$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json) Hash identifier: dFXLDuvmTUR62uLBM/gD5ijkWXxBjtbgR2K9fcp8HvE= Subject key identifier: EC:F9:6F:26:8C:88:D4:7B:39:42:B0:4A:AF:5C:C0:4D:D8:BA:39:8E Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft Manifest number: 011D Signing time: Thu 15 May 2025 04:06:09 +0000 Manifest this update: Thu 15 May 2025 04:06:09 +0000 Manifest next update: Thu 22 May 2025 04:06:09 +0000 Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: WTdBgX1WniZiGp5G7Gsz5XcT0WtbMimaYv2BG+FWcAs=) 2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE Validity Not Before: May 15 04:06:09 2025 GMT Not After : May 22 04:06:09 2025 GMT Subject: CN=68256831-954a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:31:83:ca:03:02:ed:7e:85:f9:ec:f3:b9: 1f:9e:7b:48:53:bf:a9:4b:75:69:4c:5f:8d:16:12: 5d:ee:7b:40:31:35:40:fa:4e:a6:4e:25:83:9e:ee: c2:d6:60:e7:cc:78:1c:8f:fa:30:01:c0:2f:73:8c: f2:5a:ce:6d:f7:46:f3:07:0a:8c:3c:96:b5:ef:9f: 19:20:ab:7a:b3:de:ae:38:1e:70:09:7b:a3:12:5d: 01:69:3e:69:aa:c3:7d:79:00:2e:af:45:05:8a:75: 8c:2a:fe:09:09:5e:60:34:2c:3e:62:6b:30:0c:11: a5:2a:79:11:aa:03:b5:91:c1:e4:3a:77:3e:db:81: b8:a7:fd:09:a9:42:d9:81:d9:b7:82:df:de:9d:3e: c6:2c:87:e5:30:15:25:80:d1:e6:f1:f6:1c:4f:38: 2e:4c:a2:b1:8b:ae:a9:ed:f0:89:f8:43:a4:bf:28: bb:f0:51:97:41:7a:36:5e:fe:5e:b0:8e:e6:97:0f: ef:7b:fa:96:78:6c:9c:52:6f:02:60:83:09:13:fd: a3:27:91:84:94:99:2e:7e:99:9a:92:f0:eb:c4:03: 23:bc:83:9f:51:61:cf:02:d8:4c:93:17:08:0a:84: 98:31:2d:29:93:16:a0:e6:5f:77:56:3b:ba:c6:77: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F9:6F:26:8C:88:D4:7B:39:42:B0:4A:AF:5C:C0:4D:D8:BA:39:8E X509v3 Authority Key Identifier: keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cb:7d:87:ca:8d:a3:b3:b5:0b:7a:f3:c3:e7:70:87:ff:20: 11:2f:ef:90:95:20:44:ff:7d:39:04:24:22:07:4d:da:9a:c5: d2:ce:69:d6:20:0a:cb:32:45:38:d1:7e:c4:a4:91:0c:db:d9: 19:84:23:4d:7c:4d:d3:60:4b:5c:5f:13:48:65:29:37:98:23: 5d:11:d3:60:54:2d:31:17:9c:b7:64:c5:38:9d:5c:71:88:ab: 84:a4:7c:d6:63:df:5a:81:88:ca:3f:21:75:9a:dd:87:88:b2: be:45:56:22:d9:cc:1a:de:3d:a9:33:23:d9:16:79:7e:1c:a4: 75:e4:92:b6:40:5d:fa:75:eb:6a:96:26:56:73:fb:12:34:eb: 11:5c:45:13:c1:2b:52:ca:b9:bf:f9:a9:66:26:cd:e5:f8:c5: 89:55:cd:77:52:31:47:d4:0a:e0:42:97:dd:40:34:7f:64:08: 41:cb:2a:01:2e:43:ee:9d:8a:be:83:29:d0:40:31:0d:f4:19: b9:49:fa:8b:9a:d2:c5:b5:b3:0a:61:a6:1d:92:76:01:ac:79: 7c:31:d6:c3:0a:c8:1c:bb:b2:5e:cc:a4:70:ef:60:29:9f:db: 8d:1e:83:d7:b6:62:c6:31:87:25:7b:2e:78:36:5d:35:24:aa: 18:0f:f5:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQwOEExMTAvBgNVBAUTKDgxNkE0NzhEODZFN0UyMUJGMzE3ODUxMEI4NTg1MzI1 NTgzNDMwRUUwHhcNMjUwNTE1MDQwNjA5WhcNMjUwNTIyMDQwNjA5WjAYMRYwFAYD VQQDEw02ODI1NjgzMS05NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Joxg8oDAu1+hfns87kfnntIU7+pS3VpTF+NFhJd7ntAMTVA+k6mTiWDnu7C 1mDnzHgcj/owAcAvc4zyWs5t90bzBwqMPJa1758ZIKt6s96uOB5wCXujEl0BaT5p qsN9eQAur0UFinWMKv4JCV5gNCw+YmswDBGlKnkRqgO1kcHkOnc+24G4p/0JqULZ gdm3gt/enT7GLIflMBUlgNHm8fYcTzguTKKxi66p7fCJ+EOkvyi78FGXQXo2Xv5e sI7mlw/ve/qWeGycUm8CYIMJE/2jJ5GElJkufpmakvDrxAMjvIOfUWHPAthMkxcI CoSYMS0pkxag5l93Vju6xne2YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz5byaM iNR7OUKwSq9cwE3YujmOMB8GA1UdIwQYMBaAFIFqR42G5+Ib8xeFELhYUyVYNDDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDA4QS9DMEY0RTg2NDc4 OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRodnpGNFVRdUZoVEpWZzBN TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dXcEhqWWJuNGh2ekY0VVF1RmhUSlZnME1PNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDA4QS9DMEY0RTg2NDc4OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRo dnpGNFVRdUZoVEpWZzBNTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChy32Hyo2js7ULevPD53CH/yARL++QlSBE/305BCQiB03amsXSzmnW IArLMkU40X7EpJEM29kZhCNNfE3TYEtcXxNIZSk3mCNdEdNgVC0xF5y3ZMU4nVxx iKuEpHzWY99agYjKPyF1mt2HiLK+RVYi2cwa3j2pMyPZFnl+HKR15JK2QF36detq liZWc/sSNOsRXEUTwStSyrm/+almJs3l+MWJVc13UjFH1ArgQpfdQDR/ZAhByyoB LkPunYq+gynQQDEN9Bm5SfqLmtLFtbMKYaYdknYBrHl8MdbDCsgcu7JezKRw72Ap n9uNHoPXtmLGMYcley54Nl01JKoYD/VE -----END CERTIFICATE-----Generated at Thu May 15 22:21:55 2025 by rpki-client