$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft File: gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json) Hash identifier: jeBNxBERbY4wTw/a5x25ScLoX9VOFYZ5UGNV/jwAjWo= Subject key identifier: 67:0B:1C:87:8D:74:67:81:F6:E3:E3:11:9C:EC:7B:57:DD:CD:13:E0 Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft Manifest number: 0168 Signing time: Sat 05 Jul 2025 04:16:00 +0000 Manifest this update: Sat 05 Jul 2025 04:15:59 +0000 Manifest next update: Sat 12 Jul 2025 04:15:59 +0000 Files and hashes: 1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: jnuLeg9l8kantmWsfX0W9pQE1jyQou6nkqx4lVzOneQ=) 2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: nHROj80zbbVn2fC+9G1lpLSWVwTbw64VZhVPZYK842c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Validity Not Before: Jul 5 04:15:59 2025 GMT Not After : Jul 12 04:15:59 2025 GMT Subject: CN=6868a700-a928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:b6:95:73:0a:90:9e:62:f0:b3:cf:c6:66: 71:72:5d:e8:d8:8c:9f:99:0d:32:46:d6:65:73:cb: 25:22:43:4b:be:83:d4:e8:d3:b0:06:3e:58:8f:2e: bf:52:81:d6:1b:46:7e:6b:31:6d:df:5c:2e:aa:4b: 68:c0:56:5e:44:89:ee:2c:31:06:36:2f:38:00:a3: 5f:e9:8e:17:25:5e:d0:5a:e4:62:8b:de:f3:34:aa: d8:1e:d3:6c:a4:58:f5:19:7c:8e:82:7c:65:5d:19: 9c:7c:c7:f6:a4:ea:87:ce:99:98:fb:91:ba:8e:f9: 53:84:55:77:ee:c1:c8:64:eb:77:8a:8b:1d:f7:7b: ae:fb:46:a4:b1:c2:10:88:e7:be:ea:00:36:24:29: 27:7b:52:7e:a2:52:27:2e:ce:3d:eb:59:ea:52:64: 7e:f5:d3:c3:5b:08:a3:5b:bf:43:94:41:f8:c2:a0: 6b:29:c0:10:15:e6:c0:b9:30:e8:b2:e9:f6:b2:6c: 14:53:26:eb:98:1f:19:43:a1:bc:0b:b1:a4:06:e1: de:ff:87:97:d3:78:1c:f2:b5:73:e3:b7:83:45:24: e2:f2:87:50:b8:f6:75:fc:ee:a3:81:d0:5f:4c:06: b9:00:4c:b5:0b:ac:70:87:83:37:f0:da:33:bf:dd: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0B:1C:87:8D:74:67:81:F6:E3:E3:11:9C:EC:7B:57:DD:CD:13:E0 X509v3 Authority Key Identifier: keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fa:1a:51:0f:fd:b5:63:3f:d0:ce:91:ae:a1:d9:df:39:72: 1c:ae:55:35:b3:7f:93:ed:08:1c:31:18:18:65:fb:6d:34:bb: 5f:fb:47:df:19:25:8e:f4:f7:5e:ca:7a:d0:01:4e:0b:87:e7: b5:7d:02:65:fe:11:7e:be:5c:c4:00:45:f3:d1:e5:48:b1:27: 87:2b:b2:0b:35:82:c1:97:55:ee:e6:e1:14:33:dd:29:67:eb: 56:4b:4b:04:04:c5:70:a8:d2:30:e1:87:b5:2e:67:b2:ef:1b: e6:da:bc:fa:50:d3:9d:86:08:a0:7c:bf:7a:c2:65:8c:5b:94: f6:d0:d0:a7:78:cf:47:6d:ef:18:55:05:95:2c:16:42:b7:19: ea:9b:58:12:15:b1:35:04:1a:97:c4:2d:d1:9c:4d:7a:1f:18: ce:bc:4d:6f:00:b4:6c:a4:70:93:10:85:9c:27:b6:03:3d:8a: 21:93:52:18:c9:02:81:90:fd:50:18:57:b9:52:56:ce:ca:b8: 1c:41:33:8f:7a:5d:18:cf:2a:b5:0a:28:00:e4:7b:b8:43:b3: 62:4a:74:cf:0a:c7:02:12:61:0f:10:ce:ad:95:02:e8:65:0c: 0f:8e:3f:eb:ac:b3:a8:84:8c:4b:8e:f0:2f:5e:c8:8e:ad:75: cc:98:4a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MjQxMTAvBgNVBAUTKDgxRkY4NUVDQUVDQzUzREI3NDUzMDg2MDcxNDU1OUI3 RTUxODQ1NDEwHhcNMjUwNzA1MDQxNTU5WhcNMjUwNzEyMDQxNTU5WjAYMRYwFAYD VQQDEw02ODY4YTcwMC1hOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tG2lXMKkJ5i8LPPxmZxcl3o2IyfmQ0yRtZlc8slIkNLvoPU6NOwBj5Yjy6/ UoHWG0Z+azFt31wuqktowFZeRInuLDEGNi84AKNf6Y4XJV7QWuRii97zNKrYHtNs pFj1GXyOgnxlXRmcfMf2pOqHzpmY+5G6jvlThFV37sHIZOt3iosd93uu+0akscIQ iOe+6gA2JCkne1J+olInLs4961nqUmR+9dPDWwijW79DlEH4wqBrKcAQFebAuTDo sun2smwUUybrmB8ZQ6G8C7GkBuHe/4eX03gc8rVz47eDRSTi8odQuPZ1/O6jgdBf TAa5AEy1C6xwh4M38Nozv90gZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcLHIeN dGeB9uPjEZzse1fdzRPgMB8GA1UdIwQYMBaAFIH/heyuzFPbdFMIYHFFWbflGEVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcyNC84QUQxREI1ODQw OTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5dDBVd2hnY1VWWnQtVVlS VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmLUY3SzdNVTl0MFV3aGdjVVZadC1VWVJVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcyNC84QUQxREI1ODQwOTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5 dDBVd2hnY1VWWnQtVVlSVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+hpRD/21Yz/QzpGuodnfOXIcrlU1s3+T7QgcMRgYZfttNLtf+0ff GSWO9PdeynrQAU4Lh+e1fQJl/hF+vlzEAEXz0eVIsSeHK7ILNYLBl1Xu5uEUM90p Z+tWS0sEBMVwqNIw4Ye1Lmey7xvm2rz6UNOdhgigfL96wmWMW5T20NCneM9Hbe8Y VQWVLBZCtxnqm1gSFbE1BBqXxC3RnE16HxjOvE1vALRspHCTEIWcJ7YDPYohk1IY yQKBkP1QGFe5UlbOyrgcQTOPel0Yzyq1CigA5Hu4Q7NiSnTPCscCEmEPEM6tlQLo ZQwPjj/rrLOohIxLjvAvXsiOrXXMmEob -----END CERTIFICATE-----Generated at Sat Jul 5 21:24:09 2025 by rpki-client