$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json) Hash identifier: CXU0JLCM25rBFqKw+F5XrHdWl65rkVXyjulzqE305Uc= Subject key identifier: 78:A0:5A:54:D1:2B:20:B6:FD:1E:2F:2D:49:D8:99:E7:EF:43:E4:8B Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft Manifest number: 0452 Signing time: Tue 01 Jul 2025 00:48:09 +0000 Manifest this update: Tue 01 Jul 2025 00:48:09 +0000 Manifest next update: Tue 08 Jul 2025 00:48:09 +0000 Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: w0oKb2m5DgxxnGsPbf5E8r9JIaSmkQrZVRuJLSJ6tfE=) 2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag=) 3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: q2J6Vm5zrUF4ahQrDqnBO1G7RZdDw9Ce2kW75/uOQB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Validity Not Before: Jul 1 00:48:09 2025 GMT Not After : Jul 8 00:48:09 2025 GMT Subject: CN=68633049-5587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:eb:c7:0b:12:f9:fa:95:21:20:cd:60:1f: ba:48:23:c2:3b:a9:33:67:3b:bd:d2:f6:75:0d:c5: 82:64:ee:01:b2:1e:a6:87:c1:9b:a5:d3:e2:39:4d: da:ba:ff:3f:96:b3:a9:d7:9d:10:11:6c:6b:f5:f2: 33:cc:80:eb:78:1a:c7:bc:d0:18:83:d6:de:33:84: b4:5b:86:62:76:1b:dc:1c:4f:89:59:d2:81:fc:68: f7:fe:49:72:f8:f0:37:a7:9c:10:f3:e6:e0:4d:bf: 20:42:0d:91:81:08:20:f5:e0:52:08:ce:4d:15:e0: 96:22:cf:22:83:a3:c5:1f:89:e7:0a:58:49:2d:f1: 12:71:8c:9d:06:2d:01:40:d6:6b:cd:22:7e:20:04: 01:db:0a:20:3a:50:cf:1d:fb:fc:e4:dd:45:f0:74: 92:1c:8c:f3:2a:f2:22:f9:9a:38:d4:9c:c7:c8:df: 72:6c:1d:6e:79:96:05:4b:e5:27:51:b7:35:4c:95: 7f:58:d4:47:5c:92:fb:3f:b2:b2:30:ad:d5:e8:a0: 05:6b:0a:72:f9:f1:82:80:96:a3:eb:bf:b3:e5:5f: 45:d4:35:96:af:52:33:1f:d5:01:cb:05:c6:fd:00: 4b:45:87:d4:db:9e:27:20:ef:dd:63:e2:17:c5:4b: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A0:5A:54:D1:2B:20:B6:FD:1E:2F:2D:49:D8:99:E7:EF:43:E4:8B X509v3 Authority Key Identifier: keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:01:74:7c:30:67:1d:20:10:e9:a2:b9:56:89:37:b8:41:9a: 8f:00:65:b0:52:dc:14:0c:3e:89:ec:73:0c:c3:5c:97:54:30: 65:1f:61:d3:92:24:b0:7a:b3:df:64:c2:3e:42:4b:7b:1b:04: 0c:6b:e4:23:af:6e:87:f7:a2:3b:7a:5a:f9:61:41:41:ff:bb: f9:23:cb:78:d8:dc:83:dc:db:45:f9:73:0a:1b:3e:14:20:34: 36:12:cc:cb:4e:f2:ab:de:07:28:83:2b:2b:5d:11:1f:6c:0e: d7:e3:03:74:33:b3:ac:00:5f:8c:3e:b9:5d:42:3a:9b:87:67: c4:ef:4f:41:0a:10:6b:20:15:a1:a1:4a:41:da:ab:a1:0e:dc: ae:a3:ac:4d:67:a6:df:76:f4:c8:69:d2:e9:39:ae:8b:60:bf: 47:ea:13:fb:ec:77:44:63:4c:0b:11:a4:4b:14:1e:5e:c0:ac: e1:b0:67:15:c1:d2:79:32:b2:67:27:e2:d0:28:2e:4c:05:2a: 3b:9d:ed:2e:ba:ac:c9:c4:b2:9a:f3:ba:4b:22:b3:c2:ad:b3: e1:7b:60:8d:f9:0c:34:e5:94:5b:5d:7d:fb:7d:ef:00:e7:a6: 54:6a:d8:36:1f:7e:8f:76:ef:b8:4f:0e:67:62:5f:b4:60:3c: 4d:d8:af:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC ODg4NUUwNzcwHhcNMjUwNzAxMDA0ODA5WhcNMjUwNzA4MDA0ODA5WjAYMRYwFAYD VQQDEw02ODYzMzA0OS01NTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqPrxwsS+fqVISDNYB+6SCPCO6kzZzu90vZ1DcWCZO4Bsh6mh8GbpdPiOU3a uv8/lrOp150QEWxr9fIzzIDreBrHvNAYg9beM4S0W4ZidhvcHE+JWdKB/Gj3/kly +PA3p5wQ8+bgTb8gQg2RgQgg9eBSCM5NFeCWIs8ig6PFH4nnClhJLfEScYydBi0B QNZrzSJ+IAQB2wogOlDPHfv85N1F8HSSHIzzKvIi+Zo41JzHyN9ybB1ueZYFS+Un Ubc1TJV/WNRHXJL7P7KyMK3V6KAFawpy+fGCgJaj67+z5V9F1DWWr1IzH9UBywXG /QBLRYfU254nIO/dY+IXxUsy8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHigWlTR KyC2/R4vLUnYmefvQ+SLMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6 MzNPYi0zMUwwdmU0aUY0SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiAXR8MGcdIBDporlWiTe4QZqPAGWwUtwUDD6J7HMMw1yXVDBlH2HT kiSwerPfZMI+Qkt7GwQMa+Qjr26H96I7elr5YUFB/7v5I8t42NyD3NtF+XMKGz4U IDQ2EszLTvKr3gcogysrXREfbA7X4wN0M7OsAF+MPrldQjqbh2fE709BChBrIBWh oUpB2quhDtyuo6xNZ6bfdvTIadLpOa6LYL9H6hP77HdEY0wLEaRLFB5ewKzhsGcV wdJ5MrJnJ+LQKC5MBSo7ne0uuqzJxLKa87pLIrPCrbPhe2CN+Qw05ZRbXX37fe8A 56ZUatg2H36Pdu+4Tw5nYl+0YDxN2K+p -----END CERTIFICATE-----Generated at Wed Jul 2 22:48:15 2025 by rpki-client