$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json) Hash identifier: rOrBT2tMnOOP1DNGAi82j9NsctD0kqO4QXzzb1NmjaE= Subject key identifier: 32:9A:66:DF:F0:5C:90:BC:75:3F:3A:43:38:78:80:46:6F:3F:50:7D Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft Manifest number: 1C Signing time: Thu 03 Jul 2025 08:09:56 +0000 Manifest this update: Thu 03 Jul 2025 08:09:56 +0000 Manifest next update: Thu 10 Jul 2025 08:09:56 +0000 Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: CUY5QwzXc1mDXU6SHrQH2b70re9B9jIuUoFDwur4nHA=) 2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: Jul 3 08:09:56 2025 GMT Not After : Jul 10 08:09:56 2025 GMT Subject: CN=68663ad4-1d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:3c:42:12:30:cb:62:76:fd:96:8e:1f:82: 28:ca:05:21:97:37:5d:57:d2:d9:1c:4a:91:b2:7c: 17:e4:43:5b:6b:38:75:2b:37:94:4c:ef:5f:5f:da: 39:77:1b:d7:f4:2f:a9:8b:0e:c7:30:a1:b8:78:fd: c4:ba:81:c5:27:58:f8:7e:2f:dc:b6:2d:cb:c6:81: 90:d6:a6:a3:40:de:f8:c6:2a:a6:32:03:af:0d:5a: 46:36:d7:21:aa:92:2f:a4:a5:1b:f9:c0:6e:04:15: 61:ea:b5:a8:98:b6:96:cf:81:e7:b4:a7:71:23:fc: 4c:1a:48:6c:52:e1:19:22:c8:ce:28:63:3a:fe:6c: 8f:35:ee:ae:13:5e:76:3e:5a:59:b3:7f:c2:61:82: 72:85:79:13:82:25:e7:e3:72:55:9c:a1:6d:5d:9d: c4:ec:d1:c8:52:87:0f:de:62:31:45:6d:c0:e4:f4: 31:e4:4c:c7:16:66:fa:d6:89:44:26:7b:45:b9:2d: 5b:59:2b:85:b7:3c:f5:66:b3:8f:40:c8:eb:86:3a: eb:cb:d4:2c:e8:8b:27:bf:0e:e0:72:22:ba:d0:57: 40:a8:0f:50:35:2e:2e:4f:b0:3e:6d:72:9a:34:37: f1:92:09:e8:04:3a:31:ca:59:19:b6:82:cf:88:dd: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9A:66:DF:F0:5C:90:BC:75:3F:3A:43:38:78:80:46:6F:3F:50:7D X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:fb:ce:be:a9:41:20:81:0c:9c:79:1b:70:cc:a4:4e:49:c8: 52:bb:21:ec:a4:dc:e7:59:bc:9d:e7:1f:4b:b5:fb:ea:40:5e: 34:79:dd:34:1e:b1:27:3d:5b:12:09:b3:29:6d:34:76:14:e6: b3:f1:57:32:28:cc:dc:0a:42:30:cd:d0:6c:88:6e:5a:f5:26: 7c:3a:f1:25:b7:30:56:6a:89:22:c2:41:64:dd:a8:0f:ee:42: da:0e:6c:24:ff:06:e7:4b:71:7d:6e:f3:44:e7:69:c8:50:fa: 95:8b:96:76:dd:af:78:2b:20:6a:c2:d9:92:5f:e7:d9:f1:a6: f1:dc:13:b3:64:3f:67:f8:20:46:41:33:fb:0d:52:8e:0d:de: 81:99:53:2a:e6:54:7c:3c:08:b1:c6:6a:3c:55:65:35:ea:73: df:69:7b:f7:37:67:7f:bd:81:d4:43:9b:28:8f:25:f5:ba:40: 1c:b7:55:81:38:c1:29:46:ea:8d:42:b7:a2:2a:b9:c8:9f:2f: 1c:6e:c8:95:4e:9b:78:9d:41:75:73:ec:99:73:4c:cf:d1:57: 83:0e:ff:4b:6a:47:3a:47:94:5d:c0:62:ce:16:a2:ac:c3:63: 91:38:2f:32:b7:87:f2:39:5c:74:3d:b5:7e:75:d3:0e:4c:7d: 02:f0:f2:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA3MDMwODA5NTZaFw0yNTA3MTAwODA5NTZaMBgxFjAUBgNV BAMTDTY4NjYzYWQ0LTFkMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI0zxCEjDLYnb9lo4fgijKBSGXN11X0tkcSpGyfBfkQ1trOHUrN5RM719f2jl3 G9f0L6mLDscwobh4/cS6gcUnWPh+L9y2LcvGgZDWpqNA3vjGKqYyA68NWkY21yGq ki+kpRv5wG4EFWHqtaiYtpbPgee0p3Ej/EwaSGxS4RkiyM4oYzr+bI817q4TXnY+ Wlmzf8JhgnKFeROCJefjclWcoW1dncTs0chShw/eYjFFbcDk9DHkTMcWZvrWiUQm e0W5LVtZK4W3PPVms49AyOuGOuvL1Czoiye/DuByIrrQV0CoD1A1Li5PsD5tcpo0 N/GSCegEOjHKWRm2gs+I3ZjbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMppm3/Bc kLx1PzpDOHiARm8/UH0wHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK/7zr6pQSCBDJx5G3DMpE5JyFK7Ieyk3OdZvJ3nH0u1++pAXjR53TQe sSc9WxIJsyltNHYU5rPxVzIozNwKQjDN0GyIblr1Jnw68SW3MFZqiSLCQWTdqA/u QtoObCT/BudLcX1u80TnachQ+pWLlnbdr3grIGrC2ZJf59nxpvHcE7NkP2f4IEZB M/sNUo4N3oGZUyrmVHw8CLHGajxVZTXqc99pe/c3Z3+9gdRDmyiPJfW6QBy3VYE4 wSlG6o1Ct6IqucifLxxuyJVOm3idQXVz7JlzTM/RV4MO/0tqRzpHlF3AYs4WoqzD Y5E4LzK3h/I5XHQ9tX510w5MfQLw8gM= -----END CERTIFICATE-----Generated at Thu Jul 3 11:25:01 2025 by rpki-client