$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json) Hash identifier: UjHN6XDJsdiwZ7S4Pm/r48nMhjryzAKqQXW+zv9rhsQ= Subject key identifier: AD:63:BA:82:3E:38:8D:F5:48:AD:2F:E8:9F:02:96:A4:9C:22:E5:56 Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft Manifest number: 2F Signing time: Tue 01 Jul 2025 08:34:00 +0000 Manifest this update: Tue 01 Jul 2025 08:33:59 +0000 Manifest next update: Tue 08 Jul 2025 08:33:59 +0000 Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: ZQmr4yKVk6SN6Ax3ZpQfyDKXBx+XJ8LQmqK79x+fxeg=) 2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=) 3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Validity Not Before: Jul 1 08:33:59 2025 GMT Not After : Jul 8 08:33:59 2025 GMT Subject: CN=68639d78-5468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:0c:69:17:b5:a9:ca:02:5a:94:b3:cb:27: 3f:5e:ef:df:26:30:a2:ff:44:90:6c:bf:80:e4:0a: fb:1b:da:88:d2:de:76:29:29:55:65:ff:19:79:26: 4f:7a:8d:07:79:fa:bd:65:c8:f2:c6:63:c9:e3:65: 16:9b:7f:df:97:d5:5c:7a:af:70:d0:47:a6:ad:c9: 0c:90:8f:7e:68:ba:3f:e6:71:40:4e:54:d7:fc:5d: 9c:ee:e2:59:8e:17:3f:6c:93:3b:53:19:c1:56:27: e1:3f:65:40:55:55:aa:26:48:ce:37:ae:0c:30:a8: 15:69:2a:db:a0:aa:85:4e:ef:4b:58:bd:08:94:b2: e7:ed:04:ee:1b:e1:24:26:22:7c:96:e9:ba:c6:81: 21:bd:93:6d:1b:2d:ae:4d:12:2c:32:41:9e:74:60: c8:46:96:6c:0c:7d:c1:0b:27:26:b1:6a:e0:ae:92: 2e:30:d7:37:e3:a6:a3:2c:4a:c1:44:8d:ec:a7:9e: dd:53:5d:c1:76:c4:68:a6:5d:aa:4b:03:e3:13:a9: 54:0c:33:a5:50:c9:94:b2:5c:29:4f:03:37:30:91: 7f:05:cf:f3:22:e5:44:a6:8e:07:be:aa:6f:c8:aa: d1:e6:33:1c:37:fe:2a:25:84:6c:96:07:7c:21:24: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:BA:82:3E:38:8D:F5:48:AD:2F:E8:9F:02:96:A4:9C:22:E5:56 X509v3 Authority Key Identifier: keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:99:4a:c5:c7:01:29:97:9b:6e:98:ae:88:c6:23:78:2c:92: ca:94:c8:43:89:0c:7d:31:7b:ce:40:05:ab:cb:6e:09:8c:c1: fa:87:2c:ed:f4:0a:c9:bd:bd:e7:72:7f:69:13:b3:e7:05:7a: 14:5a:c3:38:ca:95:ea:d9:64:61:10:ec:c6:3f:f4:ed:19:4d: 73:ac:ac:d9:b9:e4:e2:63:f2:0e:7e:32:c8:1e:49:61:60:51: 09:1d:cb:26:c3:55:ff:02:d5:84:7e:43:89:97:53:1c:4a:12: 8d:1b:72:6c:5d:81:f9:e2:65:e3:bc:a0:74:e3:5f:b0:de:4e: 87:29:df:95:c3:21:99:73:a8:da:9f:0e:19:f0:e9:e3:00:6d: 4a:10:ad:9a:b5:78:eb:85:72:5e:43:88:9b:25:96:bf:94:a0: da:35:78:3e:ed:a9:85:63:7d:8f:fd:cc:1b:c8:6d:de:3e:1b: 17:9d:30:bf:88:7d:20:9f:72:88:43:a7:f6:4b:d0:bd:63:6b: d0:d1:ba:92:5d:79:14:a6:93:3d:ad:2c:42:04:ee:94:17:5c: e6:52:55:fc:21:c6:15:04:78:bf:0b:13:05:67:73:a9:0e:51: bd:85:3a:d7:26:09:e7:28:77:53:d3:39:02:76:15:bb:1c:69: 60:18:45:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0QyMTExMC8GA1UEBRMoODE4QkI5MDMzMjcxN0Y5MzU3MzBEQUYxNDcwOEZGQzJG NjA1RjA1RjAeFw0yNTA3MDEwODMzNTlaFw0yNTA3MDgwODMzNTlaMBgxFjAUBgNV BAMTDTY4NjM5ZDc4LTU0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvuwxpF7WpygJalLPLJz9e798mMKL/RJBsv4DkCvsb2ojS3nYpKVVl/xl5Jk96 jQd5+r1lyPLGY8njZRabf9+X1Vx6r3DQR6atyQyQj35ouj/mcUBOVNf8XZzu4lmO Fz9skztTGcFWJ+E/ZUBVVaomSM43rgwwqBVpKtugqoVO70tYvQiUsuftBO4b4SQm InyW6brGgSG9k20bLa5NEiwyQZ50YMhGlmwMfcELJyaxauCuki4w1zfjpqMsSsFE jeynnt1TXcF2xGimXapLA+MTqVQMM6VQyZSyXClPAzcwkX8Fz/Mi5USmjge+qm/I qtHmMxw3/iolhGyWB3whJPahAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrWO6gj44 jfVIrS/onwKWpJwi5VYwHwYDVR0jBBgwFoAUgYu5AzJxf5NXMNrxRwj/wvYF8F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRDIxLzM4QzI2MUU0MUMz ODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1l1NUF6SnhmNU5YTU5yeFJ3al93dllGOEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RDIxLzM4QzI2MUU0MUMzODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVO WE1OcnhSd2pfd3ZZRjhGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAqZSsXHASmXm26YrojGI3gsksqUyEOJDH0xe85ABavLbgmMwfqHLO30 Csm9vedyf2kTs+cFehRawzjKlerZZGEQ7MY/9O0ZTXOsrNm55OJj8g5+MsgeSWFg UQkdyybDVf8C1YR+Q4mXUxxKEo0bcmxdgfniZeO8oHTjX7DeTocp35XDIZlzqNqf Dhnw6eMAbUoQrZq1eOuFcl5DiJsllr+UoNo1eD7tqYVjfY/9zBvIbd4+GxedML+I fSCfcohDp/ZL0L1ja9DRupJdeRSmkz2tLEIE7pQXXOZSVfwhxhUEeL8LEwVnc6kO Ub2FOtcmCecod1PTOQJ2FbscaWAYRdw= -----END CERTIFICATE-----Generated at Wed Jul 2 21:36:11 2025 by rpki-client