$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: Y4Ro3ulRegcNF/MQ4apOj+8m8+dyjoRrFqj0XImEvvU= Subject key identifier: 47:7F:A2:A4:2E:BA:E7:3B:BC:46:33:98:E9:16:B2:AC:70:FB:DB:B1 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 3C Signing time: Thu 03 Jul 2025 07:46:26 +0000 Manifest this update: Thu 03 Jul 2025 07:46:26 +0000 Manifest next update: Thu 10 Jul 2025 07:46:26 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: DFEpX4QefV+tljFE8HdN5JradqceXiUOgNv77dTOwfI=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: zfjkzPAZbDp4JpjN4ePtNi0tOHT/uT0JPO+MhXtdLAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Jul 3 07:46:26 2025 GMT Not After : Jul 10 07:46:26 2025 GMT Subject: CN=68663552-f027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:90:b1:3e:03:52:6c:dc:fd:fd:09:dd:fd: 02:78:05:e8:45:45:f5:46:09:37:26:2f:f8:41:e8: 0e:3e:09:c5:68:e3:cf:1b:47:c9:1e:06:e5:cd:cf: a3:a8:01:3b:9c:51:21:e3:73:f7:7f:e7:b1:18:42: 80:f9:9a:53:04:6c:9d:d8:28:1f:37:42:05:63:7d: 96:0a:22:74:5e:26:c3:2d:1b:22:e0:a6:f1:dd:ac: 80:51:f7:26:8f:ea:d9:c4:06:7e:9e:a2:80:78:65: ea:1d:2f:66:fb:6b:e3:47:d6:cc:f8:b7:22:89:2a: e5:e9:01:ee:22:5d:fc:11:ac:bb:03:e3:ad:30:ae: 0b:03:4b:70:55:95:3b:cd:47:25:a9:b6:ee:97:c3: c8:e6:a0:54:7e:51:dc:b9:76:67:01:db:e0:c0:f8: ea:ed:3b:da:a8:40:ec:75:13:b3:06:a5:7f:61:c4: aa:50:59:39:5e:0d:c0:df:55:bf:0e:7b:2f:67:ed: 6b:1c:b0:20:dd:19:aa:79:13:ea:c7:9d:1e:6e:68: 9e:5e:70:bd:18:5f:5c:f4:ba:52:78:7f:5f:e5:23: b5:02:a4:6e:a7:17:36:a9:d7:64:cc:00:cc:bb:88: 48:a1:66:45:d5:c2:89:b9:84:13:b1:23:b5:d1:b2: 28:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7F:A2:A4:2E:BA:E7:3B:BC:46:33:98:E9:16:B2:AC:70:FB:DB:B1 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b2:a9:1f:16:3d:fc:b1:60:3d:88:99:c6:87:7c:54:35:05: 85:8c:a9:13:d5:f8:fb:1e:3b:f4:21:ea:d3:26:6a:1b:f3:f0: 3b:a9:06:5e:b8:3e:82:b2:e7:57:d4:19:5d:e8:83:17:6a:5a: 88:0d:d4:a0:3f:8c:f4:a0:2e:14:2a:0f:d3:32:9c:32:4e:27: 78:0d:0b:e3:25:f5:67:b4:5c:57:41:08:94:f0:72:67:5e:f0: 05:ad:0d:30:c1:b3:69:bf:90:5f:3d:9a:e0:17:7a:da:f0:d2: 2b:84:ec:68:c0:ea:77:8a:13:11:81:94:4e:eb:8e:9a:af:49: 6c:7c:3f:c7:46:38:83:a4:79:d2:8b:6c:40:ce:0f:e3:9b:0b: c7:84:41:2b:4e:2e:a1:05:ed:68:e0:a5:9c:ff:0b:ec:94:69: 59:38:43:34:a1:3c:3b:fd:a4:d9:1a:e0:84:3b:ab:53:22:d8: 38:ba:12:5f:6f:1d:98:6f:4f:a7:28:68:01:bb:dc:27:52:5d: d1:f8:37:f8:5e:dc:f3:78:5d:f3:3c:47:70:60:1f:67:c3:e1: f0:5e:21:52:3f:22:99:ac:b0:c9:bd:79:cf:25:b8:79:48:8a: cc:5f:e3:62:6f:f7:8b:bb:4a:21:0f:0a:03:8b:29:73:3c:8e: b1:b8:82:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA3MDMwNzQ2MjZaFw0yNTA3MTAwNzQ2MjZaMBgxFjAUBgNV BAMTDTY4NjYzNTUyLWYwMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmrpCxPgNSbNz9/Qnd/QJ4BehFRfVGCTcmL/hB6A4+CcVo488bR8keBuXNz6Oo ATucUSHjc/d/57EYQoD5mlMEbJ3YKB83QgVjfZYKInReJsMtGyLgpvHdrIBR9yaP 6tnEBn6eooB4ZeodL2b7a+NH1sz4tyKJKuXpAe4iXfwRrLsD460wrgsDS3BVlTvN RyWptu6Xw8jmoFR+Udy5dmcB2+DA+OrtO9qoQOx1E7MGpX9hxKpQWTleDcDfVb8O ey9n7WscsCDdGap5E+rHnR5uaJ5ecL0YX1z0ulJ4f1/lI7UCpG6nFzap12TMAMy7 iEihZkXVwom5hBOxI7XRsihpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR3+ipC66 5zu8RjOY6RayrHD727EwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGOyqR8WPfyxYD2ImcaHfFQ1BYWMqRPV+PseO/Qh6tMmahvz8DupBl64 PoKy51fUGV3ogxdqWogN1KA/jPSgLhQqD9MynDJOJ3gNC+Ml9We0XFdBCJTwcmde 8AWtDTDBs2m/kF89muAXetrw0iuE7GjA6neKExGBlE7rjpqvSWx8P8dGOIOkedKL bEDOD+ObC8eEQStOLqEF7WjgpZz/C+yUaVk4QzShPDv9pNka4IQ7q1Mi2Di6El9v HZhvT6coaAG73CdSXdH4N/he3PN4XfM8R3BgH2fD4fBeIVI/IpmssMm9ec8luHlI isxf42Jv94u7SiEPCgOLKXM8jrG4gnU= -----END CERTIFICATE-----Generated at Fri Jul 4 08:30:47 2025 by rpki-client