$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft File: -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json) Hash identifier: 9oU4r8z1bsbFLMhFX+5fVaOO11ivKtss/jVF9LG80M0= Subject key identifier: 19:9F:00:1A:03:EC:2C:2E:73:63:24:26:4D:07:AA:C8:D9:46:74:8A Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 Certificate issuer: /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft Manifest number: 35 Signing time: Tue 01 Jul 2025 08:23:52 +0000 Manifest this update: Tue 01 Jul 2025 08:23:51 +0000 Manifest next update: Tue 08 Jul 2025 08:23:51 +0000 Files and hashes: 1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: FAZJgE1w4JCC9JETMIQ3eEV7c3P/hab5Z1v29s567zE=) 2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: ti/+dlDrn7n64hxfzOvr4hnKhT6sYm889q99u/P1yZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Validity Not Before: Jul 1 08:23:51 2025 GMT Not After : Jul 8 08:23:51 2025 GMT Subject: CN=68639b17-b3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:ef:21:28:2e:96:b5:fd:9c:74:e9:9b:3a: f1:93:51:11:29:e6:6a:3d:b2:c6:c0:a3:0e:2f:be: b5:41:16:4f:bd:de:d5:77:f2:3e:54:59:60:e4:08: b4:99:1c:39:84:27:6a:c0:3b:c3:7e:15:40:ce:81: b5:ff:a2:cb:63:f1:68:0a:5b:ba:f2:7c:40:bd:f3: cf:8b:26:50:4b:5d:2b:f7:00:38:b2:69:f3:d2:7b: 10:ab:b8:0b:4a:64:d8:3b:7b:c5:e8:b5:a5:42:69: 64:8d:ad:17:25:fe:08:90:fa:ce:a9:36:fd:13:ab: e7:ed:cc:e5:aa:12:44:fe:af:47:50:a9:41:5c:5c: 31:d4:a6:df:47:b1:f0:53:9f:b9:bd:72:24:c6:1a: db:47:a6:b3:0f:eb:69:c7:e6:dc:2d:3a:45:cf:bd: 9e:9c:07:84:bd:0a:fd:97:01:ab:8b:4d:e8:2f:50: f4:f5:32:c9:58:24:51:62:a4:85:a1:1e:aa:2b:59: d0:8b:10:5e:fb:cf:85:06:88:9a:d4:50:1e:4f:6b: f5:bb:72:3f:ba:0e:5d:fd:7d:bd:ff:6b:4d:56:83: 97:df:51:c4:48:f6:2f:84:73:fd:b4:bf:2f:d7:40: 3d:c0:83:38:0c:83:60:85:c7:80:32:57:23:f9:f8: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9F:00:1A:03:EC:2C:2E:73:63:24:26:4D:07:AA:C8:D9:46:74:8A X509v3 Authority Key Identifier: keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b9:11:73:e9:c6:01:6d:78:6b:12:80:cb:0b:ec:a7:71:12: 6f:d0:1c:60:9d:18:78:18:3d:01:4f:a9:e2:12:da:b2:57:48: a1:9b:49:5f:60:fb:11:ce:66:93:87:94:53:16:c9:ec:97:8f: 20:5c:f4:f4:c1:c0:31:5f:c1:c2:00:52:cf:29:15:70:08:b0: 40:fe:07:01:04:ac:a8:62:39:bf:c8:9c:c0:7b:f4:2f:f4:ce: 04:cc:18:e9:1d:fe:16:d5:de:c4:e1:7d:53:ac:e1:cc:a2:c7: 3e:79:6e:24:20:8d:90:30:b7:9b:f6:b0:87:35:ec:38:59:05: 06:d1:50:57:c8:32:92:ec:9b:42:54:9c:71:13:62:e8:37:12: 42:db:a8:8e:1b:37:a4:1c:ec:42:b6:8f:66:79:11:11:7a:18: d9:76:fe:bd:84:a8:6d:55:52:3f:74:b5:6f:48:36:8f:7d:d8: 6b:50:a4:7b:6a:3e:d7:f2:7a:9c:cf:d6:e5:21:29:3c:a8:e0: 7c:c9:47:75:68:06:44:2a:a2:dc:ad:fc:1d:0c:41:e5:bd:ea: 41:3e:83:44:ec:6c:55:73:63:25:fb:db:5e:9a:76:28:bf:e4: 83:36:1e:d8:9f:72:d0:99:bf:dd:12:b5:e1:e3:c7:2b:33:4f: 6a:35:5a:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTMzMDExMC8GA1UEBRMoRkJGODEyQTBCOUFBOEFFRDYyMTg3NkM4OTIwMUZGRjEw NDMyQjY5NzAeFw0yNTA3MDEwODIzNTFaFw0yNTA3MDgwODIzNTFaMBgxFjAUBgNV BAMTDTY4NjM5YjE3LWIzZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxne8hKC6Wtf2cdOmbOvGTUREp5mo9ssbAow4vvrVBFk+93tV38j5UWWDkCLSZ HDmEJ2rAO8N+FUDOgbX/ostj8WgKW7ryfEC988+LJlBLXSv3ADiyafPSexCruAtK ZNg7e8XotaVCaWSNrRcl/giQ+s6pNv0Tq+ftzOWqEkT+r0dQqUFcXDHUpt9HsfBT n7m9ciTGGttHprMP62nH5twtOkXPvZ6cB4S9Cv2XAauLTegvUPT1MslYJFFipIWh HqorWdCLEF77z4UGiJrUUB5Pa/W7cj+6Dl39fb3/a01Wg5ffUcRI9i+Ec/20vy/X QD3AgzgMg2CFx4AyVyP5+OsZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGZ8AGgPs LC5zYyQmTQeqyNlGdIowHwYDVR0jBBgwFoAU+/gSoLmqiu1iGHbIkgH/8QQytpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMzMwL0FBRTQ5QTM4MDYw RjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUxaUdIYklrZ0hfOFFReXRw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLV9nU29MbXFpdTFpR0hiSWtnSF84UVF5dHBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MzMwL0FBRTQ5QTM4MDYwRjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUx aUdIYklrZ0hfOFFReXRwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEm5EXPpxgFteGsSgMsL7KdxEm/QHGCdGHgYPQFPqeIS2rJXSKGbSV9g +xHOZpOHlFMWyeyXjyBc9PTBwDFfwcIAUs8pFXAIsED+BwEErKhiOb/InMB79C/0 zgTMGOkd/hbV3sThfVOs4cyixz55biQgjZAwt5v2sIc17DhZBQbRUFfIMpLsm0JU nHETYug3EkLbqI4bN6Qc7EK2j2Z5ERF6GNl2/r2EqG1VUj90tW9INo992GtQpHtq PtfyepzP1uUhKTyo4HzJR3VoBkQqotyt/B0MQeW96kE+g0TsbFVzYyX7216adii/ 5IM2HtifctCZv90SteHjxyszT2o1Wt4= -----END CERTIFICATE-----Generated at Thu Jul 3 05:04:21 2025 by rpki-client