$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: cbWAMrqkzHAvknfzx51GQVFlM38SVjqDmsng1guI9tQ= Subject key identifier: 69:81:75:BC:7F:5B:BD:03:13:BD:E1:A1:34:B1:C9:98:FC:33:C1:D6 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 34A1 Signing time: Fri 04 Jul 2025 14:24:36 +0000 Manifest this update: Fri 04 Jul 2025 14:24:36 +0000 Manifest next update: Fri 11 Jul 2025 14:24:36 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: 95fVfRexccDza/qkyHpiyzlV83qKGNLoDV1nTW6rjvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Jul 4 14:24:36 2025 GMT Not After : Jul 11 14:24:36 2025 GMT Subject: CN=6867e424-76a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:63:c2:8b:3f:62:b3:12:c2:0c:1d:e2:b7: 28:bb:45:2e:4f:3f:1a:05:a6:fd:9c:a7:c4:3f:7f: cd:aa:58:05:69:18:99:64:04:88:db:84:f8:41:dd: 4f:cf:d1:ec:33:f2:14:8b:6d:f1:5f:e0:b5:76:4e: 2e:39:ca:b4:eb:a5:cf:9b:a3:85:29:5c:41:78:a7: 5b:71:f4:fe:4b:51:9b:0a:c8:6c:4f:b2:06:df:ec: 96:32:c4:1a:07:e9:17:a9:03:69:01:eb:23:5b:2f: 70:45:c4:08:9c:5b:18:0e:e8:b0:ee:ef:de:40:58: 7e:19:42:9c:1b:b8:bb:33:d0:ff:bc:0b:03:78:40: ee:a3:be:19:95:11:41:5a:80:47:9f:dc:40:c2:5b: 41:f6:fe:19:1f:62:51:3c:06:e4:88:7a:99:e2:49: b6:ed:5e:74:4a:70:1c:ab:59:b4:22:86:7c:3f:07: c8:e4:77:1b:25:f5:ad:b7:b2:31:85:e7:df:dc:52: 49:e7:e7:ea:6f:b1:40:76:65:72:25:a1:a4:bc:89: e3:10:1c:1c:65:68:83:70:86:f5:0a:94:4a:48:09: 73:dc:3e:66:74:d3:42:89:fe:3a:d7:07:f7:79:ed: 52:7e:5e:da:1e:92:70:1d:d1:2d:31:00:53:e6:2a: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:75:BC:7F:5B:BD:03:13:BD:E1:A1:34:B1:C9:98:FC:33:C1:D6 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:11:2c:28:7e:e6:e9:79:85:be:ac:4d:6c:e5:eb:c7:d2:a8: 88:59:d4:dd:ff:64:c8:3d:8d:42:48:6d:02:db:4b:60:60:89: 52:81:37:6a:ea:94:31:f0:fe:7a:95:18:c9:f1:ae:05:13:41: 3c:74:0f:de:1d:32:42:ed:53:ad:0c:5d:28:f0:22:56:93:e3: 21:c4:9c:0c:a3:3e:15:7e:9a:c5:d5:6a:c0:18:80:19:ee:27: 37:f5:0b:4f:be:e5:62:b3:e7:50:f8:6f:d7:1c:19:b1:7f:d0: c1:94:1f:81:1f:45:6b:f1:31:4b:db:f1:15:91:a1:74:a9:0f: 57:28:42:a9:b1:92:4e:4d:14:b8:fa:a1:ca:7b:77:4b:a4:75: f1:05:0e:ed:6a:65:2a:9c:93:c2:67:1f:30:0a:ed:b7:00:ec: 27:0d:0e:88:83:24:a5:e2:48:e8:99:e1:0b:0e:b8:58:7e:5d: 80:8e:b9:c5:26:d1:84:78:ec:21:a8:2e:00:f0:1d:30:84:5e: 01:87:97:1d:1e:27:75:f3:a9:7e:7b:b4:6b:64:4b:dc:b6:c3: 71:a0:88:21:db:67:89:e8:1f:09:d6:f7:8f:59:e6:80:0f:5d: 7e:54:a3:ca:6e:98:b8:18:25:48:25:c9:4f:b6:ff:b6:0b:af: dc:b5:b4:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUwNzA0MTQyNDM2WhcNMjUwNzExMTQyNDM2WjAYMRYwFAYD VQQDEw02ODY3ZTQyNC03NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Zjwos/YrMSwgwd4rcou0UuTz8aBab9nKfEP3/NqlgFaRiZZASI24T4Qd1P z9HsM/IUi23xX+C1dk4uOcq066XPm6OFKVxBeKdbcfT+S1GbCshsT7IG3+yWMsQa B+kXqQNpAesjWy9wRcQInFsYDuiw7u/eQFh+GUKcG7i7M9D/vAsDeEDuo74ZlRFB WoBHn9xAwltB9v4ZH2JRPAbkiHqZ4km27V50SnAcq1m0IoZ8PwfI5HcbJfWtt7Ix heff3FJJ5+fqb7FAdmVyJaGkvInjEBwcZWiDcIb1CpRKSAlz3D5mdNNCif461wf3 ee1Sfl7aHpJwHdEtMQBT5iqhpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmBdbx/ W70DE73hoTSxyZj8M8HWMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtESwofubpeYW+rE1s5evH0qiIWdTd/2TIPY1CSG0C20tgYIlSgTdq 6pQx8P56lRjJ8a4FE0E8dA/eHTJC7VOtDF0o8CJWk+MhxJwMoz4VfprF1WrAGIAZ 7ic39QtPvuVis+dQ+G/XHBmxf9DBlB+BH0Vr8TFL2/EVkaF0qQ9XKEKpsZJOTRS4 +qHKe3dLpHXxBQ7tamUqnJPCZx8wCu23AOwnDQ6IgySl4kjomeELDrhYfl2AjrnF JtGEeOwhqC4A8B0whF4Bh5cdHid186l+e7RrZEvctsNxoIgh22eJ6B8J1vePWeaA D11+VKPKbpi4GCVIJclPtv+2C6/ctbRk -----END CERTIFICATE-----Generated at Sat Jul 5 02:29:13 2025 by rpki-client