$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: vlt/QosfX2viDmcWq/NbiCPaQq3phKqG11HWX9PixwM= Subject key identifier: A2:9D:10:B5:FE:7F:0E:58:B4:91:DE:23:9A:BA:07:1B:D6:CB:9E:D1 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 0807 Signing time: Wed 02 Jul 2025 21:13:10 +0000 Manifest this update: Wed 02 Jul 2025 21:13:10 +0000 Manifest next update: Wed 09 Jul 2025 21:13:10 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: 1AfQeIhRgeSDuqxtAmF4lhqFRvu1ecxSKIWHoOSvEqI=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Jul 2 21:13:10 2025 GMT Not After : Jul 9 21:13:10 2025 GMT Subject: CN=6865a0e6-d793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:c5:5d:a5:74:b9:f0:ca:35:c3:90:8e:41: 50:f7:7a:7c:1d:f3:9d:8e:08:b0:dc:ad:56:47:41: a8:f9:85:09:e9:59:ad:c4:a4:98:1b:94:1d:ff:0f: a0:78:26:1e:3e:c6:c4:2a:df:c7:4e:80:2b:cc:b6: 3a:b3:e7:42:27:31:ed:c2:c0:7c:3a:67:0c:e8:69: 05:b0:23:ce:c0:38:32:88:45:01:34:21:7e:42:a2: 29:a6:6a:3a:38:df:00:4d:7c:cf:cd:84:04:38:8a: 5f:e2:79:fc:89:1d:0c:9b:ba:ed:b1:53:d8:89:85: 74:93:b0:2e:5c:42:a6:73:76:1b:51:ad:00:7c:a7: 92:90:61:48:c6:cb:aa:fd:53:1d:4f:b2:86:09:d8: bd:7c:29:e3:76:2e:13:ba:7d:02:cc:15:3e:c5:bc: 47:6e:9b:5f:83:88:2b:8e:f6:24:ac:df:8e:9a:30: a4:fc:7d:9a:7c:fb:63:0d:d1:87:5e:eb:6b:ad:0b: 3d:47:47:75:99:c1:a9:41:8a:f2:d7:10:41:6f:97: bd:b0:18:39:30:98:14:da:46:15:34:d0:4c:9c:86: 5c:3e:92:b8:53:17:09:d1:cd:80:f4:21:d2:cd:3d: 4c:a9:8d:1c:db:f9:ec:17:2d:93:17:cf:4f:9e:6e: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:10:B5:FE:7F:0E:58:B4:91:DE:23:9A:BA:07:1B:D6:CB:9E:D1 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d9:50:69:0e:d9:78:a9:4f:f7:19:a6:bd:72:a7:de:52:31: c9:92:91:a2:92:71:0d:5c:63:35:53:3d:ae:d4:63:65:2e:c7: 37:a3:16:67:1e:36:e1:22:5a:62:4a:e1:83:5f:62:13:c4:5e: 23:1b:73:ae:47:9e:89:2f:00:1c:31:be:e2:17:b6:bb:7d:f8: 5a:29:de:6e:ed:8b:61:16:0c:07:58:ad:ed:90:39:fd:ce:7a: 4c:ea:0f:07:af:bf:39:ec:b2:da:d3:a4:9f:07:92:88:36:a4: e9:6a:ad:b9:06:2c:7e:da:42:25:14:29:11:fc:e1:03:9e:c6: 73:9f:b1:7e:2b:80:48:6f:7b:1a:fd:95:6b:c6:7a:0e:12:ed: ec:95:05:02:4a:16:f9:56:d8:64:53:18:35:b0:bc:61:4c:f4: 55:bd:26:dd:37:2d:dd:31:48:e1:e4:4b:ff:c4:18:44:b8:b0: fd:08:1d:67:a2:f3:bc:fa:58:aa:89:f8:54:01:e6:40:c0:44: bd:2a:10:3a:24:44:07:49:c5:2f:e6:13:ae:ae:aa:f6:5a:a6: 38:de:20:83:03:46:fb:70:04:82:41:a2:95:8a:ee:47:33:1d: 2a:87:1d:34:30:02:05:17:a9:55:aa:47:5f:96:36:15:b5:30: 6c:07:1d:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwNzAyMjExMzEwWhcNMjUwNzA5MjExMzEwWjAYMRYwFAYD VQQDEw02ODY1YTBlNi1kNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1PFXaV0ufDKNcOQjkFQ93p8HfOdjgiw3K1WR0Go+YUJ6VmtxKSYG5Qd/w+g eCYePsbEKt/HToArzLY6s+dCJzHtwsB8OmcM6GkFsCPOwDgyiEUBNCF+QqIppmo6 ON8ATXzPzYQEOIpf4nn8iR0Mm7rtsVPYiYV0k7AuXEKmc3YbUa0AfKeSkGFIxsuq /VMdT7KGCdi9fCnjdi4Tun0CzBU+xbxHbptfg4grjvYkrN+OmjCk/H2afPtjDdGH XutrrQs9R0d1mcGpQYry1xBBb5e9sBg5MJgU2kYVNNBMnIZcPpK4UxcJ0c2A9CHS zT1MqY0c2/nsFy2TF89Pnm6wKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKdELX+ fw5YtJHeI5q6BxvWy57RMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA2VBpDtl4qU/3Gaa9cqfeUjHJkpGiknENXGM1Uz2u1GNlLsc3oxZn HjbhIlpiSuGDX2ITxF4jG3OuR56JLwAcMb7iF7a7ffhaKd5u7YthFgwHWK3tkDn9 znpM6g8Hr7857LLa06SfB5KINqTpaq25Bix+2kIlFCkR/OEDnsZzn7F+K4BIb3sa /ZVrxnoOEu3slQUCShb5VthkUxg1sLxhTPRVvSbdNy3dMUjh5Ev/xBhEuLD9CB1n ovO8+liqifhUAeZAwES9KhA6JEQHScUv5hOurqr2WqY43iCDA0b7cASCQaKViu5H Mx0qhx00MAIFF6lVqkdfljYVtTBsBx2g -----END CERTIFICATE-----Generated at Thu Jul 3 21:29:35 2025 by rpki-client