$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: BgR+zIVmV+vqmhKFpMQsr3GVXRl8Fstqhmy+JJj89EA= Subject key identifier: 4A:1D:01:73:B5:7A:CF:E3:E6:2C:E4:9F:C4:F0:31:93:85:DC:9A:5E Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 0145 Signing time: Tue 01 Jul 2025 04:49:30 +0000 Manifest this update: Tue 01 Jul 2025 04:49:29 +0000 Manifest next update: Tue 08 Jul 2025 04:49:29 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: a2vzQDCg8I/OP0MOfcsXoyMhEFF9XaGlhLTyO0Ws0os=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Jul 1 04:49:29 2025 GMT Not After : Jul 8 04:49:29 2025 GMT Subject: CN=686368da-4f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:92:59:59:35:42:53:e9:af:29:6f:86:91: ad:8a:50:60:56:d2:f0:9f:b9:ae:27:31:ca:4a:51: 88:55:d8:30:e3:3f:6d:1a:95:9a:d4:aa:97:8f:f9: c4:84:9e:57:74:ad:3d:58:ec:03:47:71:cb:69:31: a8:00:12:c3:cd:76:db:ea:05:a2:ea:ee:0c:35:2b: d8:42:d2:a8:50:93:cf:96:25:e0:c2:92:28:75:1a: ea:ae:c0:f5:64:85:e8:bc:f5:1e:e9:f1:fd:c8:07: a0:0a:82:60:a8:5c:7f:ec:f5:a7:d5:8b:01:02:79: 66:49:3b:f4:63:4b:11:4c:2d:82:1d:97:f9:94:43: 3d:9e:29:49:56:84:d2:f5:d5:f2:c3:cc:43:d1:37: 39:80:b6:1c:1d:81:58:28:ea:5c:c6:43:0a:4f:ac: b0:e4:7d:ec:f8:ee:6d:f8:9a:9e:53:8f:ce:2b:c8: 70:b6:d6:68:88:b8:da:04:de:8d:23:31:d2:b1:07: 59:14:70:e5:a4:99:66:1a:e7:df:0f:10:85:b5:41: 26:36:c5:95:63:47:2e:3a:fe:67:cb:84:6d:e7:8e: b0:ca:0d:0b:d5:68:52:f1:1a:87:b5:80:91:a0:a6: 01:05:89:3e:66:20:7b:39:e9:c7:b2:bd:6f:6c:32: 8d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:01:73:B5:7A:CF:E3:E6:2C:E4:9F:C4:F0:31:93:85:DC:9A:5E X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:07:5b:fc:c1:0a:bd:55:4b:f0:cb:07:0f:91:03:de:69:f7: 5d:d2:46:a8:d6:cb:5f:8b:21:0f:95:6a:0b:61:1d:0e:d4:91: bc:89:6f:fd:9a:e2:31:c4:9e:e8:3d:a5:60:c2:25:b0:c2:7c: fa:4c:11:ed:a4:f2:b4:15:92:cb:c1:d0:8f:a6:e6:b9:dd:c6: 1f:1d:2d:f9:09:22:fe:ed:ca:26:58:87:50:9e:33:f4:b9:41: 6c:b9:d0:f3:e2:fa:f2:2c:98:47:8d:23:05:df:b7:10:b6:6a: 16:fd:22:47:66:5b:7a:92:ef:96:1c:67:1a:26:e4:05:66:90: 28:14:bc:6a:24:f9:dc:8b:e2:28:9c:0c:ad:0c:00:d3:b3:82: d0:46:1a:79:2e:9f:1a:c8:14:5f:af:c9:0c:fa:b7:47:4c:7d: 7c:ea:06:f6:b6:00:2c:3c:5f:94:6d:23:64:a5:d4:65:24:ba: 18:a2:03:45:34:93:58:30:d3:e2:aa:07:26:22:9f:42:a2:37: 0b:5f:15:16:a8:0b:04:f6:8e:a9:75:e8:33:8d:25:ea:1d:0b: b8:0f:04:89:15:d3:cd:3f:1f:f9:2b:9f:f3:ad:47:d8:82:28: 2a:eb:4b:dc:68:6a:4c:39:1f:41:d3:f2:08:39:cc:27:91:5d: 0f:89:09:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUwNzAxMDQ0OTI5WhcNMjUwNzA4MDQ0OTI5WjAYMRYwFAYD VQQDEw02ODYzNjhkYS00ZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6ySWVk1QlPprylvhpGtilBgVtLwn7muJzHKSlGIVdgw4z9tGpWa1KqXj/nE hJ5XdK09WOwDR3HLaTGoABLDzXbb6gWi6u4MNSvYQtKoUJPPliXgwpIodRrqrsD1 ZIXovPUe6fH9yAegCoJgqFx/7PWn1YsBAnlmSTv0Y0sRTC2CHZf5lEM9nilJVoTS 9dXyw8xD0Tc5gLYcHYFYKOpcxkMKT6yw5H3s+O5t+JqeU4/OK8hwttZoiLjaBN6N IzHSsQdZFHDlpJlmGuffDxCFtUEmNsWVY0cuOv5ny4Rt546wyg0L1WhS8RqHtYCR oKYBBYk+ZiB7OenHsr1vbDKNUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEodAXO1 es/j5izkn8TwMZOF3JpeMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFB1v8wQq9VUvwywcPkQPeafdd0kao1stfiyEPlWoLYR0O1JG8iW/9 muIxxJ7oPaVgwiWwwnz6TBHtpPK0FZLLwdCPpua53cYfHS35CSL+7comWIdQnjP0 uUFsudDz4vryLJhHjSMF37cQtmoW/SJHZlt6ku+WHGcaJuQFZpAoFLxqJPnci+Io nAytDADTs4LQRhp5Lp8ayBRfr8kM+rdHTH186gb2tgAsPF+UbSNkpdRlJLoYogNF NJNYMNPiqgcmIp9CojcLXxUWqAsE9o6pdegzjSXqHQu4DwSJFdPNPx/5K5/zrUfY gigq60vcaGpMOR9B0/IIOcwnkV0PiQkA -----END CERTIFICATE-----Generated at Wed Jul 2 23:01:43 2025 by rpki-client