$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: HrJBc39WYW77XPNMqL4SQK8SzOrPITRc3Sg9UbEYsnM= Subject key identifier: A0:27:93:00:9B:9E:73:81:0D:EB:5E:36:06:5B:96:D8:AB:A7:6C:FE Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 03E7 Signing time: Thu 03 Jul 2025 00:54:26 +0000 Manifest this update: Thu 03 Jul 2025 00:54:26 +0000 Manifest next update: Thu 10 Jul 2025 00:54:26 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: 6eFjoYhybPEFjFwK7vJ/KOKZGZOwmRx4+c4hD8mQ/s8=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: Jul 3 00:54:26 2025 GMT Not After : Jul 10 00:54:26 2025 GMT Subject: CN=6865d4c2-b02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:4a:31:4b:ff:21:ae:7e:52:27:71:92:3f: 12:cb:5b:51:d3:a9:0a:3f:fc:2a:cc:4f:52:0e:3d: 79:b2:dd:97:06:cd:be:d4:57:b3:f3:17:97:26:05: 0c:66:45:40:92:8c:4a:79:b3:6f:d4:51:0a:b3:c3: 40:a7:cf:ca:ce:2c:19:0e:b9:f3:2b:ec:4a:44:6a: 9a:cf:a5:11:58:ac:e5:54:64:ac:eb:8c:f1:7e:f3: 00:8e:83:52:03:b3:7c:56:4d:39:2e:af:e7:dc:c7: 49:ba:f2:e2:e7:71:fe:85:fd:8f:95:46:13:9f:ef: d2:d3:56:10:f2:fc:11:ca:e0:59:ba:25:27:15:72: 2f:70:d5:68:bb:2c:23:4b:10:7e:d1:70:de:d3:a5: 49:87:c4:9b:0c:2b:5e:75:cc:67:f5:1c:33:87:be: 50:f0:d3:9c:de:17:33:df:64:f8:b5:df:aa:e2:91: 7c:a0:9b:6e:c4:47:61:8f:ef:37:68:ec:1e:3b:4e: a3:98:f7:7c:86:66:ce:b2:52:11:94:60:c7:a3:d0: 7a:38:be:90:b9:af:5c:fb:d6:35:46:5e:ef:cc:a1: 75:93:5f:9e:4f:4b:1a:ac:ff:3e:f4:b9:c1:e2:d1: d5:79:1a:20:fa:0f:74:a7:55:a9:7f:75:b4:50:ea: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:27:93:00:9B:9E:73:81:0D:EB:5E:36:06:5B:96:D8:AB:A7:6C:FE X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a0:de:2c:4f:6a:98:cd:3f:81:3b:73:1d:43:65:6a:b2:d4: 59:b6:05:f7:7c:55:ac:56:7c:62:3e:85:d2:f7:06:b1:57:f8: 13:4c:96:bc:d1:7f:40:45:c7:0e:6f:ef:27:e4:ab:88:83:d1: af:5b:89:62:c3:68:e4:ac:fa:df:67:3d:ab:0a:f4:54:36:2e: c5:f4:9a:a0:ad:ce:79:c8:ba:ad:7a:ff:92:0b:ab:cf:e5:9b: 1d:36:65:1f:0e:37:83:4d:95:36:6c:de:00:32:33:5d:98:7e: 87:85:cc:92:27:b9:76:3b:6c:5b:7c:19:b8:93:bc:c3:b7:21: e5:c0:13:aa:02:e1:29:e5:15:32:e5:3b:aa:1d:1b:39:d4:a4: dc:91:36:4c:a1:0f:cb:66:5e:cc:85:02:ed:4b:d5:62:14:0d: 94:04:7e:16:cc:7c:0b:58:97:c3:2a:dc:59:86:a1:4d:b4:77: c2:cf:43:e8:1c:73:ab:de:f7:55:03:11:db:21:d2:ea:0a:6d: f2:e3:95:5f:98:3c:a9:93:69:dd:ce:06:ea:e6:7d:4c:d6:3a: ee:c6:61:72:f8:79:82:a8:00:dc:74:4a:ba:ea:02:ee:71:c4: f9:c8:95:bb:76:3d:75:a7:32:72:54:ba:b1:a7:f0:cd:5e:43: 45:34:f0:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjUwNzAzMDA1NDI2WhcNMjUwNzEwMDA1NDI2WjAYMRYwFAYD VQQDEw02ODY1ZDRjMi1iMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz61KMUv/Ia5+Uidxkj8Sy1tR06kKP/wqzE9SDj15st2XBs2+1Fez8xeXJgUM ZkVAkoxKebNv1FEKs8NAp8/KziwZDrnzK+xKRGqaz6URWKzlVGSs64zxfvMAjoNS A7N8Vk05Lq/n3MdJuvLi53H+hf2PlUYTn+/S01YQ8vwRyuBZuiUnFXIvcNVouywj SxB+0XDe06VJh8SbDCtedcxn9Rwzh75Q8NOc3hcz32T4td+q4pF8oJtuxEdhj+83 aOweO06jmPd8hmbOslIRlGDHo9B6OL6Qua9c+9Y1Rl7vzKF1k1+eT0sarP8+9LnB 4tHVeRog+g90p1Wpf3W0UOrBAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAnkwCb nnOBDeteNgZbltirp2z+MB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAioN4sT2qYzT+BO3MdQ2VqstRZtgX3fFWsVnxiPoXS9waxV/gTTJa8 0X9ARccOb+8n5KuIg9GvW4liw2jkrPrfZz2rCvRUNi7F9Jqgrc55yLqtev+SC6vP 5ZsdNmUfDjeDTZU2bN4AMjNdmH6HhcySJ7l2O2xbfBm4k7zDtyHlwBOqAuEp5RUy 5TuqHRs51KTckTZMoQ/LZl7MhQLtS9ViFA2UBH4WzHwLWJfDKtxZhqFNtHfCz0Po HHOr3vdVAxHbIdLqCm3y45VfmDypk2ndzgbq5n1M1jruxmFy+HmCqADcdEq66gLu ccT5yJW7dj11pzJyVLqxp/DNXkNFNPB5 -----END CERTIFICATE-----Generated at Thu Jul 3 23:37:54 2025 by rpki-client