$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json) Hash identifier: vlhU2wqv+QGRWoNtwdsy4C3/dbJjgB2HOjvhA9kM5B8= Subject key identifier: 61:AC:DF:77:55:91:61:2E:22:04:D2:37:FB:47:E1:07:89:5D:1F:83 Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft Manifest number: 20 Signing time: Thu 03 Jul 2025 08:07:21 +0000 Manifest this update: Thu 03 Jul 2025 08:07:20 +0000 Manifest next update: Thu 10 Jul 2025 08:07:20 +0000 Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: F8J4KO6AsDu+pLrfk97PgdX8X8DF4TBZm2bDdtXCiZk=) 2: D7605790272B11F08FF39632C4F9AE02.roa (hash: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Validity Not Before: Jul 3 08:07:20 2025 GMT Not After : Jul 10 08:07:20 2025 GMT Subject: CN=68663a38-67e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:28:a5:a0:ab:94:80:af:ed:e0:52:e5:8c: e8:57:6d:c4:39:4c:0d:be:4d:e3:4d:f3:80:a7:19: d5:34:c0:e1:81:96:cd:fa:a7:1b:d9:ae:07:da:d6: 17:e2:37:e5:3e:29:4f:bf:ef:d5:29:72:ac:8a:4b: b3:df:92:79:a7:4f:77:76:d0:2a:5f:d6:f0:0d:59: 9f:57:9a:e3:93:bf:41:26:3a:96:64:cc:93:12:eb: f8:24:2b:f8:6c:89:14:01:e8:3c:ff:2d:46:8a:39: f1:53:d7:f4:53:64:6d:07:38:db:9d:d6:b9:68:72: 58:a1:42:34:c9:26:30:ca:ae:c6:f8:c7:9c:0e:b5: b9:34:7d:bb:3d:7e:72:97:18:c5:73:44:ae:2d:0b: 16:6a:be:d0:12:5e:81:53:1c:5e:fe:93:87:b0:67: 87:c4:b3:a1:4e:47:9d:93:88:b9:da:6e:c7:11:f5: 75:8a:6f:8c:b1:cd:7b:6c:47:da:b8:31:b0:87:18: 58:bb:7f:15:35:4b:0b:c1:62:7c:c9:96:60:f2:97: 9e:16:70:31:4e:fc:3b:11:a6:30:29:ea:70:3d:ae: c2:4d:f7:7a:0a:0b:fc:5e:87:c1:43:80:f0:8c:5f: 5d:db:fb:54:9b:4c:d1:2f:20:7e:8a:d6:0d:73:9c: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AC:DF:77:55:91:61:2E:22:04:D2:37:FB:47:E1:07:89:5D:1F:83 X509v3 Authority Key Identifier: keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4d:c6:f0:b6:a8:b4:a8:e9:3d:e0:1c:4b:45:33:72:22:d2: e0:67:f8:be:42:05:96:4d:5f:8b:4d:bf:37:ad:64:7e:dc:a0: fe:b4:a3:3c:82:24:69:6f:c6:8a:1c:9f:e0:04:c0:9e:95:a1: 57:42:77:06:04:dd:4e:6d:ff:8b:69:36:40:34:bf:52:19:90: 60:4d:67:de:91:3a:e7:d6:f3:c7:00:4b:73:43:ce:29:be:f5: 6f:e7:f2:e8:c3:11:37:37:57:7c:f1:d5:bc:10:79:9c:41:a9: 71:57:12:3e:24:91:2a:f4:9c:d7:a9:5a:70:a6:5e:cc:a8:a9: a8:d6:3a:6d:eb:66:c8:d2:df:4d:c5:ea:24:95:83:36:51:46: ea:e4:7a:b3:fd:8d:cd:a4:5d:6b:5f:de:1f:03:fd:0c:c2:7b: d4:af:12:89:80:8e:28:46:5e:7d:ba:b6:61:a8:15:ec:f5:98: f1:fe:a4:16:51:88:37:95:81:4c:b2:9b:39:d8:97:15:14:3b: 58:ae:76:ba:ff:6d:c0:b0:b2:57:84:0d:12:24:1a:c8:90:8d: 5a:a9:51:0c:64:ca:e3:e0:d5:97:69:72:b0:9c:c5:65:7a:c4: a7:90:cf:cd:36:47:a2:16:7b:36:99:ec:ca:26:6a:da:2e:16: 1d:65:ce:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0U2RjExMC8GA1UEBRMoMUIxQUYxODM1MTA2QzkzMzlBREQzMTQ1RTkwMEIwNkZE QTlFNTZFNzAeFw0yNTA3MDMwODA3MjBaFw0yNTA3MTAwODA3MjBaMBgxFjAUBgNV BAMTDTY4NjYzYTM4LTY3ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAJiiloKuUgK/t4FLljOhXbcQ5TA2+TeNN84CnGdU0wOGBls36pxvZrgfa1hfi N+U+KU+/79UpcqyKS7PfknmnT3d20Cpf1vANWZ9XmuOTv0EmOpZkzJMS6/gkK/hs iRQB6Dz/LUaKOfFT1/RTZG0HONud1rloclihQjTJJjDKrsb4x5wOtbk0fbs9fnKX GMVzRK4tCxZqvtASXoFTHF7+k4ewZ4fEs6FOR52TiLnabscR9XWKb4yxzXtsR9q4 MbCHGFi7fxU1SwvBYnzJlmDyl54WcDFO/DsRpjAp6nA9rsJN93oKC/xeh8FDgPCM X13b+1SbTNEvIH6K1g1znJn1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYazfd1WR YS4iBNI3+0fhB4ldH4MwHwYDVR0jBBgwFoAUGxrxg1EGyTOa3TFF6QCwb9qeVucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRTZGLzJEMTgxN0I0Mjcy QjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3hyeGcxRUd5VE9hM1RGRjZRQ3diOXFlVnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD RTZGLzJEMTgxN0I0MjcyQjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRP YTNURkY2UUN3YjlxZVZ1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAtNxvC2qLSo6T3gHEtFM3Ii0uBn+L5CBZZNX4tNvzetZH7coP60ozyC JGlvxoocn+AEwJ6VoVdCdwYE3U5t/4tpNkA0v1IZkGBNZ96ROufW88cAS3NDzim+ 9W/n8ujDETc3V3zx1bwQeZxBqXFXEj4kkSr0nNepWnCmXsyoqajWOm3rZsjS303F 6iSVgzZRRurkerP9jc2kXWtf3h8D/QzCe9SvEomAjihGXn26tmGoFez1mPH+pBZR iDeVgUyymznYlxUUO1iudrr/bcCwsleEDRIkGsiQjVqpUQxkyuPg1ZdpcrCcxWV6 xKeQz802R6IWezaZ7MomatouFh1lzis= -----END CERTIFICATE-----Generated at Sat Jul 5 01:49:40 2025 by rpki-client