$ rpki-client -vvf rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft File: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft (raw, json) Hash identifier: WgpTPjYpECdh4AFRGS8IAtUBcm9SpaR3MG+56GlMjyE= Subject key identifier: C1:BA:9B:92:2A:7C:F6:41:D1:2B:15:F7:38:E5:85:CD:FC:8F:48:19 Authority key identifier: 19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B Certificate issuer: /CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft Manifest number: 01C9 Signing time: Tue 01 Jul 2025 03:20:33 +0000 Manifest this update: Tue 01 Jul 2025 03:20:32 +0000 Manifest next update: Tue 08 Jul 2025 03:20:32 +0000 Files and hashes: 1: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl (hash: kGgXjcGv9hBViIye3d8Ta0wIct3FPv1UOgn8KUzsR7g=) 2: 272313529ADA11EDAA08043BC4F9AE02.roa (hash: Tkj82GzJ16obkJIFo6Exr0H47jGo2TnUKRA7738GYK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915233F, serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B Validity Not Before: Jul 1 03:20:32 2025 GMT Not After : Jul 8 03:20:32 2025 GMT Subject: CN=68635401-3b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:30:8d:38:80:da:5a:11:ce:63:f4:8b:22: 78:5f:a3:48:03:f5:c7:d3:74:fc:d7:12:86:29:57: 93:4b:cb:e0:cd:8a:fb:15:56:79:ac:e8:34:5d:47: 17:71:1d:f5:cf:03:17:50:a5:b7:4c:4d:4d:95:12: b0:e9:a5:c7:1c:22:09:68:00:81:1d:ba:ad:15:40: d1:35:10:1a:7b:57:3b:a9:f5:bc:d9:2c:af:97:a2: eb:28:82:10:40:ff:82:42:eb:7b:0e:0a:a4:94:ca: 09:cd:8c:88:ee:06:13:be:48:28:b1:71:d8:41:e2: 99:39:16:a5:2f:b3:32:a5:8e:b8:32:ce:9d:38:12: ae:8b:a3:bc:17:af:9f:29:87:a6:a4:1e:eb:d2:f2: d2:a9:5c:71:b8:47:1c:8b:3f:22:6f:92:7c:b8:3e: fa:45:ed:03:a7:9f:83:ea:f8:fb:e2:f5:d9:c0:ea: 5d:69:59:b1:7f:58:97:56:a5:c8:5b:01:0c:0f:7e: d3:61:6b:45:b5:1b:02:30:78:9f:33:77:3d:dd:27: 74:56:99:87:36:ea:ca:5e:c8:eb:d8:54:f7:c4:37: e6:02:d9:0c:9d:40:b7:9e:20:a9:e5:3a:12:b3:8e: dd:bb:1e:c0:e1:6a:08:40:9e:6d:9c:10:97:29:d6: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BA:9B:92:2A:7C:F6:41:D1:2B:15:F7:38:E5:85:CD:FC:8F:48:19 X509v3 Authority Key Identifier: keyid:19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4f:e9:b5:38:0e:c4:af:95:15:fc:c1:bc:0b:82:b2:ef:df: f6:dc:6d:21:1f:84:00:16:58:ca:f3:d4:6b:42:b1:eb:46:a9: ad:14:69:c4:67:c6:d0:d7:71:ec:39:43:1e:6c:f4:f5:5e:88: 7a:bb:f9:69:b1:ca:79:60:fa:17:38:94:ce:9b:30:fb:69:15: 75:91:e4:4d:b2:0a:01:3f:99:d5:10:6e:48:09:c8:4c:44:75: f5:69:b5:7d:d5:a0:8a:0d:4d:94:40:34:6a:50:c7:39:f2:57: 04:73:ea:31:c7:57:b8:f9:57:c9:8f:d2:3f:96:fb:03:99:68: c3:f9:6b:32:d8:11:67:58:77:f7:9e:5b:69:91:2f:3b:9e:75: 97:15:9a:80:7f:e6:9d:8f:b8:84:89:09:c2:71:f0:f5:f6:5b: c6:68:25:8c:8a:43:39:82:14:ce:fb:b8:d9:e4:4b:9f:73:14: 6c:03:94:c7:59:4e:28:2a:cf:2c:e7:70:cb:51:1f:c8:4a:3b: e4:80:ac:42:f2:cf:3d:a4:0b:89:3f:77:54:c4:b5:56:cd:4c: c8:d6:cd:12:31:19:c8:44:7e:cd:ec:8d:f2:6b:8e:11:1a:d5: ef:87:ba:56:34:9c:38:69:29:3d:22:ad:6c:ac:53:7f:da:17: 12:18:3b:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzM0YxMTAvBgNVBAUTKDE5QzZGNkMzRTY2M0Q4M0Q0NDExOTIxOEM0QTI5QzQ4 RjhCQzk1MEIwHhcNMjUwNzAxMDMyMDMyWhcNMjUwNzA4MDMyMDMyWjAYMRYwFAYD VQQDEw02ODYzNTQwMS0zYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1EwjTiA2loRzmP0iyJ4X6NIA/XH03T81xKGKVeTS8vgzYr7FVZ5rOg0XUcX cR31zwMXUKW3TE1NlRKw6aXHHCIJaACBHbqtFUDRNRAae1c7qfW82Syvl6LrKIIQ QP+CQut7DgqklMoJzYyI7gYTvkgosXHYQeKZORalL7MypY64Ms6dOBKui6O8F6+f KYempB7r0vLSqVxxuEcciz8ib5J8uD76Re0Dp5+D6vj74vXZwOpdaVmxf1iXVqXI WwEMD37TYWtFtRsCMHifM3c93Sd0VpmHNurKXsjr2FT3xDfmAtkMnUC3niCp5ToS s47dux7A4WoIQJ5tnBCXKdYMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG6m5Iq fPZB0SsV9zjlhc38j0gZMB8GA1UdIwQYMBaAFBnG9sPmY9g9RBGSGMSinEj4vJUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjMzRi9FRUQ4RUY0NjlB RDcxMUVEQkU2OUNEM0FDNEY5QUUwMi9HY2Iydy1aajJEMUVFWklZeEtLY1NQaThs UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djYjJ3LVpqMkQxRUVaSVl4S0tjU1BpOGxRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjMzRi9FRUQ4RUY0NjlBRDcxMUVEQkU2OUNEM0FDNEY5QUUwMi9HY2Iydy1aajJE MUVFWklZeEtLY1NQaThsUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaT+m1OA7Er5UV/MG8C4Ky79/23G0hH4QAFljK89RrQrHrRqmtFGnE Z8bQ13HsOUMebPT1Xoh6u/lpscp5YPoXOJTOmzD7aRV1keRNsgoBP5nVEG5ICchM RHX1abV91aCKDU2UQDRqUMc58lcEc+oxx1e4+VfJj9I/lvsDmWjD+Wsy2BFnWHf3 nltpkS87nnWXFZqAf+adj7iEiQnCcfD19lvGaCWMikM5ghTO+7jZ5EufcxRsA5TH WU4oKs8s53DLUR/ISjvkgKxC8s89pAuJP3dUxLVWzUzI1s0SMRnIRH7N7I3ya44R GtXvh7pWNJw4aSk9Iq1srFN/2hcSGDsp -----END CERTIFICATE-----Generated at Wed Jul 2 04:17:25 2025 by rpki-client