$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: 449rxKeHi9/SR1tFIfa55dV7y5DXo7Qoap8U1+aVL10= Subject key identifier: 27:05:37:53:30:DF:F4:31:C8:6D:47:D3:E5:21:D5:F5:BF:83:DC:B1 Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 058D Signing time: Mon 30 Jun 2025 23:38:55 +0000 Manifest this update: Mon 30 Jun 2025 23:38:54 +0000 Manifest next update: Mon 07 Jul 2025 23:38:54 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: YQtp0/IwPx//n2PKqhYPJjipCq3J5OmAImkPD6ViweU=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: eALzuGTBIdO32t7InjPCWdnlihceQ6Ej+q9aOFO73+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: Jun 30 23:38:54 2025 GMT Not After : Jul 7 23:38:54 2025 GMT Subject: CN=6863200e-151d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:2d:f8:05:b2:f4:58:87:15:d1:41:43:b5: e2:ab:0a:b0:0a:0b:29:60:15:56:b3:e3:b8:c6:d8: bb:f5:f9:00:93:9c:89:7b:25:56:b9:df:f1:7d:11: 87:62:81:86:c7:1f:f4:16:ac:f2:dc:ed:b3:e1:7b: 25:04:c4:16:7e:5a:24:37:61:ed:28:d7:a3:c2:a4: 0c:9f:c4:bc:fc:de:aa:a1:88:57:4d:8f:df:5e:85: 24:82:aa:fa:0a:d2:83:8c:9e:b4:c6:f5:75:b6:1e: f6:55:52:e3:2a:b0:ab:9e:9b:24:6e:8d:c0:20:ae: ec:f5:a6:5d:b6:c7:80:1f:32:dd:51:ee:1d:be:1f: d4:21:63:b5:a2:50:aa:dc:5b:4f:97:58:67:0b:5e: 92:84:2a:c7:55:ed:76:57:d6:46:e5:1e:c0:28:d6: d6:d5:75:66:ab:85:4c:2a:6b:a5:1b:d2:72:9a:d6: 26:ca:56:07:05:9c:f6:90:c0:5d:3c:28:e6:6d:f9: 8c:90:63:ac:30:bd:bc:6d:06:ad:4c:ba:a1:5d:34: df:22:58:e7:a9:84:dc:18:9d:d6:3d:16:73:7b:5d: 95:00:91:30:52:e5:93:a6:9b:2d:21:b5:f9:fe:fc: 4c:0c:73:18:a0:33:11:35:37:90:8f:db:2b:e0:d1: 72:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:05:37:53:30:DF:F4:31:C8:6D:47:D3:E5:21:D5:F5:BF:83:DC:B1 X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:98:84:d5:63:61:8b:1f:60:1f:e8:c7:06:6d:80:c2:cd:e6: b5:c4:74:85:57:95:c1:05:0c:b1:eb:13:3a:51:09:3c:50:b4: 96:f6:f1:44:29:3c:e8:0e:0d:89:1f:86:7b:71:40:1f:1c:82: 56:c8:32:71:d0:4b:7b:ec:99:77:9d:43:d9:e3:cf:9e:41:5e: 15:25:a5:66:60:5e:4a:3d:cf:a8:83:6f:3e:5e:8f:2a:31:f3: 08:78:83:be:67:1a:0b:cf:52:d5:f5:00:4f:d6:a5:64:77:6a: ec:56:de:cd:1d:ea:49:31:bd:e8:ae:d9:12:82:39:f1:44:74: 8d:2a:cf:a1:91:02:60:be:a8:aa:7e:67:a8:87:75:90:45:c7: a3:1d:4b:e8:15:a9:79:43:e4:88:4c:87:2a:b2:33:1c:f2:6a: 9f:c7:6c:d0:ff:90:a1:6c:5a:b5:a8:b8:b2:e9:81:40:90:9a: 62:63:dd:09:95:6b:c9:65:95:38:e1:69:92:5e:6d:c1:6b:c3: 0e:ba:70:07:96:8c:e1:0d:76:9a:d9:6d:0d:f7:af:5d:9b:70: 08:c7:7b:5b:df:ed:e4:fe:99:3d:cc:8a:cb:19:5c:6d:8e:11: 5c:2a:80:87:0c:a6:29:b6:54:84:fb:a7:dc:57:7e:f5:c3:13: 2e:00:f6:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjUwNjMwMjMzODU0WhcNMjUwNzA3MjMzODU0WjAYMRYwFAYD VQQDEw02ODYzMjAwZS0xNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e4t+AWy9FiHFdFBQ7XiqwqwCgspYBVWs+O4xti79fkAk5yJeyVWud/xfRGH YoGGxx/0Fqzy3O2z4XslBMQWflokN2HtKNejwqQMn8S8/N6qoYhXTY/fXoUkgqr6 CtKDjJ60xvV1th72VVLjKrCrnpskbo3AIK7s9aZdtseAHzLdUe4dvh/UIWO1olCq 3FtPl1hnC16ShCrHVe12V9ZG5R7AKNbW1XVmq4VMKmulG9JymtYmylYHBZz2kMBd PCjmbfmMkGOsML28bQatTLqhXTTfIljnqYTcGJ3WPRZze12VAJEwUuWTppstIbX5 /vxMDHMYoDMRNTeQj9sr4NFyHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcFN1Mw 3/QxyG1H0+Uh1fW/g9yxMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDImITVY2GLH2Af6McGbYDCzea1xHSFV5XBBQyx6xM6UQk8ULSW9vFE KTzoDg2JH4Z7cUAfHIJWyDJx0Et77Jl3nUPZ48+eQV4VJaVmYF5KPc+og28+Xo8q MfMIeIO+ZxoLz1LV9QBP1qVkd2rsVt7NHepJMb3ortkSgjnxRHSNKs+hkQJgvqiq fmeoh3WQRcejHUvoFal5Q+SITIcqsjMc8mqfx2zQ/5ChbFq1qLiy6YFAkJpiY90J lWvJZZU44WmSXm3Ba8MOunAHlozhDXaa2W0N969dm3AIx3tb3+3k/pk9zIrLGVxt jhFcKoCHDKYptlSE+6fcV371wxMuAPao -----END CERTIFICATE-----Generated at Tue Jul 1 09:03:27 2025 by rpki-client