$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: dfYtMOn+dimISiFR2Tc0oT0x0RZkKWrRaxCXZ2cVuAs= Subject key identifier: 6A:7E:D8:61:30:5B:08:73:8B:85:FA:FC:61:26:47:93:84:C0:76:26 Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 0153 Signing time: Thu 03 Jul 2025 04:12:05 +0000 Manifest this update: Thu 03 Jul 2025 04:12:05 +0000 Manifest next update: Thu 10 Jul 2025 04:12:05 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: DTbAJ49PwvyrMrj9opZ/aNDkHUdzUV2g+bLgXEHBTmg=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: LEXF9HRhajbu2nLL2GIh97gP542YxXzyNibweT+ZgSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Jul 3 04:12:05 2025 GMT Not After : Jul 10 04:12:05 2025 GMT Subject: CN=68660315-633f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f6:4d:bc:21:68:71:df:9e:1c:02:3f:21:a4: e9:32:83:3a:89:be:be:22:c5:0c:43:cf:03:10:35: 20:fd:c8:00:a0:8d:2a:bc:b1:4f:48:40:21:23:ef: fe:fb:8f:02:63:9b:bf:c3:60:cf:57:30:99:e6:59: d8:a2:2a:75:a1:49:b0:c1:54:32:5d:99:03:17:b7: 34:70:8e:c9:54:d2:50:3e:03:55:88:0c:89:d6:5b: 79:02:35:d3:65:2d:ba:34:0a:6e:0b:77:6b:44:4a: 10:b7:b6:68:6f:2a:e7:46:98:77:0b:bc:8b:24:cc: db:a9:24:2d:7f:86:53:5b:b6:2d:60:c6:7f:2e:53: e4:e1:da:c8:35:c0:fc:b2:93:20:b0:e4:9a:d5:e9: 1b:44:ed:7b:c4:85:9b:f5:eb:1d:ff:2f:ed:cb:7b: 5c:bf:c2:39:49:3b:18:50:07:b7:9b:e1:ab:3b:02: 73:33:02:bc:b9:bc:38:69:57:00:8d:fd:e5:1b:a8: 8c:9b:eb:6e:32:28:8f:16:df:ec:77:40:5b:a6:f5: 01:84:f7:b2:c1:46:ec:ba:aa:57:e2:a0:ff:b3:53: 76:a7:70:5d:02:a2:0f:6c:8b:ad:c3:c0:38:da:fe: f4:17:bf:db:07:bd:2a:db:6b:ef:b5:86:78:67:d4: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:D8:61:30:5B:08:73:8B:85:FA:FC:61:26:47:93:84:C0:76:26 X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:99:b3:c3:b4:c6:0a:f2:99:3d:16:68:8a:a4:5d:1d:ef:29: fb:71:86:da:21:89:91:4c:3f:17:df:c8:1b:ce:de:ec:89:1d: 3e:51:23:9d:8b:a5:ea:40:d8:d5:59:fa:9b:8c:e0:ee:69:39: e7:39:be:8c:b3:87:b6:e7:cf:9a:c0:fd:07:6e:d8:b6:46:4d: 3e:67:ac:a4:2d:18:39:bc:8f:9d:af:3c:06:a8:3c:56:9f:f8: e8:87:01:47:87:26:d3:6d:ff:ef:35:4d:19:ad:d9:3c:46:18: c8:47:06:a3:db:02:13:8a:d6:2d:d9:77:70:3b:c5:f9:bd:f2: b0:e7:ab:b6:6e:18:98:42:0b:c0:60:91:1c:12:ec:cd:65:bd: 5f:8f:46:09:51:71:6a:be:0b:29:9e:5b:78:11:31:6e:f0:5a: 57:62:98:f7:b0:d0:95:9c:71:a8:06:76:12:d8:7e:54:71:b7: f2:fb:75:95:04:19:27:64:9f:57:ed:5d:35:e2:c4:20:f2:5e: ae:bc:f5:a6:84:71:f6:61:3a:d8:98:68:ef:d7:84:88:57:88: eb:b9:a8:69:63:12:a8:c1:be:56:9c:e6:e2:94:dc:60:ea:74: c5:6b:28:01:b2:7c:34:5e:d6:4b:6b:e5:55:5f:3e:06:96:53: a3:34:de:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUwNzAzMDQxMjA1WhcNMjUwNzEwMDQxMjA1WjAYMRYwFAYD VQQDEw02ODY2MDMxNS02MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9PZNvCFocd+eHAI/IaTpMoM6ib6+IsUMQ88DEDUg/cgAoI0qvLFPSEAhI+/+ +48CY5u/w2DPVzCZ5lnYoip1oUmwwVQyXZkDF7c0cI7JVNJQPgNViAyJ1lt5AjXT ZS26NApuC3drREoQt7ZobyrnRph3C7yLJMzbqSQtf4ZTW7YtYMZ/LlPk4drINcD8 spMgsOSa1ekbRO17xIWb9esd/y/ty3tcv8I5STsYUAe3m+GrOwJzMwK8ubw4aVcA jf3lG6iMm+tuMiiPFt/sd0BbpvUBhPeywUbsuqpX4qD/s1N2p3BdAqIPbIutw8A4 2v70F7/bB70q22vvtYZ4Z9RTuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp+2GEw Wwhzi4X6/GEmR5OEwHYmMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGmbPDtMYK8pk9FmiKpF0d7yn7cYbaIYmRTD8X38gbzt7siR0+USOd i6XqQNjVWfqbjODuaTnnOb6Ms4e258+awP0Hbti2Rk0+Z6ykLRg5vI+drzwGqDxW n/johwFHhybTbf/vNU0Zrdk8RhjIRwaj2wITitYt2XdwO8X5vfKw56u2bhiYQgvA YJEcEuzNZb1fj0YJUXFqvgspnlt4ETFu8FpXYpj3sNCVnHGoBnYS2H5Ucbfy+3WV BBknZJ9X7V014sQg8l6uvPWmhHH2YTrYmGjv14SIV4jruahpYxKowb5WnObilNxg 6nTFaygBsnw0XtZLa+VVXz4GllOjNN6M -----END CERTIFICATE-----Generated at Fri Jul 4 22:00:35 2025 by rpki-client