$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: WzSLOkux6B5IX2r7EARMScfEcWT1yQcOOJOTug3dASs= Subject key identifier: BF:59:E1:F5:36:C9:1C:6A:1E:54:92:9F:23:06:2E:92:A6:D4:DE:58 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C2E Signing time: Wed 02 Jul 2025 18:50:29 +0000 Manifest this update: Wed 02 Jul 2025 18:50:29 +0000 Manifest next update: Wed 09 Jul 2025 18:50:29 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: QubuL/XnNahCHJsbFtkPXfKGHoAaYtop5/hMwIF6QOU=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: E0+Wetfx26FkfR/4N1Ow0BnaKFJugSEUCFgfURwthKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Jul 2 18:50:29 2025 GMT Not After : Jul 9 18:50:29 2025 GMT Subject: CN=68657f75-4663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:ac:8a:e6:45:7f:f7:19:47:a2:c4:43:b4: 1c:d0:5e:07:db:6a:74:f9:b7:1c:b2:f3:82:18:47: fe:e4:f9:ac:51:64:09:c9:21:dd:8e:28:f0:95:e3: eb:19:af:6d:42:ee:48:0b:dd:ab:43:ad:58:c4:ea: 65:60:73:a3:09:f0:80:6e:7d:d4:03:ed:7d:34:45: 7d:0b:29:81:83:d2:01:3e:67:5f:1e:e6:79:74:5b: bd:c4:cf:fb:2d:28:f4:31:29:98:d7:fc:54:ca:25: dd:01:b8:00:19:37:81:8d:c5:29:f0:89:75:a3:9c: a3:f0:5e:45:fa:03:68:38:97:a4:1e:63:45:33:a2: bb:d8:c6:05:f0:9f:99:c9:f8:d1:b4:fb:4b:19:ea: a1:74:81:33:3e:b1:3c:02:66:4b:d1:d3:c8:99:0c: 0a:16:f5:4f:6a:82:ff:fc:c5:aa:0b:65:f3:49:cc: c0:79:f8:05:db:41:ca:eb:bb:69:88:4c:97:19:96: b5:99:68:ed:2d:df:8f:6a:82:b9:d8:b3:07:f8:88: ce:95:47:49:05:95:9e:fb:87:55:69:f4:2a:01:e4: e6:46:93:7d:5a:c8:5a:1a:3e:d0:9f:e4:b9:04:ad: cd:07:53:51:c7:4d:a2:d1:4d:30:62:e3:3e:08:1f: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:E1:F5:36:C9:1C:6A:1E:54:92:9F:23:06:2E:92:A6:D4:DE:58 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:59:d7:c5:ab:f9:9f:f4:44:79:f7:3a:4c:91:aa:3e:60:fe: d9:91:cd:48:71:ee:d9:5d:b2:e2:3e:95:d2:53:48:fb:cc:dc: be:a8:cb:25:6e:3e:e8:2f:1b:f8:f5:47:89:cf:de:6e:8d:11: a8:03:b6:78:3a:55:34:f6:3e:11:0b:ec:a8:99:61:36:53:c5: c8:c9:a1:bb:65:93:5c:57:1e:b6:2e:18:b7:f5:e6:24:7c:36: 7e:dc:34:a8:8a:91:fa:2e:29:d9:fe:87:fc:a6:32:7c:5a:68: a9:4d:db:39:38:cf:20:b3:e1:f3:9d:0a:d0:7f:dd:23:9f:ed: 57:eb:fb:78:e0:5e:39:79:9a:8f:c1:6f:19:64:8e:f6:74:0c: b1:b1:2f:b6:fc:d7:83:ff:17:d4:3d:5b:22:d6:6e:b6:14:66: 66:1b:e4:0c:58:b9:bc:b4:19:38:79:c1:e2:0d:f3:1d:6c:ce: db:82:6b:47:04:f9:44:09:fb:17:0e:65:4b:2f:5a:80:e9:52: ef:42:05:c3:75:2d:3e:6e:4a:44:2e:b3:ee:84:47:9b:6d:2f: 7e:74:6c:73:2a:1a:81:6d:4f:45:93:eb:01:2a:a1:d2:22:79: 97:fe:65:c3:97:79:6a:6f:b3:ab:f0:ef:02:1a:fa:75:46:05: 43:c7:4e:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUwNzAyMTg1MDI5WhcNMjUwNzA5MTg1MDI5WjAYMRYwFAYD VQQDEw02ODY1N2Y3NS00NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApk+siuZFf/cZR6LEQ7Qc0F4H22p0+bccsvOCGEf+5PmsUWQJySHdjijwlePr Ga9tQu5IC92rQ61YxOplYHOjCfCAbn3UA+19NEV9CymBg9IBPmdfHuZ5dFu9xM/7 LSj0MSmY1/xUyiXdAbgAGTeBjcUp8Il1o5yj8F5F+gNoOJekHmNFM6K72MYF8J+Z yfjRtPtLGeqhdIEzPrE8AmZL0dPImQwKFvVPaoL//MWqC2XzSczAefgF20HK67tp iEyXGZa1mWjtLd+PaoK52LMH+IjOlUdJBZWe+4dVafQqAeTmRpN9WshaGj7Qn+S5 BK3NB1NRx02i0U0wYuM+CB/FrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9Z4fU2 yRxqHlSSnyMGLpKm1N5YMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdWdfFq/mf9ER59zpMkao+YP7Zkc1Ice7ZXbLiPpXSU0j7zNy+qMsl bj7oLxv49UeJz95ujRGoA7Z4OlU09j4RC+yomWE2U8XIyaG7ZZNcVx62Lhi39eYk fDZ+3DSoipH6LinZ/of8pjJ8WmipTds5OM8gs+HznQrQf90jn+1X6/t44F45eZqP wW8ZZI72dAyxsS+2/NeD/xfUPVsi1m62FGZmG+QMWLm8tBk4ecHiDfMdbM7bgmtH BPlECfsXDmVLL1qA6VLvQgXDdS0+bkpELrPuhEebbS9+dGxzKhqBbU9Fk+sBKqHS InmX/mXDl3lqb7Or8O8CGvp1RgVDx072 -----END CERTIFICATE-----Generated at Thu Jul 3 07:58:04 2025 by rpki-client