$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json) Hash identifier: T+vP4GWPhaRpKxK2/7U6DS8tzS+c3XJur9XLZ/HjdsU= Subject key identifier: D3:75:B7:42:FB:4C:8E:3E:0C:D1:D0:F2:8A:26:98:EB:CD:75:2E:44 Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft Manifest number: 0622 Signing time: Sat 10 May 2025 22:21:26 +0000 Manifest this update: Sat 10 May 2025 22:21:26 +0000 Manifest next update: Sat 17 May 2025 22:21:26 +0000 Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: ftWTV4UzInYqDbGc4pgP6L7BZC4VJ5oPDGC0SNL8aQs=) 2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Validity Not Before: May 10 22:21:26 2025 GMT Not After : May 17 22:21:26 2025 GMT Subject: CN=681fd166-73a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ba:5a:58:f0:3d:d1:e8:88:86:e5:61:c7:44: 78:19:b3:b4:e4:1b:a9:07:9a:95:5e:48:b7:a1:97: cb:7a:ce:97:2b:34:2c:b3:ad:4b:d3:5c:10:d4:53: 68:15:a5:07:2a:ef:51:96:ea:12:e9:8a:cb:34:5a: 01:41:5c:6e:d0:58:15:79:d8:22:1b:0f:66:ac:71: 8c:d0:85:6a:c5:3c:fd:04:49:94:39:54:b2:b4:b9: d4:4c:79:a1:d3:01:24:a9:98:c0:ff:6d:12:a9:40: 7d:82:69:1c:85:7b:09:41:61:2e:b6:3c:ea:7f:f3: e1:cb:98:e8:f1:9a:ca:ed:d7:df:70:18:e9:68:93: 15:c0:4e:0e:31:25:78:56:4a:7b:4a:ea:5b:c1:0c: ce:b9:ac:df:2c:42:58:ae:95:72:30:5f:55:af:3d: 2f:bd:9d:3c:e3:04:24:ec:3a:49:7d:e5:56:10:3c: f4:0f:53:d9:e2:9f:df:cf:58:ee:7b:a1:cd:78:20: 7e:a8:d3:cb:af:8a:50:63:95:ab:74:66:89:45:ff: a9:fc:90:58:09:9c:30:df:07:94:f9:ee:7a:d3:13: 9a:fa:f2:c8:33:f6:33:54:5e:b8:d3:42:7e:9f:3d: 9f:2c:4d:66:9c:89:99:f4:5c:78:4b:8d:31:d9:68: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:75:B7:42:FB:4C:8E:3E:0C:D1:D0:F2:8A:26:98:EB:CD:75:2E:44 X509v3 Authority Key Identifier: keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:32:a4:73:ba:4d:cd:54:fb:49:f9:7d:70:d3:fc:75:73:cf: cb:2a:49:db:b3:ad:b3:f6:47:fb:a4:10:3b:6e:da:14:38:88: da:57:a4:02:2a:a3:92:db:fb:e4:3c:73:9a:bb:22:78:4e:f6: b7:b6:75:b0:9f:9c:04:ab:93:7c:89:09:f4:c5:07:b0:8e:1c: bb:35:37:cc:27:06:dd:7c:52:fa:d4:fc:cb:12:3c:35:f0:99: b8:46:69:00:c3:38:00:61:8d:f2:d0:4d:03:7d:54:e1:28:96: 93:e0:4b:ea:e2:35:b7:5b:45:ea:bf:a3:17:b2:93:48:d2:e5: f8:af:75:4e:d0:33:00:0b:70:a2:3a:50:9a:f2:c2:b1:84:e4: fc:a9:30:57:b9:a3:1f:dd:f6:69:0a:73:58:42:59:40:18:f4: 45:44:28:f7:d3:de:90:9a:a9:55:71:bc:31:11:38:b2:a2:dc: 40:2e:f4:bd:17:af:62:1c:bd:72:1d:1f:5a:59:cb:16:29:49: cb:10:28:a4:6b:ee:4d:45:5a:e6:a9:cb:f5:f6:16:ea:50:89: 8e:25:62:c1:33:a4:cf:c4:07:59:62:88:a6:f4:f9:ca:81:25: aa:35:d8:6b:84:4a:d9:b9:49:6e:48:a0:33:2e:80:c7:5d:3f: f6:74:f9:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy Mzk2NjcwOUMwHhcNMjUwNTEwMjIyMTI2WhcNMjUwNTE3MjIyMTI2WjAYMRYwFAYD VQQDEw02ODFmZDE2Ni03M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rpaWPA90eiIhuVhx0R4GbO05BupB5qVXki3oZfLes6XKzQss61L01wQ1FNo FaUHKu9RluoS6YrLNFoBQVxu0FgVedgiGw9mrHGM0IVqxTz9BEmUOVSytLnUTHmh 0wEkqZjA/20SqUB9gmkchXsJQWEutjzqf/Phy5jo8ZrK7dffcBjpaJMVwE4OMSV4 Vkp7SupbwQzOuazfLEJYrpVyMF9Vrz0vvZ084wQk7DpJfeVWEDz0D1PZ4p/fz1ju e6HNeCB+qNPLr4pQY5WrdGaJRf+p/JBYCZww3weU+e560xOa+vLIM/YzVF6400J+ nz2fLE1mnImZ9Fx4S40x2WgevwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNN1t0L7 TI4+DNHQ8oommOvNdS5EMB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3 NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRFRS8zQTcyN0M3RTk3NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVH SXVoMGtjNUlKN1lqbG1jSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUMqRzuk3NVPtJ+X1w0/x1c8/LKknbs62z9kf7pBA7btoUOIjaV6QC KqOS2/vkPHOauyJ4Tva3tnWwn5wEq5N8iQn0xQewjhy7NTfMJwbdfFL61PzLEjw1 8Jm4RmkAwzgAYY3y0E0DfVThKJaT4Evq4jW3W0Xqv6MXspNI0uX4r3VO0DMAC3Ci OlCa8sKxhOT8qTBXuaMf3fZpCnNYQllAGPRFRCj3096QmqlVcbwxETiyotxALvS9 F69iHL1yHR9aWcsWKUnLECika+5NRVrmqcv19hbqUImOJWLBM6TPxAdZYoim9PnK gSWqNdhrhErZuUluSKAzLoDHXT/2dPmh -----END CERTIFICATE-----Generated at Sun May 11 15:57:55 2025 by rpki-client