$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: rpsa3dR3KySdJvzqvFuylT/feH2I9N11pB6tCthcyOI= Subject key identifier: 7C:FF:B8:FD:38:0A:C2:39:A1:B2:E5:48:D1:6D:AD:D2:B9:7B:6A:0A Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 075F Signing time: Mon 30 Jun 2025 21:55:01 +0000 Manifest this update: Mon 30 Jun 2025 21:55:00 +0000 Manifest next update: Mon 07 Jul 2025 21:55:00 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: SBa/AtVhGlP7CM9hWAMHjY4Y29QVQUmmz0nxa68T8lM=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: RF8Kiol9Bl+cT8NMkiixB2yHl7PyCHbWNwT/OTtymFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Jun 30 21:55:00 2025 GMT Not After : Jul 7 21:55:00 2025 GMT Subject: CN=686307b4-944d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:19:a2:1a:e9:0f:a3:0b:93:57:21:be:b8: 3f:0c:a2:fa:b3:7a:eb:92:1e:ac:b7:e0:7b:00:7d: 62:81:ac:7c:f0:35:44:8b:2d:4a:54:6b:4f:6d:58: db:eb:55:d7:d7:00:90:a7:ea:fc:b7:e0:bf:3d:91: 27:7a:b3:0e:4d:41:e3:05:00:e3:ad:2e:d1:da:48: b2:f2:2d:ed:a4:ea:f6:88:06:58:29:7a:39:fb:c7: d3:99:9b:bd:63:5c:d2:a2:89:d3:55:92:63:bf:c9: 57:cd:3d:81:26:3f:68:99:a1:48:b6:0c:3f:0a:be: eb:20:e8:14:1f:9d:dd:ff:bc:e2:61:1e:a2:88:a2: 35:9c:f0:9f:0a:49:e3:73:6b:82:13:0a:73:d1:d6: 1d:21:30:ac:65:ee:01:21:65:58:18:ab:06:b1:51: df:d4:4a:5a:71:2b:0a:96:08:14:26:ba:de:a5:9d: 80:18:33:ae:74:ff:be:34:98:e0:46:26:2f:34:ae: b8:21:f0:f2:9e:bb:e0:80:24:03:a6:e2:92:fe:ba: 26:95:96:8e:19:c1:7f:6b:e7:0f:2e:fb:f9:01:50: 49:15:b2:3f:f8:3a:c3:8f:97:c7:47:95:66:01:31: da:fc:17:af:5a:e5:08:b7:cd:6c:7c:dc:00:83:bf: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FF:B8:FD:38:0A:C2:39:A1:B2:E5:48:D1:6D:AD:D2:B9:7B:6A:0A X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e5:d7:5e:42:d1:5e:7f:df:18:ee:1c:e4:ef:f5:80:60:23: 49:cb:0c:cc:26:41:1d:47:72:ae:9f:3e:c4:b0:9e:ce:0f:24: 71:fe:d9:d2:70:12:4d:45:78:95:16:be:3a:6d:51:5d:35:2b: 39:d5:7f:5d:2d:2a:3c:69:8b:a4:fd:22:f8:58:39:19:04:6d: f3:79:1e:69:e8:f1:f4:8e:ff:0c:27:db:7c:15:9e:34:f7:01: 71:68:97:a8:86:ba:10:15:20:11:7b:ba:db:7a:39:85:5f:69: 17:0c:63:17:3c:cd:88:a9:bc:26:91:b9:03:ea:29:1e:d3:e1: 1a:0d:c1:ee:7b:db:62:4b:14:c0:bd:22:08:0b:a0:ff:2b:19: 07:c4:52:8d:ff:5b:ee:8a:d8:47:1b:63:32:dd:4b:a3:01:bc: 94:c1:a6:3d:06:7d:f4:74:ee:9c:bf:e5:67:70:ee:31:0b:3c: b7:9d:e7:3c:1d:33:43:90:cb:fc:70:1e:b2:bd:54:8e:82:69: f6:77:13:07:eb:f2:96:74:da:c7:3b:c5:9b:d9:07:3c:1d:64: fc:3c:4c:bd:cf:ca:9e:87:04:6f:78:da:49:c3:37:1f:69:b3: 9f:cb:90:9a:40:9f:f1:7b:02:0c:51:12:d7:84:80:43:c4:c1: ba:b2:3c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUwNjMwMjE1NTAwWhcNMjUwNzA3MjE1NTAwWjAYMRYwFAYD VQQDEw02ODYzMDdiNC05NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIwZohrpD6MLk1chvrg/DKL6s3rrkh6st+B7AH1igax88DVEiy1KVGtPbVjb 61XX1wCQp+r8t+C/PZEnerMOTUHjBQDjrS7R2kiy8i3tpOr2iAZYKXo5+8fTmZu9 Y1zSoonTVZJjv8lXzT2BJj9omaFItgw/Cr7rIOgUH53d/7ziYR6iiKI1nPCfCknj c2uCEwpz0dYdITCsZe4BIWVYGKsGsVHf1EpacSsKlggUJrrepZ2AGDOudP++NJjg RiYvNK64IfDynrvggCQDpuKS/romlZaOGcF/a+cPLvv5AVBJFbI/+DrDj5fHR5Vm ATHa/BevWuUIt81sfNwAg7/ATQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz/uP04 CsI5obLlSNFtrdK5e2oKMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp5ddeQtFef98Y7hzk7/WAYCNJywzMJkEdR3Kunz7EsJ7ODyRx/tnS cBJNRXiVFr46bVFdNSs51X9dLSo8aYuk/SL4WDkZBG3zeR5p6PH0jv8MJ9t8FZ40 9wFxaJeohroQFSARe7rbejmFX2kXDGMXPM2IqbwmkbkD6ike0+EaDcHue9tiSxTA vSIIC6D/KxkHxFKN/1vuithHG2My3UujAbyUwaY9Bn30dO6cv+VncO4xCzy3nec8 HTNDkMv8cB6yvVSOgmn2dxMH6/KWdNrHO8Wb2Qc8HWT8PEy9z8qehwRveNpJwzcf abOfy5CaQJ/xewIMURLXhIBDxMG6sjw+ -----END CERTIFICATE-----Generated at Tue Jul 1 14:47:55 2025 by rpki-client