$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: sLaIKjZfwM8u2I+wxRVEaEfeltQPZQRq2C1dWk1g9w8= Subject key identifier: AA:06:96:95:18:0A:66:CA:C1:0D:6A:27:46:31:63:05:F6:48:63:0A Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B14 Signing time: Sat 10 May 2025 19:01:07 +0000 Manifest this update: Sat 10 May 2025 19:01:07 +0000 Manifest next update: Sat 17 May 2025 19:01:07 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: KQhuH08NMqh6MQHpE7/0MxQHVQUzfwaERaE1qTwWycY=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: May 10 19:01:07 2025 GMT Not After : May 17 19:01:07 2025 GMT Subject: CN=681fa273-9848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:5a:79:53:90:d7:78:0b:10:18:06:be:4e: 1d:c8:01:66:34:e1:43:77:12:61:ce:96:61:47:b3: 8a:64:94:f6:60:1b:09:42:95:62:43:82:1e:2a:06: 39:5d:9b:10:3d:31:f7:c2:3c:3b:bb:a1:56:7d:31: 22:70:74:dc:9f:2d:eb:83:4f:f9:2c:5f:50:dd:dc: 86:86:2f:e4:1a:93:da:19:60:ed:5f:9d:19:06:b7: ee:9b:19:52:2b:56:42:44:b7:e8:87:4d:5b:cc:ef: 60:44:ef:79:bb:b5:1d:94:51:db:51:3b:2e:59:f4: e3:96:74:f5:c2:63:b9:99:37:4c:31:f3:b7:ad:a9: 89:a5:94:da:b7:9b:8e:44:0f:36:c7:ac:86:d6:fc: 87:6a:c1:8e:e0:ab:c5:70:5f:e9:7f:17:3e:a1:71: b2:50:53:d0:31:2a:42:be:fa:51:f1:a2:c5:f0:e2: 5a:d5:3f:aa:99:f8:ac:7d:d9:f4:2c:6a:09:b1:15: b7:42:80:47:cb:06:0a:c2:76:44:03:0a:16:6f:cb: ae:66:7f:b9:8c:77:c9:8b:f0:5a:8a:91:a3:13:a8: b2:c3:9f:b6:1b:0f:0f:17:7d:8f:1a:73:d6:88:d5: f7:95:10:b5:7a:60:e4:98:ed:12:fa:01:c0:21:64: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:96:95:18:0A:66:CA:C1:0D:6A:27:46:31:63:05:F6:48:63:0A X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b0:e3:48:2a:04:29:c6:5c:6c:63:c5:bd:6d:cc:6d:0a:9e: 31:95:7c:8e:41:09:d4:24:47:e5:3b:aa:78:f8:0d:f7:58:56: a0:c1:f2:cd:d1:4e:0e:30:e0:11:57:e4:73:3f:4f:3b:2c:ff: 6e:2b:f8:cb:50:33:17:42:43:5a:a1:b4:a5:9a:7b:bf:6d:ba: 8f:3b:29:c5:04:66:ce:a8:13:09:6f:8d:25:93:a4:4c:70:44: 32:87:9a:a5:32:fd:37:3a:b4:30:a3:8d:e0:74:e6:b5:95:3a: ea:9f:fe:d7:d8:82:44:f2:45:be:09:c8:26:24:e6:38:5d:eb: 1d:c7:37:2c:a4:f8:40:2b:75:e3:4f:2a:6b:0e:36:a2:bb:9a: f4:25:fd:e6:2f:f4:14:13:ce:ea:05:b1:0e:ef:90:15:f5:8a: 18:2b:64:a4:36:a5:2a:bc:3f:b7:8c:6a:76:b3:87:70:24:8d: 08:87:0c:c7:55:80:9a:7d:12:c4:50:87:5d:58:00:1b:5e:2b: 82:81:04:59:a6:cd:56:d2:07:eb:9a:81:ea:3f:d6:08:60:84: 19:2a:e8:c1:73:90:f0:b4:31:0d:2d:f6:f8:43:59:31:c8:9d: 35:b9:ed:59:b6:97:35:9c:0a:c3:ba:43:c7:e0:d3:8a:6d:d3: 90:23:ae:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUwNTEwMTkwMTA3WhcNMjUwNTE3MTkwMTA3WjAYMRYwFAYD VQQDEw02ODFmYTI3My05ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRhaeVOQ13gLEBgGvk4dyAFmNOFDdxJhzpZhR7OKZJT2YBsJQpViQ4IeKgY5 XZsQPTH3wjw7u6FWfTEicHTcny3rg0/5LF9Q3dyGhi/kGpPaGWDtX50ZBrfumxlS K1ZCRLfoh01bzO9gRO95u7UdlFHbUTsuWfTjlnT1wmO5mTdMMfO3ramJpZTat5uO RA82x6yG1vyHasGO4KvFcF/pfxc+oXGyUFPQMSpCvvpR8aLF8OJa1T+qmfisfdn0 LGoJsRW3QoBHywYKwnZEAwoWb8uuZn+5jHfJi/BaipGjE6iyw5+2Gw8PF32PGnPW iNX3lRC1emDkmO0S+gHAIWRKJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoGlpUY CmbKwQ1qJ0YxYwX2SGMKMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUsONIKgQpxlxsY8W9bcxtCp4xlXyOQQnUJEflO6p4+A33WFagwfLN 0U4OMOARV+RzP087LP9uK/jLUDMXQkNaobSlmnu/bbqPOynFBGbOqBMJb40lk6RM cEQyh5qlMv03OrQwo43gdOa1lTrqn/7X2IJE8kW+CcgmJOY4XesdxzcspPhAK3Xj TyprDjaiu5r0Jf3mL/QUE87qBbEO75AV9YoYK2SkNqUqvD+3jGp2s4dwJI0IhwzH VYCafRLEUIddWAAbXiuCgQRZps1W0gfrmoHqP9YIYIQZKujBc5DwtDENLfb4Q1kx yJ01ue1Ztpc1nArDukPH4NOKbdOQI66a -----END CERTIFICATE-----Generated at Sun May 11 16:53:58 2025 by rpki-client