$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json) Hash identifier: RnuB1vNMGUb81rIm3sKq7/hqMPA9WbRUMLjoFfRIn0c= Subject key identifier: F8:BE:33:ED:C5:FC:1C:0D:95:99:96:BB:B1:04:0D:C6:ED:AC:3B:9D Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft Manifest number: 027F Signing time: Thu 03 Jul 2025 02:04:58 +0000 Manifest this update: Thu 03 Jul 2025 02:04:57 +0000 Manifest next update: Thu 10 Jul 2025 02:04:57 +0000 Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: cUMt/B2Vd5IOnz7MbU6bc4Xp9m230RoLo6HyJh7knoM=) 2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: dtuYeScxI0cvK8sz9E/Cl0+96zsD1MptOKpsIJKXrl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Validity Not Before: Jul 3 02:04:57 2025 GMT Not After : Jul 10 02:04:57 2025 GMT Subject: CN=6865e54a-8aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:0d:ee:5c:bd:07:0e:84:cc:90:8e:5d:14: e2:ee:32:2b:f6:26:5b:ba:bc:47:29:14:48:b8:1d: 8f:03:45:7e:aa:81:aa:b7:48:75:63:90:24:f8:3f: 4a:68:26:4f:3c:3b:f5:ce:5d:36:30:10:d1:0b:6c: a8:24:df:cf:d3:4f:b4:4c:eb:9c:8c:ef:50:43:fa: 85:4c:fa:9b:37:a8:d4:f0:dd:5b:d6:fc:12:1a:31: 86:da:fd:bf:88:df:1f:ab:6a:f9:7e:df:6a:fc:3a: a9:70:2a:8f:66:29:c8:5c:fa:a0:b8:c9:9d:83:83: 0d:9b:bb:9d:be:ac:d6:f3:f1:84:a8:21:12:ad:0d: e9:a5:03:9c:cd:06:bb:02:a6:72:64:c8:6d:cf:6f: 92:f1:11:bd:66:a3:9d:3a:95:1b:ab:ed:c5:ba:f0: 8b:e4:c6:80:e8:41:8b:f4:8a:06:b6:da:52:7e:01: 85:72:68:f9:3a:89:43:99:fe:62:9e:4a:9a:09:0e: 03:68:93:5d:78:d4:c7:b1:3b:5f:48:db:56:63:5e: a7:4d:f2:0a:e8:dc:cd:97:2b:4a:19:ed:54:5e:72: 11:cd:14:43:e9:77:41:77:6d:a5:0a:96:ae:04:54: 7a:c2:ad:9b:f0:6e:b4:39:ac:21:b6:67:a1:61:3f: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BE:33:ED:C5:FC:1C:0D:95:99:96:BB:B1:04:0D:C6:ED:AC:3B:9D X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e9:3f:2d:e9:ab:32:7d:97:6a:10:81:aa:d8:eb:b3:01:3e: 82:90:56:e9:3a:3b:f6:5a:05:d6:f3:13:16:d9:09:f4:c0:50: b6:e5:ef:a1:33:7c:61:b2:af:aa:f5:25:c1:3c:f1:e9:5e:72: 20:4a:77:03:40:f7:40:65:f7:af:48:82:26:06:1b:34:59:59: 8c:46:42:be:9d:d7:ed:c3:91:fd:28:eb:bf:8b:44:ba:c7:d4: 7a:3c:10:e6:16:08:e9:ed:2d:de:76:09:aa:ac:a4:72:be:e9: 95:25:04:2f:d5:b7:e5:9f:9d:52:ea:00:f6:10:0a:e9:34:d6: 02:41:ea:f1:06:17:22:60:dd:0f:6f:3b:86:0b:55:a9:25:3e: 2c:d8:97:c0:d5:66:5d:5b:da:7b:91:7d:df:2c:86:bc:3c:6b: 0a:ed:1c:ec:b2:e5:77:45:b1:58:e5:93:72:00:57:29:56:67: 5d:09:42:dc:cd:b6:cd:82:df:bb:b4:4a:a1:2b:ec:ec:5f:6b: 95:cd:ed:b2:c7:df:33:35:fa:e8:c1:53:a0:ad:4d:56:e4:70: b2:d1:ef:56:f3:11:7c:96:ef:a6:06:0f:4a:b3:ba:a9:cc:3c: 89:0e:53:a6:f0:67:d9:f7:d6:41:76:b1:b5:d6:a3:b9:f9:53: e3:07:eb:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjUwNzAzMDIwNDU3WhcNMjUwNzEwMDIwNDU3WjAYMRYwFAYD VQQDEw02ODY1ZTU0YS04YWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoToN7ly9Bw6EzJCOXRTi7jIr9iZburxHKRRIuB2PA0V+qoGqt0h1Y5Ak+D9K aCZPPDv1zl02MBDRC2yoJN/P00+0TOucjO9QQ/qFTPqbN6jU8N1b1vwSGjGG2v2/ iN8fq2r5ft9q/DqpcCqPZinIXPqguMmdg4MNm7udvqzW8/GEqCESrQ3ppQOczQa7 AqZyZMhtz2+S8RG9ZqOdOpUbq+3FuvCL5MaA6EGL9IoGttpSfgGFcmj5OolDmf5i nkqaCQ4DaJNdeNTHsTtfSNtWY16nTfIK6NzNlytKGe1UXnIRzRRD6XdBd22lCpau BFR6wq2b8G60OawhtmehYT8HswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi+M+3F /BwNlZmWu7EEDcbtrDudMB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFS NkNxazR0Y2hjOHBqNmNUbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx6T8t6asyfZdqEIGq2OuzAT6CkFbpOjv2WgXW8xMW2Qn0wFC25e+h M3xhsq+q9SXBPPHpXnIgSncDQPdAZfevSIImBhs0WVmMRkK+ndftw5H9KOu/i0S6 x9R6PBDmFgjp7S3edgmqrKRyvumVJQQv1bfln51S6gD2EArpNNYCQerxBhciYN0P bzuGC1WpJT4s2JfA1WZdW9p7kX3fLIa8PGsK7RzssuV3RbFY5ZNyAFcpVmddCULc zbbNgt+7tEqhK+zsX2uVze2yx98zNfrowVOgrU1W5HCy0e9W8xF8lu+mBg9Ks7qp zDyJDlOm8GfZ99ZBdrG11qO5+VPjB+sx -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:18 2025 by rpki-client