$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: EqRNnnRaL8cP97Gy756X8JidkwnoY2smgkliP/AzVX0= Subject key identifier: BE:DA:48:D5:6D:44:B2:98:65:88:61:EE:63:3E:7B:F8:84:6C:31:3B Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 0186 Signing time: Thu 15 May 2025 03:02:05 +0000 Manifest this update: Thu 15 May 2025 03:02:05 +0000 Manifest next update: Thu 22 May 2025 03:02:05 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: 62EGGFRPz6y+HFeWmKYhfB8/w69Ye3jd66Vhs2zCdzE=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: /9Uf2838bCZKpE133UWLyKcpXUA7N6aybd5lPLH4kiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: May 15 03:02:05 2025 GMT Not After : May 22 03:02:05 2025 GMT Subject: CN=6825592d-0896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:aa:8c:a9:ee:9f:ea:ad:f9:2a:ab:ca:a7: 87:f6:0c:2b:98:52:c4:5b:a9:d1:d3:d9:6d:8d:c1: c6:6b:ab:7c:c6:98:12:bf:64:22:fd:d6:6c:bf:78: 9d:46:6f:59:77:9d:a2:6a:9b:c2:05:27:e1:95:22: 43:c1:1d:6b:99:b2:b6:47:bb:24:15:d5:5b:ad:84: ca:57:75:44:06:72:43:c7:2b:55:a8:26:57:97:01: a6:37:33:fe:80:18:64:f0:2b:70:7a:ca:ea:8f:05: 88:36:66:04:2f:1c:35:49:e9:cd:09:3e:41:96:6f: ce:09:3e:8d:0b:f0:3e:95:ea:c4:57:70:8d:7c:df: ca:60:ca:a8:5b:e5:0a:ef:b1:1c:8d:85:b6:2f:c3: 52:77:7c:94:7a:dc:49:9f:b0:8e:71:15:a1:33:a3: 16:7c:42:80:c5:0c:a2:e0:77:46:49:cf:d9:ef:f8: 72:22:d9:f3:5f:70:1d:56:03:6b:44:ba:ac:2a:57: d5:0f:b4:34:d9:f9:28:ea:b0:75:7a:12:b4:18:ec: c5:9f:01:66:86:3b:af:4a:a4:33:f9:de:7a:79:02: 82:37:88:18:2d:9f:69:b3:56:1d:d3:7d:89:cd:c6: 0f:4b:b4:d6:7e:88:da:9b:e3:4a:0a:e8:bf:2b:94: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DA:48:D5:6D:44:B2:98:65:88:61:EE:63:3E:7B:F8:84:6C:31:3B X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f1:7e:90:fb:f5:f9:3f:7d:7a:4c:7a:fd:1b:82:3c:b4:d0: a5:12:69:e9:b9:2b:81:ab:20:36:cc:fb:e5:08:58:30:9c:3e: 97:11:d2:28:ac:b5:77:ae:23:fe:1b:9a:66:f9:67:f9:7d:53: ae:8e:42:b4:94:a9:58:d9:bb:53:72:a2:fe:ce:f7:11:63:d2: d6:60:ab:08:13:fd:17:c6:52:1d:42:dc:36:a7:74:f9:ef:7e: 7d:39:ab:df:ef:58:75:df:d1:8a:5e:c1:17:0c:12:7c:d1:0b: 8a:5e:f1:f7:1d:21:30:3a:74:4b:7f:d6:3b:2b:33:0b:e9:b5: 8e:88:f7:d9:2c:85:d5:f7:73:85:86:53:50:26:ae:4f:76:65: e4:0c:6f:0c:7c:75:93:89:4a:40:91:2f:4e:7c:f1:cd:ab:3c: 68:b4:0d:c1:96:7f:d7:86:a0:18:96:34:56:02:c3:09:e0:16: e6:40:e6:a7:8c:32:6a:b7:ff:62:d8:32:50:9e:e0:55:92:83: 09:a6:f9:b6:89:34:d1:46:6a:f0:4b:01:81:02:5a:f1:a4:48: 6f:e1:aa:fa:c4:d0:73:d7:ac:42:fe:df:3b:b0:5b:62:0f:17: 32:f6:02:4e:08:f6:34:2b:49:67:46:4a:16:24:45:7b:f0:b3: 13:8a:34:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUwNTE1MDMwMjA1WhcNMjUwNTIyMDMwMjA1WjAYMRYwFAYD VQQDEw02ODI1NTkyZC0wODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NOqjKnun+qt+SqryqeH9gwrmFLEW6nR09ltjcHGa6t8xpgSv2Qi/dZsv3id Rm9Zd52iapvCBSfhlSJDwR1rmbK2R7skFdVbrYTKV3VEBnJDxytVqCZXlwGmNzP+ gBhk8CtwesrqjwWINmYELxw1SenNCT5Blm/OCT6NC/A+lerEV3CNfN/KYMqoW+UK 77EcjYW2L8NSd3yUetxJn7COcRWhM6MWfEKAxQyi4HdGSc/Z7/hyItnzX3AdVgNr RLqsKlfVD7Q02fko6rB1ehK0GOzFnwFmhjuvSqQz+d56eQKCN4gYLZ9ps1Yd032J zcYPS7TWfojam+NKCui/K5SNEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7aSNVt RLKYZYhh7mM+e/iEbDE7MB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV8X6Q+/X5P316THr9G4I8tNClEmnpuSuBqyA2zPvlCFgwnD6XEdIo rLV3riP+G5pm+Wf5fVOujkK0lKlY2btTcqL+zvcRY9LWYKsIE/0XxlIdQtw2p3T5 7359Oavf71h139GKXsEXDBJ80QuKXvH3HSEwOnRLf9Y7KzML6bWOiPfZLIXV93OF hlNQJq5PdmXkDG8MfHWTiUpAkS9OfPHNqzxotA3Bln/XhqAYljRWAsMJ4BbmQOan jDJqt/9i2DJQnuBVkoMJpvm2iTTRRmrwSwGBAlrxpEhv4ar6xNBz16xC/t87sFti Dxcy9gJOCPY0K0lnRkoWJEV78LMTijS/ -----END CERTIFICATE-----Generated at Fri May 16 14:43:56 2025 by rpki-client