$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: iqTGohzmE3VOir3pUhZqJS4gLB72Xp+eFavPecEkPeo= Subject key identifier: 5E:9F:2A:A3:95:54:2C:AC:66:98:F8:41:AF:5E:56:2B:3D:BF:08:07 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0B25 Signing time: Mon 30 Jun 2025 19:26:05 +0000 Manifest this update: Mon 30 Jun 2025 19:26:05 +0000 Manifest next update: Mon 07 Jul 2025 19:26:05 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: raQUp++7hkCaW9acjeiILP6sZc2LDRALpIgozmROPtM=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: ce8eVhU6m1rxVz2XMIA3QgTRmrpD6cmjmSLDWld45vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Jun 30 19:26:05 2025 GMT Not After : Jul 7 19:26:05 2025 GMT Subject: CN=6862e4cd-d732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c9:a9:41:85:9b:c4:02:7a:2a:e5:fb:24:be: db:0e:98:f0:8d:b2:90:9c:16:83:28:e4:80:42:78: b7:c0:10:2c:78:32:6d:6b:3f:2f:4b:ab:3b:06:a3: ab:ad:40:bd:d4:ee:64:2c:eb:64:cc:36:f1:eb:ef: f6:90:93:17:97:76:fe:e3:b6:96:2f:1b:55:a9:84: 82:07:cb:22:f8:f4:fd:8b:89:4e:1c:11:1c:4e:d9: 81:b5:85:b5:fd:49:b6:63:af:3f:b5:53:0b:5f:be: d6:36:0c:a3:9b:85:d7:a5:f9:1b:07:99:1c:5b:b4: c0:82:f6:26:c5:ba:67:61:47:d4:5f:ad:53:42:92: a9:52:48:d6:12:f6:24:b7:88:03:1d:7b:c9:35:a9: 18:79:73:96:12:7b:f3:43:6e:4c:95:9c:7f:f0:b3: c5:80:f6:99:e8:f8:f9:b2:3d:18:07:03:fb:16:22: a0:7d:bf:99:2d:ed:42:50:65:22:17:b0:12:f3:5a: 03:ab:f5:36:ec:37:06:a2:4c:f9:41:c6:9b:97:b6: 63:05:d7:ad:e3:35:84:b1:63:71:d6:4f:f0:e0:55: 06:48:14:45:dc:f0:88:a6:2d:e1:77:f9:c3:bd:83: fd:ac:98:cc:ff:01:ee:69:8b:21:6f:2f:2e:8c:e1: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:2A:A3:95:54:2C:AC:66:98:F8:41:AF:5E:56:2B:3D:BF:08:07 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:96:06:00:ae:ab:e4:74:d4:02:b9:bf:2a:ca:16:47:cd:7b: cb:5e:9a:7c:d9:6e:98:8c:d6:30:52:82:6f:66:79:31:af:96: b0:d8:62:2a:ec:59:59:fb:30:63:a2:ee:41:8f:8d:89:4f:32: 21:bd:1f:4b:a3:38:17:a2:93:6f:28:e5:b6:41:17:c2:1d:5e: b1:d1:c1:a2:5e:22:b4:68:be:0b:6b:42:95:b7:48:80:6a:93: f9:a4:6a:4f:e7:e4:f6:ac:73:e8:21:64:52:9c:11:89:d7:63: c9:b0:26:2d:db:c1:65:66:35:35:12:fa:d1:47:46:a4:aa:40: 66:83:10:9c:1a:8e:81:de:57:e4:80:6d:14:85:e1:d5:92:84: 94:d3:98:f5:e4:7b:5b:ff:b9:a7:06:28:63:5c:a9:16:ca:a6: 85:70:4a:c4:2d:65:08:e8:4f:1b:00:96:eb:be:eb:a1:6a:eb: 53:97:07:c7:0e:ce:49:88:ae:a1:94:5a:b0:d5:03:3a:94:91: 41:c5:cf:d6:15:97:59:32:8b:5f:75:9e:16:2d:70:d8:db:33: 87:06:16:ea:66:88:2d:6b:84:1f:60:7c:8e:72:ec:fe:95:76: 6b:ac:ea:95:cd:ff:4f:3c:86:06:60:ae:89:b7:64:c7:94:fb: 73:e3:fc:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUwNjMwMTkyNjA1WhcNMjUwNzA3MTkyNjA1WjAYMRYwFAYD VQQDEw02ODYyZTRjZC1kNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5smpQYWbxAJ6KuX7JL7bDpjwjbKQnBaDKOSAQni3wBAseDJtaz8vS6s7BqOr rUC91O5kLOtkzDbx6+/2kJMXl3b+47aWLxtVqYSCB8si+PT9i4lOHBEcTtmBtYW1 /Um2Y68/tVMLX77WNgyjm4XXpfkbB5kcW7TAgvYmxbpnYUfUX61TQpKpUkjWEvYk t4gDHXvJNakYeXOWEnvzQ25MlZx/8LPFgPaZ6Pj5sj0YBwP7FiKgfb+ZLe1CUGUi F7AS81oDq/U27DcGokz5Qcabl7ZjBdet4zWEsWNx1k/w4FUGSBRF3PCIpi3hd/nD vYP9rJjM/wHuaYshby8ujOGe3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6fKqOV VCysZpj4Qa9eVis9vwgHMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnlgYArqvkdNQCub8qyhZHzXvLXpp82W6YjNYwUoJvZnkxr5aw2GIq 7FlZ+zBjou5Bj42JTzIhvR9LozgXopNvKOW2QRfCHV6x0cGiXiK0aL4La0KVt0iA apP5pGpP5+T2rHPoIWRSnBGJ12PJsCYt28FlZjU1EvrRR0akqkBmgxCcGo6B3lfk gG0UheHVkoSU05j15Htb/7mnBihjXKkWyqaFcErELWUI6E8bAJbrvuuhautTlwfH Ds5JiK6hlFqw1QM6lJFBxc/WFZdZMotfdZ4WLXDY2zOHBhbqZogta4QfYHyOcuz+ lXZrrOqVzf9PPIYGYK6Jt2THlPtz4/yh -----END CERTIFICATE-----Generated at Tue Jul 1 18:31:37 2025 by rpki-client