$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: 2/bz3Mjv4J4AO4hqgM22GQ4UxRgI0aYya66r6fSoA28= Subject key identifier: E0:BB:A6:0C:77:AB:C7:B3:9C:47:79:4E:3F:46:2C:A0:F0:01:58:D2 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 0846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 083D Signing time: Mon 30 Jun 2025 20:57:58 +0000 Manifest this update: Mon 30 Jun 2025 20:57:57 +0000 Manifest next update: Mon 07 Jul 2025 20:57:57 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: GtTBVEcD9zhUHMEXQ0r61DTfFE2Y6eblgvy1rG5kcU0=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: UaoBno6EmWaBFcw5TBVRPYFiWGMBoSDzhu3pQGtDygg=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: 4fGi9gJaC/oEbDcGBoBEInsd7LIWjlkoV1ytai5f/QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Jun 30 20:57:57 2025 GMT Not After : Jul 7 20:57:57 2025 GMT Subject: CN=6862fa56-9b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:51:da:65:5b:1a:51:84:2f:a7:b2:5a:89: e6:3c:07:fb:05:37:de:55:aa:58:e9:de:ad:85:66: 37:d6:ae:d4:96:89:a3:bc:18:5b:fe:a7:18:4f:e0: 7e:39:2f:2b:31:94:b7:e4:7e:f5:ab:f8:ec:c6:b2: 1f:ca:9a:87:86:62:bf:6d:68:f5:5a:ee:dd:a9:97: 1e:1e:99:90:2e:11:c9:4b:f4:de:32:c3:4d:47:05: 60:47:e5:9a:28:80:5b:e9:ba:b4:db:87:81:2d:59: 5d:5a:5c:9f:db:8b:ed:87:4d:ff:e5:80:e2:17:f3: 30:49:f4:11:98:65:d8:d1:26:50:e4:c1:df:a3:b2: 23:f0:0a:94:6d:46:c7:bb:91:c7:33:ee:8b:2e:f6: 70:05:10:d8:16:be:63:80:73:51:72:97:e8:9e:5b: c7:f9:c6:38:11:09:c5:00:b7:c8:47:4c:1f:e8:ed: 4e:4d:36:d1:52:d6:af:4f:11:e9:ba:52:57:e4:9d: c9:ee:8c:c1:ce:88:4d:b1:67:68:2b:99:50:e6:ff: 98:83:a5:c5:4a:3f:ec:c8:16:19:ce:c4:d1:7f:50: 8f:2d:74:c8:95:0d:8b:b2:c4:f1:cb:16:18:10:2a: 34:db:d1:f9:93:01:d0:86:ff:3d:9d:13:d2:60:0f: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BB:A6:0C:77:AB:C7:B3:9C:47:79:4E:3F:46:2C:A0:F0:01:58:D2 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:52:6b:85:af:7c:ec:38:79:04:ba:ee:9e:df:f0:15:b6:a2: 48:0f:34:42:cf:50:00:ba:d0:38:6d:49:45:a3:f3:8c:17:07: 5f:72:7e:6b:10:86:6b:2b:6b:87:03:29:94:ae:f6:ea:f3:24: d9:b9:d7:90:12:38:66:7a:d4:5e:c8:de:4d:cf:22:ee:48:f5: d8:af:a5:ce:98:83:4b:22:80:3c:1d:cb:5e:0a:34:b4:bc:59: 93:77:39:c9:1b:01:50:5c:d1:a8:be:f1:ff:96:aa:68:84:fd: 89:7a:dd:05:11:74:d1:9c:1e:23:f5:5e:8a:1a:ab:d2:a5:7b: 51:a6:6f:f6:3c:b5:35:e3:6f:38:08:ce:f6:7f:e3:88:e6:3e: b4:59:91:74:03:0c:e7:8c:9a:b0:da:21:63:01:10:b6:0c:a9: 72:40:fa:67:a4:5b:29:62:cd:c2:4e:55:e5:af:46:3e:30:fa: 06:45:34:6c:f5:80:df:c8:c4:42:2b:fa:79:04:33:9d:b8:79: f5:50:2e:7b:7a:ad:b9:60:86:8c:35:36:30:63:79:d5:93:40: cc:c5:2c:85:a4:17:2a:bb:74:57:e1:e9:59:b9:1b:66:2c:33: 6c:8a:a1:d3:8b:bc:0a:64:bd:78:03:39:e8:f6:dd:c8:fd:97: 61:46:c3:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwNjMwMjA1NzU3WhcNMjUwNzA3MjA1NzU3WjAYMRYwFAYD VQQDEw02ODYyZmE1Ni05YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwdR2mVbGlGEL6eyWonmPAf7BTfeVapY6d6thWY31q7UlomjvBhb/qcYT+B+ OS8rMZS35H71q/jsxrIfypqHhmK/bWj1Wu7dqZceHpmQLhHJS/TeMsNNRwVgR+Wa KIBb6bq024eBLVldWlyf24vth03/5YDiF/MwSfQRmGXY0SZQ5MHfo7Ij8AqUbUbH u5HHM+6LLvZwBRDYFr5jgHNRcpfonlvH+cY4EQnFALfIR0wf6O1OTTbRUtavTxHp ulJX5J3J7ozBzohNsWdoK5lQ5v+Yg6XFSj/syBYZzsTRf1CPLXTIlQ2LssTxyxYY ECo029H5kwHQhv89nRPSYA/jDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC7pgx3 q8eznEd5Tj9GLKDwAVjSMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhUmuFr3zsOHkEuu6e3/AVtqJIDzRCz1AAutA4bUlFo/OMFwdfcn5r EIZrK2uHAymUrvbq8yTZudeQEjhmetReyN5NzyLuSPXYr6XOmINLIoA8HcteCjS0 vFmTdznJGwFQXNGovvH/lqpohP2Jet0FEXTRnB4j9V6KGqvSpXtRpm/2PLU14284 CM72f+OI5j60WZF0AwznjJqw2iFjARC2DKlyQPpnpFspYs3CTlXlr0Y+MPoGRTRs 9YDfyMRCK/p5BDOduHn1UC57eq25YIaMNTYwY3nVk0DMxSyFpBcqu3RX4elZuRtm LDNsiqHTi7wKZL14Azno9t3I/ZdhRsNL -----END CERTIFICATE-----Generated at Tue Jul 1 22:34:30 2025 by rpki-client