2025 GMT Not After : Jul 8 01:08:18 2025 GMT Subject: CN=68633502-719b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:2b:3f:2d:22:78:c1:ad:04:ab:f4:4d:92: de:0b:d5:d0:cf:5f:ba:f4:a4:74:5b:08:fd:b7:fc: 01:3b:38:75:be:c2:b6:ac:cd:f5:42:c0:0d:28:72: 6e:ea:6d:f9:ba:14:bf:d1:6a:62:37:0a:a2:e7:28: 57:b1:30:b7:76:aa:4d:e7:51:5b:e0:79:41:02:9f: e2:23:0b:6f:10:60:e0:96:3c:11:2e:14:b8:01:6d: f3:77:2e:23:a2:7e:3a:ee:50:af:fc:12:df:d6:7a: 34:6a:82:3b:d8:d0:0c:49:d9:fc:d9:32:c6:0f:3f: 59:c6:66:ae:d0:f2:50:dc:5f:f1:22:71:a3:c5:9e: db:55:33:b9:c7:0f:49:47:d8:28:cf:d5:3e:ad:52: ad:ba:bc:5b:49:85:c2:52:55:f0:c7:3f:d5:81:e8: 29:5d:dd:ae:db:73:19:56:db:db:80:53:e0:de:c6: 5d:a7:69:e2:6c:14:8a:ef:5a:16:25:c5:5c:53:27: dd:a8:d5:b4:75:9d:82:77:02:b4:0a:d3:a3:43:3f: 80:93:c9:75:88:f4:a4:9c:0a:c6:4e:da:ee:1e:4e: 6d:33:9d:26:6a:55:e3:3d:82:69:38:dc:3a:cf:ae: 0c:a1:1e:13:8c:95:22:76:69:b5:bd:4d:a5:5c:bb: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2B:98:A9:8F:F9:C2:31:6C:34:EC:8B:16:EF:1A:4C:89:46:7C:50 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:8b:6a:f6:ad:f6:f5:7b:a0:35:af:e3:b6:46:c1:db:28:cc: 9e:38:a1:5e:3c:bf:fd:86:4a:f8:0b:84:d6:73:09:b7:f6:35: 81:cc:36:dd:02:2b:d2:77:04:e7:17:4c:e8:49:2e:9b:8b:a7: 8f:0b:69:c9:92:77:08:59:91:b5:7c:26:b5:71:12:0f:a5:5c: 1d:75:a2:dc:a2:f1:7b:71:6e:fa:32:36:cb:25:1d:21:83:b3: c3:0c:28:d3:11:eb:4a:07:94:65:b3:17:8d:bd:68:b4:17:7b: 96:1f:b1:cd:d9:07:79:e0:8d:d8:aa:9c:11:32:ff:a6:30:fb: fa:83:8f:d6:33:db:c5:b7:eb:5f:0b:ea:e4:34:ea:d5:fd:41: 1a:69:3a:5b:de:97:06:37:60:fe:c6:ba:45:c6:92:91:30:47: 14:90:87:13:48:65:da:4b:ab:9a:f2:f8:81:94:0b:6a:1d:45: 65:8d:ca:be:85:ab:83:4e:c1:55:94:ef:3c:6b:6b:84:dc:d3: b0:92:ec:2e:1f:01:7e:92:84:64:c7:e1:8c:22:46:30:46:84: 0c:6c:c1:c0:e5:c3:a7:60:69:fd:ba:42:0c:4f:55:65:86:d0: f2:80:a8:0a:bc:87:06:39:04:84:33:d1:ab:26:4c:25:55:59: 1f:3b:f9:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwNzAxMDEwODE4WhcNMjUwNzA4MDEwODE4WjAYMRYwFAYD VQQDEw02ODYzMzUwMi03MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwv8rPy0ieMGtBKv0TZLeC9XQz1+69KR0Wwj9t/wBOzh1vsK2rM31QsANKHJu 6m35uhS/0WpiNwqi5yhXsTC3dqpN51Fb4HlBAp/iIwtvEGDgljwRLhS4AW3zdy4j on467lCv/BLf1no0aoI72NAMSdn82TLGDz9Zxmau0PJQ3F/xInGjxZ7bVTO5xw9J R9goz9U+rVKturxbSYXCUlXwxz/VgegpXd2u23MZVtvbgFPg3sZdp2nibBSK71oW JcVcUyfdqNW0dZ2CdwK0CtOjQz+Ak8l1iPSknArGTtruHk5tM50malXjPYJpONw6 z64MoR4TjJUidmm1vU2lXLv3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUrmKmP +cIxbDTsixbvGkyJRnxQMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIi2r2rfb1e6A1r+O2RsHbKMyeOKFePL/9hkr4C4TWcwm39jWBzDbd AivSdwTnF0zoSS6bi6ePC2nJkncIWZG1fCa1cRIPpVwddaLcovF7cW76MjbLJR0h g7PDDCjTEetKB5RlsxeNvWi0F3uWH7HN2Qd54I3YqpwRMv+mMPv6g4/WM9vFt+tf C+rkNOrV/UEaaTpb3pcGN2D+xrpFxpKRMEcUkIcTSGXaS6ua8viBlAtqHUVljcq+ hauDTsFVlO88a2uE3NOwkuwuHwF+koRkx+GMIkYwRoQMbMHA5cOnYGn9ukIMT1Vl htDygKgKvIcGOQSEM9GrJkwlVVkfO/mS -----END CERTIFICATE-----Generated at Tue Jul 1 15:11:21 2025 by rpki-client