$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft File: gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json) Hash identifier: B3f1JbflpDnbRSs1gbvB5+Voyl29sXB/GLRHdRZSw/o= Subject key identifier: 0E:DC:14:EE:65:31:92:4D:F5:8F:32:88:7B:1D:FE:86:E5:E9:82:E8 Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1 Certificate issuer: /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft Manifest number: A6 Signing time: Tue 01 Jul 2025 06:51:56 +0000 Manifest this update: Tue 01 Jul 2025 06:51:55 +0000 Manifest next update: Tue 08 Jul 2025 06:51:55 +0000 Files and hashes: 1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: keA6td/dlU6DHhz2pci+SGGadhHINacinFvE0BPApFc=) 2: 833934745B9E11EFA7D10E5BC4F9AE02.roa (hash: Z7ymI4gwgufBDRVS5UuVZ13UBlK2Svt1pgBpOJn+u0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1 Validity Not Before: Jul 1 06:51:55 2025 GMT Not After : Jul 8 06:51:55 2025 GMT Subject: CN=6863858b-65d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:4b:de:db:dc:f1:cc:75:fd:50:71:ce:23: 7e:86:a8:d5:4f:6a:7c:b8:3a:83:13:d9:92:72:48: b8:4b:0d:81:8a:f7:0b:76:2e:c7:59:76:28:af:cf: 91:4c:94:bd:ef:4c:f0:9a:ed:5b:9f:62:0b:f2:c0: 36:f2:70:8d:a4:4a:d3:b7:a6:33:03:40:0f:fe:3c: 9e:b3:e3:da:4b:c9:db:6f:69:41:5c:62:c6:be:4f: f2:e2:bf:0e:3a:1e:8f:96:06:0a:26:66:bd:21:f5: cb:05:54:31:d4:12:1f:4c:97:97:a6:51:c7:58:58: 7f:92:e2:a3:e9:c4:95:11:f5:4f:bc:98:3d:e6:fe: f8:27:39:2c:82:3c:97:c8:a4:0d:18:0c:54:e8:a2: 00:c6:92:fc:fb:78:2d:73:c8:91:06:03:6b:d5:74: 40:5b:6d:fc:02:55:97:52:eb:c2:16:15:13:2d:46: e0:38:3e:78:2c:05:2b:44:b8:25:37:c4:37:cf:e8: 9a:c3:c8:2e:e6:9e:09:6e:16:64:e2:e3:0a:ea:c6: 20:d6:7b:7b:79:57:3e:74:cf:b6:9b:7d:1f:ea:e6: 19:7c:ca:c8:3a:27:ff:8c:55:68:6d:5d:44:31:c3: 0e:19:19:7b:62:c2:0b:00:e0:6c:44:b3:ae:f5:33: c7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DC:14:EE:65:31:92:4D:F5:8F:32:88:7B:1D:FE:86:E5:E9:82:E8 X509v3 Authority Key Identifier: keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:69:b4:bf:5b:52:6a:41:66:66:9c:4f:90:97:86:a2:dc:5c: 57:38:ef:7a:c1:a7:7c:46:d7:c2:cc:2b:32:16:4d:ea:0f:23: 4d:c7:36:6e:4e:45:e0:0e:92:0f:cd:ab:5c:a7:09:3e:fc:24: 54:ab:98:21:14:31:ce:a7:ea:76:90:9a:d3:b6:ef:50:e1:cb: c5:96:15:8a:f0:4b:95:e2:c1:f1:c7:ea:05:ed:8e:52:b0:94: 8d:63:f3:3e:c5:f5:bf:e1:cc:d8:6a:0c:5f:26:63:a5:06:2d: 7d:2a:50:90:0d:e0:0a:ee:96:15:bc:6e:4e:0d:06:10:c0:d7: 99:cd:21:60:c1:85:0e:93:51:f6:f1:4c:79:ed:54:80:ba:f8: 72:87:94:59:50:b2:66:e3:3d:26:01:44:43:70:9c:36:01:49: d6:12:5b:4b:20:8a:84:53:68:3a:dc:b1:7a:cc:5e:8d:be:50: e4:43:28:c6:5e:71:1a:4c:db:5b:17:a9:81:c8:52:09:4f:22: d9:a9:3d:8e:e1:10:6d:47:eb:7f:95:5f:a9:6c:a1:81:b8:de: d0:a8:db:a0:25:25:82:c3:2a:4e:6a:17:54:13:59:51:38:14: e6:a1:82:bd:3e:23:9a:44:f2:a4:8e:99:a2:6f:0c:a3:2a:dd: 15:86:1b:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MTExMTAvBgNVBAUTKDgyOUFEODU3NTcyNTY4N0IxRjBBNEM1NUY5NDIyQUYz M0IwMEZDQjEwHhcNMjUwNzAxMDY1MTU1WhcNMjUwNzA4MDY1MTU1WjAYMRYwFAYD VQQDEw02ODYzODU4Yi02NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1JL3tvc8cx1/VBxziN+hqjVT2p8uDqDE9mScki4Sw2BivcLdi7HWXYor8+R TJS970zwmu1bn2IL8sA28nCNpErTt6YzA0AP/jyes+PaS8nbb2lBXGLGvk/y4r8O Oh6PlgYKJma9IfXLBVQx1BIfTJeXplHHWFh/kuKj6cSVEfVPvJg95v74JzksgjyX yKQNGAxU6KIAxpL8+3gtc8iRBgNr1XRAW238AlWXUuvCFhUTLUbgOD54LAUrRLgl N8Q3z+iaw8gu5p4JbhZk4uMK6sYg1nt7eVc+dM+2m30f6uYZfMrIOif/jFVobV1E McMOGRl7YsILAOBsRLOu9TPHsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7cFO5l MZJN9Y8yiHsd/obl6YLoMB8GA1UdIwQYMBaAFIKa2FdXJWh7HwpMVflCKvM7APyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUxMS8yRENGRjYxMjVC OUUxMUVGOTQ4NDYzNUFDNEY5QUUwMi9ncHJZVjFjbGFIc2ZDa3hWLVVJcTh6c0Ff TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwcllWMWNsYUhzZkNreFYtVUlxOHpzQV9MRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUxMS8yRENGRjYxMjVCOUUxMUVGOTQ4NDYzNUFDNEY5QUUwMi9ncHJZVjFjbGFI c2ZDa3hWLVVJcTh6c0FfTEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+abS/W1JqQWZmnE+Ql4ai3FxXOO96wad8RtfCzCsyFk3qDyNNxzZu TkXgDpIPzatcpwk+/CRUq5ghFDHOp+p2kJrTtu9Q4cvFlhWK8EuV4sHxx+oF7Y5S sJSNY/M+xfW/4czYagxfJmOlBi19KlCQDeAK7pYVvG5ODQYQwNeZzSFgwYUOk1H2 8Ux57VSAuvhyh5RZULJm4z0mAURDcJw2AUnWEltLIIqEU2g63LF6zF6NvlDkQyjG XnEaTNtbF6mByFIJTyLZqT2O4RBtR+t/lV+pbKGBuN7QqNugJSWCwypOahdUE1lR OBTmoYK9PiOaRPKkjpmibwyjKt0VhhtR -----END CERTIFICATE-----Generated at Thu Jul 3 07:04:40 2025 by rpki-client