$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json) Hash identifier: XyGg7vTPQYc9SfgoWf71Ebcq0I8Cae9AUX/4cLknmvg= Subject key identifier: 66:A8:C5:22:8B:2F:30:D5:3E:C4:9B:C2:52:D3:F3:25:18:A3:EF:85 Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Certificate serial: 0E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft Manifest number: 0E5A Signing time: Wed 02 Jul 2025 17:57:27 +0000 Manifest this update: Wed 02 Jul 2025 17:57:27 +0000 Manifest next update: Wed 09 Jul 2025 17:57:27 +0000 Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: viaIChIO33GaT3ihQyz9dQLc0ryi4uVYCSu+MRk/Ez0=) 2: 54E64EE89EAE11E9AF631F7DC4F9AE02.roa (hash: 0The5MPYFtfQmaLphNWjWN2ThdasfkuFEPqTQ5ZL6w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Validity Not Before: Jul 2 17:57:27 2025 GMT Not After : Jul 9 17:57:27 2025 GMT Subject: CN=68657307-814d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:4a:40:88:4a:40:4f:f9:88:1e:8d:9d:ea: af:14:29:a3:9e:2b:54:ed:5d:9c:ae:2a:c8:da:2c: f6:73:f7:4c:92:25:4a:a5:1a:24:d6:b4:b6:ee:b3: bf:68:9a:33:28:87:0b:ff:f7:04:38:33:b5:64:81: 47:42:e0:82:0d:97:77:75:0b:c2:fd:83:2d:34:1b: d7:96:f6:a4:30:be:36:43:89:35:95:f2:89:2a:e8: 9a:20:61:54:e8:50:b4:9a:85:01:50:64:16:ba:44: 1e:3f:13:a8:7a:c9:6e:e2:ce:12:a6:99:56:ae:8e: f7:16:29:d1:9c:82:18:bc:39:55:fb:0f:fc:43:c1: aa:06:26:42:26:73:10:4d:a0:16:db:f6:0b:49:26: 38:57:a5:55:dd:ff:e3:3e:a5:34:c1:23:6d:4b:28: da:98:c4:2d:8e:11:e5:9f:a1:5d:94:b8:fa:b7:a0: 64:23:72:49:3e:3f:44:bc:e9:1e:ee:f6:7e:13:f7: ff:ad:0d:f1:3a:7e:fb:24:0d:fe:59:e1:e6:2f:7c: 24:52:7e:7c:f8:30:22:7c:98:0d:b2:99:b3:4f:72: 96:c4:eb:b3:d8:16:2c:26:c2:59:80:7f:20:73:63: d5:53:2e:bf:50:fe:22:d0:85:bc:f5:ee:25:40:5b: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:C5:22:8B:2F:30:D5:3E:C4:9B:C2:52:D3:F3:25:18:A3:EF:85 X509v3 Authority Key Identifier: keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:96:9c:fb:9f:72:44:b1:b5:f2:a7:55:64:a2:1a:2a:35:5c: b7:eb:da:84:de:46:ca:f3:ab:ef:39:f7:bd:b7:1d:ef:98:00: 33:c1:8f:f4:22:9b:6e:01:5c:89:e4:62:d6:c8:cf:89:db:3c: fb:c9:be:90:87:a2:bd:14:23:09:6c:32:91:a1:b7:24:52:5e: cb:52:95:07:23:f7:5b:35:da:8a:2e:8f:2a:11:07:f7:cf:31: d5:17:1b:78:12:f0:7f:3b:33:0d:95:4a:a5:50:29:e1:98:30: e6:31:ab:36:35:b1:d5:0d:54:29:4a:e0:fc:32:f7:c6:f6:51: c7:c5:88:dc:5f:fe:2f:42:6d:2c:ed:bc:cb:74:1e:ed:6d:d3: 13:a4:df:94:f4:cc:db:8e:81:3b:f6:4a:01:ba:be:aa:a7:40: 67:cc:26:9f:ed:b6:9e:7a:7a:2e:4a:de:93:8e:6a:02:46:da: 26:d8:2b:ad:77:d6:7e:40:94:dd:a8:5f:dd:72:94:1a:3c:ac: 12:e2:d4:ef:a9:e6:09:a8:49:e3:1f:7d:f4:77:44:2c:3a:1d: 6f:45:29:1d:38:73:1a:b8:44:8f:63:bf:1c:19:bc:95:e1:91: 4c:32:1a:f2:55:25:ed:96:61:64:6a:45:f9:94:de:a1:4c:d3: 86:1f:42:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF QTI3MTYzRUYwHhcNMjUwNzAyMTc1NzI3WhcNMjUwNzA5MTc1NzI3WjAYMRYwFAYD VQQDEw02ODY1NzMwNy04MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyalKQIhKQE/5iB6NneqvFCmjnitU7V2crirI2iz2c/dMkiVKpRok1rS27rO/ aJozKIcL//cEODO1ZIFHQuCCDZd3dQvC/YMtNBvXlvakML42Q4k1lfKJKuiaIGFU 6FC0moUBUGQWukQePxOoeslu4s4SpplWro73FinRnIIYvDlV+w/8Q8GqBiZCJnMQ TaAW2/YLSSY4V6VV3f/jPqU0wSNtSyjamMQtjhHln6FdlLj6t6BkI3JJPj9EvOke 7vZ+E/f/rQ3xOn77JA3+WeHmL3wkUn58+DAifJgNspmzT3KWxOuz2BYsJsJZgH8g c2PVUy6/UP4i0IW89e4lQFtGuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaoxSKL LzDVPsSbwlLT8yUYo++FMB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdlpz7n3JEsbXyp1VkohoqNVy369qE3kbK86vvOfe9tx3vmAAzwY/0 IptuAVyJ5GLWyM+J2zz7yb6Qh6K9FCMJbDKRobckUl7LUpUHI/dbNdqKLo8qEQf3 zzHVFxt4EvB/OzMNlUqlUCnhmDDmMas2NbHVDVQpSuD8MvfG9lHHxYjcX/4vQm0s 7bzLdB7tbdMTpN+U9MzbjoE79koBur6qp0BnzCaf7baeenouSt6TjmoCRtom2Cut d9Z+QJTdqF/dcpQaPKwS4tTvqeYJqEnjH330d0QsOh1vRSkdOHMauESPY78cGbyV 4ZFMMhryVSXtlmFkakX5lN6hTNOGH0Ll -----END CERTIFICATE-----Generated at Thu Jul 3 06:05:18 2025 by rpki-client