$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: Gi4ULu3vd5H4TOLyeXDxPR9rEq1j1rs5L0RjkACsN2k= Subject key identifier: 8F:DD:44:E4:C2:2A:93:E2:E9:34:8C:89:E3:C3:8F:B3:01:97:20:7E Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0322 Signing time: Tue 01 Jul 2025 01:45:49 +0000 Manifest this update: Tue 01 Jul 2025 01:45:49 +0000 Manifest next update: Tue 08 Jul 2025 01:45:49 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: 5Msk/UcQgcIMAAM6tsNKewu4Ko7NicBZ8cK4YjBZRBs=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: aPnt9G9PwhxXYMkZOwS2x4lOo/4L3AhIffLQ2SVs6TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Jul 1 01:45:49 2025 GMT Not After : Jul 8 01:45:49 2025 GMT Subject: CN=68633dcd-cc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:30:d3:a9:f8:57:3a:da:77:02:01:30:8e: 51:e3:77:67:22:f0:46:13:bc:9b:b5:1d:bb:e0:d0: 18:6b:f4:62:f1:4b:7a:1d:a3:ad:bc:65:5b:6b:26: a7:1b:3a:90:ab:30:5f:14:21:ea:37:9b:36:41:59: 5a:29:e9:cd:33:0a:5c:f0:fc:ff:c4:8b:b0:4c:1f: 55:75:7a:06:0b:8b:51:f3:a6:d3:ed:09:4d:1d:60: 38:4c:3a:d5:82:92:00:24:c9:38:1c:07:3c:5d:84: ee:d0:63:31:37:ec:96:cd:40:e4:99:b1:76:21:86: 36:76:00:9a:1b:80:a8:03:a3:0f:45:24:20:bf:15: ea:2c:3e:31:27:f5:5c:8f:b0:81:c1:40:33:7f:f3: d7:30:c4:a3:44:39:9f:c5:67:76:e2:fb:5b:9f:32: fc:5c:14:c0:fa:83:87:41:4c:4c:09:62:9d:04:e3: 37:8d:5b:a8:ce:7f:dd:73:dc:a7:aa:a9:6c:76:8b: cb:c4:4d:15:23:1c:fa:5e:28:4f:6a:48:0f:5b:67: 6a:9c:eb:61:45:15:ec:3a:17:1c:42:31:f4:33:a8: 44:76:f8:27:16:19:bf:e2:06:d1:90:1f:79:cd:93: 8b:02:b9:4e:42:8b:d5:44:60:9a:c1:a2:59:ae:d2: 61:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DD:44:E4:C2:2A:93:E2:E9:34:8C:89:E3:C3:8F:B3:01:97:20:7E X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f4:1b:5a:c8:8b:5e:7f:08:ae:7e:4f:9d:39:74:cb:2a:ce: 50:57:bf:5b:d1:04:3b:07:f3:87:9f:95:36:83:bd:8c:2d:db: 82:24:d3:13:f8:4e:f1:c6:b7:4b:b8:67:a3:ee:8e:36:3e:e3: 67:c9:6d:21:47:d9:89:b2:28:63:a8:eb:14:13:00:63:16:0a: af:b5:f3:fc:82:08:b2:d5:93:7f:90:c7:9f:4c:f4:41:c1:e1: 54:2c:13:62:97:76:da:fe:98:cb:ca:c6:41:19:19:82:2e:f5: f6:11:00:03:8d:e9:98:5c:88:98:8a:d0:66:bc:8d:51:ed:9f: 34:9b:24:e4:5b:28:80:0c:7d:64:41:b5:c8:cf:98:99:42:5d: 67:86:8b:37:0f:37:27:ca:8e:fd:49:75:cb:04:a0:87:a9:99: 2e:10:ba:3b:38:e8:31:c7:30:7c:b4:cb:ac:21:3b:07:39:f8: c9:90:77:f5:8c:67:f6:62:6e:7b:7a:93:b1:ee:3d:ea:1a:61: ae:af:a8:6e:16:99:65:d3:5f:ff:5f:3a:9e:3f:0a:8b:2a:83: 59:0e:20:1d:07:8c:cf:c3:b6:96:f6:11:24:7c:77:de:8e:6c: dd:7e:a9:75:14:38:f8:9f:01:66:ae:30:10:cd:04:58:37:a2: 16:0f:a9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwNzAxMDE0NTQ5WhcNMjUwNzA4MDE0NTQ5WjAYMRYwFAYD VQQDEw02ODYzM2RjZC1jYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAww06n4VzradwIBMI5R43dnIvBGE7ybtR274NAYa/Ri8Ut6HaOtvGVbayan GzqQqzBfFCHqN5s2QVlaKenNMwpc8Pz/xIuwTB9VdXoGC4tR86bT7QlNHWA4TDrV gpIAJMk4HAc8XYTu0GMxN+yWzUDkmbF2IYY2dgCaG4CoA6MPRSQgvxXqLD4xJ/Vc j7CBwUAzf/PXMMSjRDmfxWd24vtbnzL8XBTA+oOHQUxMCWKdBOM3jVuozn/dc9yn qqlsdovLxE0VIxz6XihPakgPW2dqnOthRRXsOhccQjH0M6hEdvgnFhm/4gbRkB95 zZOLArlOQovVRGCawaJZrtJh3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/dROTC KpPi6TSMiePDj7MBlyB+MB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU9BtayItefwiufk+dOXTLKs5QV79b0QQ7B/OHn5U2g72MLduCJNMT +E7xxrdLuGej7o42PuNnyW0hR9mJsihjqOsUEwBjFgqvtfP8ggiy1ZN/kMefTPRB weFULBNil3ba/pjLysZBGRmCLvX2EQADjemYXIiYitBmvI1R7Z80myTkWyiADH1k QbXIz5iZQl1nhos3Dzcnyo79SXXLBKCHqZkuELo7OOgxxzB8tMusITsHOfjJkHf1 jGf2Ym57epOx7j3qGmGur6huFpll01//XzqePwqLKoNZDiAdB4zPw7aW9hEkfHfe jmzdfql1FDj4nwFmrjAQzQRYN6IWD6lK -----END CERTIFICATE-----Generated at Tue Jul 1 18:33:40 2025 by rpki-client