$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json) Hash identifier: pk8xAGlZC+yf1r54UNvItlDnIbpv2DUXZ6emiRI+mdY= Subject key identifier: BC:33:FC:2D:E5:FB:56:78:56:D6:81:17:D7:69:82:F1:8A:F5:ED:0E Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft Manifest number: C0 Signing time: Tue 01 Jul 2025 06:28:36 +0000 Manifest this update: Tue 01 Jul 2025 06:28:35 +0000 Manifest next update: Tue 08 Jul 2025 06:28:35 +0000 Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: Beig8VmQSBT9snz0CLsBuoGge99wghhsy+IstOM6650=) 2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: 6k5p/IoEaHlPBZxEG5I/1TmRBsboDJLoq3IRABT/4wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Jul 1 06:28:35 2025 GMT Not After : Jul 8 06:28:35 2025 GMT Subject: CN=68638014-7ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:b8:45:72:1e:9a:18:90:db:6a:83:6d:1f: 3a:03:2a:90:ad:69:6e:d7:56:62:07:11:56:5b:8b: bd:c1:6e:8b:e2:4f:af:ac:0f:85:f5:79:e4:0f:6c: e5:66:10:cb:92:34:cf:98:04:21:19:c7:1f:47:94: e4:d3:7b:b0:9c:56:c9:6c:5a:f6:4e:0b:04:52:1d: c7:cf:d9:7b:df:a2:80:a9:b9:0a:4a:3b:60:60:b3: b3:f0:43:9e:75:59:03:72:4b:8d:ec:a2:11:95:84: 3b:ab:b0:d9:61:25:37:cf:17:98:34:eb:12:82:cc: 8a:fc:c1:a3:3e:54:07:2a:f8:b5:94:ea:89:09:cb: 53:f2:b9:ff:ea:53:8a:65:b7:45:4b:7d:9b:cb:b3: 96:1b:75:3d:49:ed:a2:5c:1f:94:93:be:67:40:4b: cb:9c:cf:7e:94:ec:ca:9d:f7:f7:f2:e1:3a:86:7b: 36:7b:e9:35:b5:aa:2c:e2:0e:81:11:b5:da:54:e6: 69:44:b5:47:ef:2a:a8:b8:34:19:aa:4a:56:c9:06: f5:32:3f:c6:0f:58:38:96:77:bb:cd:07:33:3b:85: 91:0e:36:7b:dd:a7:77:8a:8e:06:47:44:a3:0f:9f: 02:6a:2f:e2:fa:86:8a:93:33:28:80:d0:ca:5f:6e: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:33:FC:2D:E5:FB:56:78:56:D6:81:17:D7:69:82:F1:8A:F5:ED:0E X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:09:2b:fb:16:33:b0:6f:30:67:14:3b:99:21:f8:7a:d7:7d: c8:8a:b1:c2:2d:d9:e9:23:49:49:46:a0:6a:19:c1:26:a6:65: 8f:89:f1:52:6d:ec:c6:67:71:47:b8:c8:19:24:40:cf:fc:ee: e1:94:f7:8e:10:6b:8e:09:ea:4d:8d:e1:fb:a4:59:c8:78:4d: 48:b0:ea:3b:66:52:ed:b0:67:d8:3b:f1:ae:a3:c6:e0:e6:2b: 0a:2c:21:a3:b9:ca:8a:9c:3e:47:cf:0b:f6:20:e7:72:5d:64: 83:8b:01:a0:0c:6d:11:7f:84:31:3c:22:93:f9:bf:1e:14:2b: 43:fb:5d:18:93:ed:65:17:b0:74:94:b6:f3:85:c4:0a:16:5e: ef:b8:ce:72:24:99:be:2d:c7:ac:2f:90:0b:a2:97:20:4b:bc: 30:fa:4b:c4:83:f6:78:3d:65:d9:fa:d9:32:e1:00:fa:58:e8: c1:0c:c4:f6:8c:b0:59:f7:6b:69:5a:e8:9e:a9:a9:98:40:de: 74:88:93:33:f4:7f:9e:5b:57:31:91:e3:ce:5a:b3:48:b7:b3: 20:0e:17:68:1c:10:b1:56:1a:48:c4:17:b9:20:1a:3e:aa:ff: 9c:87:88:0d:78:11:b1:93:2e:91:d2:9e:49:77:0b:65:18:dd: 03:a4:be:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4 QThERDk0MDYwHhcNMjUwNzAxMDYyODM1WhcNMjUwNzA4MDYyODM1WjAYMRYwFAYD VQQDEw02ODYzODAxNC03ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvy4RXIemhiQ22qDbR86AyqQrWlu11ZiBxFWW4u9wW6L4k+vrA+F9XnkD2zl ZhDLkjTPmAQhGccfR5Tk03uwnFbJbFr2TgsEUh3Hz9l736KAqbkKSjtgYLOz8EOe dVkDckuN7KIRlYQ7q7DZYSU3zxeYNOsSgsyK/MGjPlQHKvi1lOqJCctT8rn/6lOK ZbdFS32by7OWG3U9Se2iXB+Uk75nQEvLnM9+lOzKnff38uE6hns2e+k1taos4g6B EbXaVOZpRLVH7yqouDQZqkpWyQb1Mj/GD1g4lne7zQczO4WRDjZ73ad3io4GR0Sj D58Cai/i+oaKkzMogNDKX27dCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwz/C3l +1Z4VtaBF9dpgvGK9e0OMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az MXNfVi1XcXJXaTZLamRsQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOCSv7FjOwbzBnFDuZIfh6133IirHCLdnpI0lJRqBqGcEmpmWPifFS bezGZ3FHuMgZJEDP/O7hlPeOEGuOCepNjeH7pFnIeE1IsOo7ZlLtsGfYO/Guo8bg 5isKLCGjucqKnD5Hzwv2IOdyXWSDiwGgDG0Rf4QxPCKT+b8eFCtD+10Yk+1lF7B0 lLbzhcQKFl7vuM5yJJm+LcesL5ALopcgS7ww+kvEg/Z4PWXZ+tky4QD6WOjBDMT2 jLBZ92tpWuieqamYQN50iJMz9H+eW1cxkePOWrNIt7MgDhdoHBCxVhpIxBe5IBo+ qv+ch4gNeBGxky6R0p5JdwtlGN0DpL4D -----END CERTIFICATE-----Generated at Thu Jul 3 04:31:38 2025 by rpki-client