$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: WJ8/o0MK1pAtdBoiYqvH5wDYmh8fk2GnejJlRkELoz8= Subject key identifier: F2:91:9D:4C:74:2C:FD:5F:D7:CE:73:DC:97:98:D1:E9:B4:4A:66:4D Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 0618 Signing time: Wed 02 Jul 2025 23:11:38 +0000 Manifest this update: Wed 02 Jul 2025 23:11:37 +0000 Manifest next update: Wed 09 Jul 2025 23:11:37 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: /dUI6DJlZw7MeX2/Y41Mi2q0D5s1K01gtk5W3tkYBk8=) 2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=) 3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=) 4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: Jul 2 23:11:37 2025 GMT Not After : Jul 9 23:11:37 2025 GMT Subject: CN=6865bcaa-1cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:15:c9:0a:03:d2:e8:10:ab:95:96:e7:c9: 33:a0:26:2b:91:6e:df:71:d2:60:e3:d5:b3:91:e6: 0a:fe:33:e5:34:c6:b8:be:31:35:2e:6a:18:20:a8: 45:1b:1d:db:ca:b4:5e:92:4e:36:6e:74:13:48:59: 81:52:5c:5d:08:10:22:67:34:2e:4b:81:60:dc:f9: d5:69:48:2d:10:c6:8f:17:8e:90:22:d6:aa:9f:49: b3:9f:c7:ab:ec:5a:80:ab:df:79:8e:b3:c1:4a:cf: 8a:6d:40:1e:21:e6:ea:d2:3c:c9:53:4e:68:8f:f2: a8:e2:78:7f:32:d0:39:b9:76:45:fa:b5:cc:9f:b7: d1:22:70:cc:c2:9f:eb:df:4b:05:83:87:42:be:ed: d4:c1:6f:80:5e:81:31:1d:cb:84:3e:d1:b1:46:8a: 7b:1a:2b:b1:82:f2:f8:94:ab:c5:a7:d9:81:24:b4: 5c:75:a8:33:ec:d5:e9:f3:94:78:c2:fe:16:ab:1e: 19:13:bc:19:74:2d:6b:c8:1c:e8:ef:2d:77:ed:ee: 70:c3:ba:4d:8e:50:d9:7d:34:7e:9d:8e:db:ff:5e: 91:67:a3:2a:3e:e4:cb:2e:2b:59:70:9a:c8:41:e9: c3:f7:85:e6:d2:59:27:02:ca:9e:08:47:35:25:0d: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:9D:4C:74:2C:FD:5F:D7:CE:73:DC:97:98:D1:E9:B4:4A:66:4D X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c4:4a:d1:86:78:be:ca:d8:cf:33:34:e0:90:e1:df:ca:ac: 46:cf:75:4b:e9:7c:a4:74:46:37:32:40:08:f0:c1:55:50:f3: 17:36:e4:4e:fb:ae:ff:09:5e:8e:25:09:73:f7:c2:3b:5a:84: 8d:f7:c4:cc:cb:08:e1:e6:69:99:7b:82:d6:f5:c2:91:e9:ea: 3b:8f:f4:dd:fc:d7:2e:2d:2e:64:77:72:6a:dd:79:b9:e8:1e: 18:81:18:f4:22:37:bf:ce:76:70:1f:77:9d:7b:5f:e0:9d:cc: 5f:23:11:1e:b7:be:dd:c8:65:b7:d3:11:b5:70:8c:31:96:47: b4:79:b6:a6:7f:0d:21:2d:3e:fe:6f:b6:5d:e9:b6:a8:45:dd: b8:71:82:7c:f0:da:47:f6:65:0d:99:a8:29:21:e7:fd:1e:f1: a8:68:fc:1f:ac:a5:2d:92:e7:b7:61:a1:65:f5:6c:55:e6:84: 31:8d:e0:01:24:41:f0:9c:95:79:1c:82:5a:71:5c:e2:40:73: 1a:ea:14:87:27:b8:a4:ac:11:04:c3:65:d5:5b:48:2c:fb:9c: 00:e2:9a:82:a8:64:ce:c4:62:27:cc:6c:96:2a:fc:d6:aa:7c: 92:9d:93:93:f4:e2:cf:d4:55:ff:f4:00:89:76:ae:d1:61:aa: ff:67:1e:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjUwNzAyMjMxMTM3WhcNMjUwNzA5MjMxMTM3WjAYMRYwFAYD VQQDEw02ODY1YmNhYS0xY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPEVyQoD0ugQq5WW58kzoCYrkW7fcdJg49WzkeYK/jPlNMa4vjE1LmoYIKhF Gx3byrRekk42bnQTSFmBUlxdCBAiZzQuS4Fg3PnVaUgtEMaPF46QItaqn0mzn8er 7FqAq995jrPBSs+KbUAeIebq0jzJU05oj/Ko4nh/MtA5uXZF+rXMn7fRInDMwp/r 30sFg4dCvu3UwW+AXoExHcuEPtGxRop7GiuxgvL4lKvFp9mBJLRcdagz7NXp85R4 wv4Wqx4ZE7wZdC1ryBzo7y137e5ww7pNjlDZfTR+nY7b/16RZ6MqPuTLLitZcJrI QenD94Xm0lknAsqeCEc1JQ0seQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKRnUx0 LP1f185z3JeY0em0SmZNMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDxErRhni+ytjPMzTgkOHfyqxGz3VL6XykdEY3MkAI8MFVUPMXNuRO +67/CV6OJQlz98I7WoSN98TMywjh5mmZe4LW9cKR6eo7j/Td/NcuLS5kd3Jq3Xm5 6B4YgRj0Ije/znZwH3ede1/gncxfIxEet77dyGW30xG1cIwxlke0ebamfw0hLT7+ b7Zd6baoRd24cYJ88NpH9mUNmagpIef9HvGoaPwfrKUtkue3YaFl9WxV5oQxjeAB JEHwnJV5HIJacVziQHMa6hSHJ7ikrBEEw2XVW0gs+5wA4pqCqGTOxGInzGyWKvzW qnySnZOT9OLP1FX/9ACJdq7RYar/Zx5m -----END CERTIFICATE-----Generated at Thu Jul 3 04:27:29 2025 by rpki-client