$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json) Hash identifier: i7Xx5sOnqUy7PZZT5ScbRcL7DTiqAJmTy42tC4Wybi0= Subject key identifier: 5F:1F:4D:1C:F3:B4:FF:AA:CB:55:65:10:46:0C:22:FC:FB:BB:F9:75 Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft Manifest number: A6 Signing time: Tue 13 May 2025 05:18:21 +0000 Manifest this update: Tue 13 May 2025 05:18:20 +0000 Manifest next update: Tue 20 May 2025 05:18:20 +0000 Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: V66PL9UKYQ6pwYIF8VuF+uJuFG40q2+KswMYFxeWQH4=) 2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: vRTnjavVXE5BoWmix9amg9lgOEyq/KuOKiPhcwexbdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: May 13 05:18:20 2025 GMT Not After : May 20 05:18:20 2025 GMT Subject: CN=6822d61d-ea50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:a2:91:75:60:71:df:f9:dc:e3:31:a4:f4: 3a:ab:93:52:54:38:9c:e4:d3:d9:2e:8f:75:5f:1b: ca:7e:84:51:a4:da:67:33:ff:ce:4a:58:de:4d:25: 8e:ca:fd:1d:c5:f3:1a:87:4d:fd:49:5f:0e:37:80: be:12:9f:0c:b3:54:f2:2a:68:fe:2c:53:64:6b:99: bb:41:11:47:a5:00:45:10:95:1b:e5:0a:af:0a:41: d2:b0:95:23:91:9b:65:8c:3b:09:b9:0e:9c:4f:fc: 9a:57:e9:0f:c2:70:19:51:9a:de:45:78:29:c3:94: a5:7b:b3:a2:62:f9:ed:15:17:a0:ea:b6:fd:41:53: 2b:fa:e6:29:55:54:af:36:25:bf:ff:ad:58:c9:47: 5b:a5:a7:71:e7:71:61:f6:c8:e7:cf:60:1f:cb:95: c0:5a:29:82:23:77:65:a3:7f:4f:c7:51:f9:92:ef: 53:db:51:71:2b:fe:9a:dd:f0:13:89:a4:bb:af:3d: e8:30:81:06:ac:2f:04:31:31:7a:e6:f1:8b:dd:94: ed:f5:05:f8:cc:69:28:cb:2d:d4:4a:f9:7a:8d:2d: c7:c3:c7:40:12:98:4e:93:75:cf:04:5f:cd:aa:9c: fc:c4:62:52:7a:2d:d2:19:99:fc:f2:3c:ed:45:a8: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1F:4D:1C:F3:B4:FF:AA:CB:55:65:10:46:0C:22:FC:FB:BB:F9:75 X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e1:0e:96:90:c8:ce:e3:47:a8:13:3e:44:4a:0a:20:55:aa: 7c:81:a6:00:80:0c:8e:ab:03:c6:98:e1:4a:da:1a:16:58:59: 95:a0:52:03:5b:47:73:bd:44:c4:18:55:c3:3b:58:f1:9f:fc: 21:3d:92:3f:ce:08:63:32:a4:a4:de:6d:08:d0:8f:6c:1c:ae: 0f:90:24:95:76:02:9c:fe:1e:e4:fb:49:c2:d0:cb:e3:cc:37: 90:5f:ea:61:0b:78:90:ca:42:3e:d3:1b:02:54:72:8d:5e:40: 82:27:6b:d0:aa:e4:bc:6c:da:57:b6:14:73:39:8c:0b:22:e2: 1e:75:c7:ae:a2:e0:f8:eb:c0:8c:eb:fa:04:5f:2c:ea:0e:d7: 0f:f8:5f:39:13:a9:13:39:fa:2f:43:94:25:28:64:d9:75:b2: 3f:5e:14:f0:d7:21:cc:78:b3:d9:fc:1d:57:bb:bb:9b:75:1b: 4c:07:57:76:56:70:7a:de:7c:83:7d:0e:02:64:9b:10:24:f5: 5d:de:f4:25:f4:d9:2f:b5:76:e8:88:5d:45:4a:30:ac:50:0a: 52:79:ae:2a:e4:2e:ca:cd:31:62:0c:bf:f1:02:e8:8e:0d:3e: 96:fc:8e:ef:8e:7d:04:28:e0:c2:ec:52:af:32:5e:1d:6a:57: 9b:58:3e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4 QThERDk0MDYwHhcNMjUwNTEzMDUxODIwWhcNMjUwNTIwMDUxODIwWjAYMRYwFAYD VQQDEw02ODIyZDYxZC1lYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2CikXVgcd/53OMxpPQ6q5NSVDic5NPZLo91XxvKfoRRpNpnM//OSljeTSWO yv0dxfMah039SV8ON4C+Ep8Ms1TyKmj+LFNka5m7QRFHpQBFEJUb5QqvCkHSsJUj kZtljDsJuQ6cT/yaV+kPwnAZUZreRXgpw5Sle7OiYvntFReg6rb9QVMr+uYpVVSv NiW//61YyUdbpadx53Fh9sjnz2Afy5XAWimCI3dlo39Px1H5ku9T21FxK/6a3fAT iaS7rz3oMIEGrC8EMTF65vGL3ZTt9QX4zGkoyy3USvl6jS3Hw8dAEphOk3XPBF/N qpz8xGJSei3SGZn88jztRah0DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8fTRzz tP+qy1VlEEYMIvz7u/l1MB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az MXNfVi1XcXJXaTZLamRsQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw4Q6WkMjO40eoEz5ESgogVap8gaYAgAyOqwPGmOFK2hoWWFmVoFID W0dzvUTEGFXDO1jxn/whPZI/zghjMqSk3m0I0I9sHK4PkCSVdgKc/h7k+0nC0Mvj zDeQX+phC3iQykI+0xsCVHKNXkCCJ2vQquS8bNpXthRzOYwLIuIedceuouD468CM 6/oEXyzqDtcP+F85E6kTOfovQ5QlKGTZdbI/XhTw1yHMeLPZ/B1Xu7ubdRtMB1d2 VnB63nyDfQ4CZJsQJPVd3vQl9NkvtXboiF1FSjCsUApSea4q5C7KzTFiDL/xAuiO DT6W/I7vjn0EKODC7FKvMl4dalebWD6J -----END CERTIFICATE-----Generated at Tue May 13 19:06:50 2025 by rpki-client