$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: 1vflA+hv/kQ8ySgr7u511EutmuXTr2/W9qm3ArTwC2Q= Subject key identifier: AE:43:BE:96:9F:F8:51:50:5B:83:C1:27:13:E4:AC:BE:DC:CB:CE:26 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0D1A Signing time: Wed 02 Jul 2025 18:16:50 +0000 Manifest this update: Wed 02 Jul 2025 18:16:49 +0000 Manifest next update: Wed 09 Jul 2025 18:16:49 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: mY44ndxOHGDqIRQZ9qysreVnqvk/Rs33FyAAH6XR7GA=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: VZ24W4uKwM60qRJ5vfKCX9lh+SGHmx0HfVlijTJVzIY=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: 4yWetI8VRw7mXlPSVbHYiXd6wjj+BvrR9fES4qn/WNo=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: DgvkkBXnQUs6910aIZGV/GX1Y7PZj78ZOyie/aItMGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Jul 2 18:16:49 2025 GMT Not After : Jul 9 18:16:49 2025 GMT Subject: CN=68657791-1e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:04:0f:01:60:a2:43:31:28:98:89:1b:f2:6b: 0d:f6:f5:27:29:ef:1b:62:d1:55:9e:9b:74:80:53: 2e:63:45:be:94:72:8c:00:e0:9d:66:1f:8e:3a:21: 51:17:0e:27:ff:7b:e4:47:61:13:80:4d:74:00:ce: ec:fe:73:e5:8f:8c:07:4d:90:b0:55:c1:85:04:13: db:32:34:92:c0:93:15:4c:96:a3:64:85:0e:12:9e: 95:85:cc:2d:e5:5d:6b:1c:58:52:b5:e0:28:31:06: 24:10:13:ce:17:3a:13:79:bd:71:d3:48:82:96:41: da:fb:c8:51:1b:b3:e7:0d:b0:13:19:ad:ad:8d:c9: 8b:f9:1a:b6:9b:b8:68:fb:2d:65:78:01:5a:72:1e: 47:da:1a:8e:14:7f:0c:a0:ea:ed:03:c4:e6:11:90: 85:bb:22:81:7c:ab:b5:da:fc:df:7e:6d:42:70:58: e1:a0:98:1b:3a:8d:6e:3a:f9:ec:a4:86:bd:df:81: 9a:3f:22:a0:c0:f2:2c:23:2c:34:d3:2b:eb:fc:da: 84:9b:47:54:01:c5:dd:be:3a:a8:6b:ca:04:a3:f0: c1:ba:82:41:fc:18:fc:44:20:57:ee:e9:75:ff:7c: 4b:ea:3f:d7:7b:60:1d:e2:52:63:f7:ad:7a:1d:47: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:43:BE:96:9F:F8:51:50:5B:83:C1:27:13:E4:AC:BE:DC:CB:CE:26 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:25:5c:fb:54:53:5a:46:89:c6:dc:60:3f:05:c3:66:8b:48: fe:3c:18:8a:7a:c4:09:70:ed:e9:5a:86:5c:a9:b0:8a:b7:f6: 35:23:9c:01:bd:00:8c:c5:63:86:ce:a2:3c:05:7c:40:31:73: ea:52:4a:24:59:0e:20:e6:af:dd:b9:2a:99:5c:e4:5a:90:e6: 05:3f:3f:e3:83:db:d2:98:d0:b9:00:b8:92:7c:a3:0a:81:f3: a6:59:19:b6:22:04:cb:22:4d:4b:d1:8a:47:7f:65:74:da:b9: b2:83:dc:0a:91:f2:d0:12:cb:66:6d:19:70:11:90:6c:96:8a: bb:47:06:3f:5c:ef:c1:6d:64:55:15:c5:52:55:cf:50:df:0b: 66:6e:7c:6a:13:35:94:b2:46:a0:37:6d:15:a1:b6:a4:84:59: 99:91:3c:20:38:73:7e:6d:cf:c3:e1:c4:7b:bf:de:ab:66:89: c7:f3:46:cc:6b:76:14:ed:70:fd:11:b9:10:5c:c1:1a:25:23: a6:8e:78:91:82:1f:a4:df:19:51:ec:c3:07:8a:97:ee:33:b8: 1d:ad:60:79:af:f0:ff:7b:47:7b:38:fe:f5:ee:0e:f8:92:bc: 3a:05:94:c6:e8:2a:84:af:79:d3:df:52:8c:63:ca:f5:c6:90: 0a:bc:d9:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNzAyMTgxNjQ5WhcNMjUwNzA5MTgxNjQ5WjAYMRYwFAYD VQQDEw02ODY1Nzc5MS0xZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7AQPAWCiQzEomIkb8msN9vUnKe8bYtFVnpt0gFMuY0W+lHKMAOCdZh+OOiFR Fw4n/3vkR2ETgE10AM7s/nPlj4wHTZCwVcGFBBPbMjSSwJMVTJajZIUOEp6Vhcwt 5V1rHFhSteAoMQYkEBPOFzoTeb1x00iClkHa+8hRG7PnDbATGa2tjcmL+Rq2m7ho +y1leAFach5H2hqOFH8MoOrtA8TmEZCFuyKBfKu12vzffm1CcFjhoJgbOo1uOvns pIa934GaPyKgwPIsIyw00yvr/NqEm0dUAcXdvjqoa8oEo/DBuoJB/Bj8RCBX7ul1 /3xL6j/Xe2Ad4lJj9616HUdaXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5Dvpaf +FFQW4PBJxPkrL7cy84mMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBJVz7VFNaRonG3GA/BcNmi0j+PBiKesQJcO3pWoZcqbCKt/Y1I5wB vQCMxWOGzqI8BXxAMXPqUkokWQ4g5q/duSqZXORakOYFPz/jg9vSmNC5ALiSfKMK gfOmWRm2IgTLIk1L0YpHf2V02rmyg9wKkfLQEstmbRlwEZBsloq7RwY/XO/BbWRV FcVSVc9Q3wtmbnxqEzWUskagN20VobakhFmZkTwgOHN+bc/D4cR7v96rZonH80bM a3YU7XD9EbkQXMEaJSOmjniRgh+k3xlR7MMHipfuM7gdrWB5r/D/e0d7OP717g74 krw6BZTG6CqEr3nT31KMY8r1xpAKvNn2 -----END CERTIFICATE-----Generated at Fri Jul 4 00:50:48 2025 by rpki-client