$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json) Hash identifier: aFZ5URc6bbY9W6lRky31CTnql94MnAECzAP6SUD5GUA= Subject key identifier: A5:9B:35:DB:E8:85:42:BE:E6:9A:22:6E:F7:AC:9F:35:5A:52:91:3D Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft Manifest number: 3C Signing time: Thu 03 Jul 2025 07:46:33 +0000 Manifest this update: Thu 03 Jul 2025 07:46:33 +0000 Manifest next update: Thu 10 Jul 2025 07:46:33 +0000 Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: twiOEIiTqfgbb4PvsSLgt3rPpSBW221HitOZBhYq/AQ=) 2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 9OScaduExEngNPz5wsuWcHvwLQIw8gltPcbBA5tFHWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2 Validity Not Before: Jul 3 07:46:33 2025 GMT Not After : Jul 10 07:46:33 2025 GMT Subject: CN=68663559-fda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:e1:e6:f7:dc:d8:05:76:a8:09:93:b3:c3: a0:b5:c3:19:c1:d1:3b:9e:c1:f3:57:68:73:5c:4c: 72:71:b1:2e:32:de:76:4c:4a:88:b7:bb:0c:c2:b8: 22:80:5d:93:06:9f:bb:57:da:83:51:6e:99:9b:68: 64:18:dc:80:2c:e7:2e:eb:81:04:0b:c2:e4:a7:b9: 59:11:eb:98:39:de:d4:39:a8:85:8a:ec:20:99:f2: cb:51:4f:48:d1:94:56:75:71:cd:1c:1e:96:15:bb: 49:7b:9d:33:b9:d2:60:ba:4e:ed:35:6c:15:04:3b: 88:f9:39:5e:d7:17:a3:54:f5:a5:d4:6d:d3:60:a4: 38:69:18:a7:28:3f:97:72:94:b8:b0:80:67:20:5a: 1a:98:fe:3c:d1:65:b1:ab:51:8b:98:5e:8d:85:ff: 58:f0:39:76:d1:f3:bd:1d:f0:57:ec:39:5f:99:fa: 25:c8:5d:6a:68:71:c1:a7:43:0e:48:ee:aa:c1:8a: e6:a5:97:15:dc:bb:46:55:64:36:c3:31:3d:54:6c: 57:47:e8:cf:90:62:6a:79:d3:11:f5:11:ef:81:b7: 40:eb:da:cf:4f:88:bd:87:00:92:ef:ed:48:8c:12: 9b:3b:e7:ea:3d:bd:94:13:0f:00:79:42:c3:7e:5b: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9B:35:DB:E8:85:42:BE:E6:9A:22:6E:F7:AC:9F:35:5A:52:91:3D X509v3 Authority Key Identifier: keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:d5:6b:b3:b7:8e:65:e1:27:88:68:24:f1:0d:2e:f7:65: 68:ab:38:54:f6:39:d6:ac:63:7f:9a:61:75:5b:44:9f:43:a3: 27:5c:cc:8a:67:17:14:de:ff:a1:c5:29:7d:7f:fa:16:7f:9b: 46:2f:9b:86:20:9d:3e:05:e1:52:30:88:56:25:85:02:b8:0b: 11:a0:c4:3a:10:03:9b:88:2d:8b:1c:95:c6:78:30:22:36:5a: ab:b9:3d:5e:99:13:fd:32:c3:1d:09:41:2d:d7:32:44:75:ae: 09:27:05:df:c9:f7:04:73:4d:9a:2f:91:00:42:50:d8:6a:84: 1e:ca:d3:b4:1f:2b:7a:84:04:e9:b4:55:ee:0e:27:01:4c:85: 47:78:93:3c:2a:c5:85:d5:f6:1a:c5:64:43:65:82:d9:a2:17: 50:3a:3d:e7:b1:1a:94:f1:5f:34:fe:70:47:ba:ed:05:49:01: 3e:99:4b:03:90:9a:dc:06:f8:78:84:d7:ce:1c:de:2a:96:95: 23:19:a0:c4:69:33:c5:07:49:7b:4e:61:b1:43:83:1e:ac:4e: 7e:e9:b9:ca:16:c2:da:08:ab:6c:ce:79:83:97:9d:a1:8d:b0: 3d:30:e1:f4:b0:51:fd:e8:be:af:8f:da:05:36:33:62:b7:73: 95:a8:58:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEZEODExMC8GA1UEBRMoODA0NjMwNzREODNGNUU4MDM1NEQxOTcwNTg2RjU0QTg5 NjVFMThEMjAeFw0yNTA3MDMwNzQ2MzNaFw0yNTA3MTAwNzQ2MzNaMBgxFjAUBgNV BAMTDTY4NjYzNTU5LWZkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8aOHm99zYBXaoCZOzw6C1wxnB0TuewfNXaHNcTHJxsS4y3nZMSoi3uwzCuCKA XZMGn7tX2oNRbpmbaGQY3IAs5y7rgQQLwuSnuVkR65g53tQ5qIWK7CCZ8stRT0jR lFZ1cc0cHpYVu0l7nTO50mC6Tu01bBUEO4j5OV7XF6NU9aXUbdNgpDhpGKcoP5dy lLiwgGcgWhqY/jzRZbGrUYuYXo2F/1jwOXbR870d8FfsOV+Z+iXIXWpoccGnQw5I 7qrBiuallxXcu0ZVZDbDMT1UbFdH6M+QYmp50xH1Ee+Bt0Dr2s9PiL2HAJLv7UiM Eps75+o9vZQTDwB5QsN+W0eVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpZs12+iF Qr7mmiJu96yfNVpSkT0wHwYDVR0jBBgwFoAUgEYwdNg/XoA1TRlwWG9UqJZeGNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RkQ4L0YzNTEyQTBBRkND NTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9BMVRSbHdXRzlVcUpaZUdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0VZd2ROZ19Yb0ExVFJsd1dHOVVxSlplR05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RkQ4L0YzNTEyQTBBRkNDNTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9B MVRSbHdXRzlVcUpaZUdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzR1Wuzt45l4SeIaCTxDS73ZWirOFT2OdasY3+aYXVbRJ9DoydczIpn FxTe/6HFKX1/+hZ/m0Yvm4YgnT4F4VIwiFYlhQK4CxGgxDoQA5uILYsclcZ4MCI2 Wqu5PV6ZE/0ywx0JQS3XMkR1rgknBd/J9wRzTZovkQBCUNhqhB7K07QfK3qEBOm0 Ve4OJwFMhUd4kzwqxYXV9hrFZENlgtmiF1A6PeexGpTxXzT+cEe67QVJAT6ZSwOQ mtwG+HiE184c3iqWlSMZoMRpM8UHSXtOYbFDgx6sTn7pucoWwtoIq2zOeYOXnaGN sD0w4fSwUf3ovq+P2gU2M2K3c5WoWMQ= -----END CERTIFICATE-----Generated at Fri Jul 4 22:18:25 2025 by rpki-client