$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json) Hash identifier: vwAv5DaAMrOPdOekHMRDembDWZty4srqbRUSzs9Rd5I= Subject key identifier: B6:06:F0:AF:52:AC:29:8C:10:7A:6E:1E:78:24:54:F8:B1:EB:A8:00 Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft Manifest number: 06 Signing time: Thu 03 Jul 2025 05:53:57 +0000 Manifest this update: Thu 03 Jul 2025 05:53:57 +0000 Manifest next update: Thu 10 Jul 2025 05:53:57 +0000 Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: Au1PWtSLids004TP+rCQa9lq5eOECnN5XoqYu+ZhKIM=) 2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Validity Not Before: Jul 3 05:53:57 2025 GMT Not After : Jul 10 05:53:57 2025 GMT Subject: CN=68661af5-db09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9a:e0:f3:47:6f:fa:4b:c3:eb:ea:36:18:32: ea:67:ca:4e:8b:00:0d:e2:1b:1b:f8:31:66:75:22: 67:7d:23:6f:60:9c:b2:5e:8c:66:4e:3e:72:8b:12: e9:d4:c8:1b:3c:c8:1d:6a:63:85:1d:9a:d5:a5:b2: 7f:86:91:9a:10:b3:bc:84:bd:32:ae:e1:d0:f8:e8: ae:dd:23:e4:75:48:c5:41:92:d8:ee:be:9f:42:b2: a8:c5:e3:f5:5a:2e:46:e2:a8:b6:f8:7f:89:9d:bf: bb:49:6d:ea:f6:4d:39:68:37:2f:20:85:e9:72:fa: 3d:63:54:37:ee:83:29:3b:db:37:11:51:38:a7:27: 38:ab:f8:66:07:e4:66:76:d0:fe:12:ac:ce:02:0d: f1:16:e9:9e:6a:3b:88:a9:47:9d:1e:4a:1e:59:60: 06:c6:64:48:c5:86:aa:78:aa:42:d5:26:9f:c2:05: 07:33:14:bb:6f:d6:c3:67:ed:75:ba:8e:18:46:c7: ad:25:05:55:0c:5d:6f:cd:e3:8a:40:33:1d:c0:54: b8:c0:43:4e:64:f2:46:6b:28:b9:aa:77:91:97:98: 1e:b7:d2:f9:41:2f:71:02:d5:d7:95:be:6e:f5:5f: 5b:32:54:79:44:68:26:19:d0:68:98:ff:36:f6:5d: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:06:F0:AF:52:AC:29:8C:10:7A:6E:1E:78:24:54:F8:B1:EB:A8:00 X509v3 Authority Key Identifier: keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:14:ee:77:ca:5e:21:7b:ec:fa:ba:bf:ed:9b:8a:f9:ab:9c: 4f:0c:81:a9:f0:b7:2a:33:fe:b7:a5:a5:f1:c7:e2:0f:73:35: b4:b0:2a:be:b3:c4:25:be:0b:39:58:40:ad:80:49:07:ee:16: c8:21:2a:93:d0:1a:bb:f4:54:4c:82:6c:8b:e3:81:42:c4:02: 3c:3d:a6:71:b8:29:75:bd:a5:86:79:bc:b7:29:5a:bb:d2:05: 48:88:79:87:9b:1b:be:ad:3f:dd:06:1b:59:31:98:f0:0c:0c: 70:00:d4:23:dd:2d:d6:e4:14:bb:a4:26:7a:57:30:d6:79:a1: 65:26:06:4a:03:be:6a:1b:a0:b7:bf:76:1f:48:db:0c:fb:9e: d4:f2:5e:03:23:46:8d:cc:13:96:e7:1c:f3:05:12:ec:d7:7f: 33:03:fd:b4:b0:35:0f:0a:c1:86:dd:d1:7b:a5:04:1d:69:6b: 92:58:d1:ba:15:5d:97:28:dc:41:26:1c:1e:bc:28:73:9e:c4: 15:53:c1:b9:1d:81:7b:21:a0:9b:81:9f:f1:1e:3b:09:a2:b0: d7:6a:08:01:d2:98:1f:d7:96:f4:cd:23:54:72:41:73:1a:a2: 25:56:77:0c:a3:70:0f:b4:a6:63:0d:79:45:34:7b:1b:5d:98: d6:a4:7d:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoODFBNjU3RUFBQzc1NTRDQUI3QTFBMjg4RjVCM0ZFRURE OEE1Q0M0QjAeFw0yNTA3MDMwNTUzNTdaFw0yNTA3MTAwNTUzNTdaMBgxFjAUBgNV BAMTDTY4NjYxYWY1LWRiMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXmuDzR2/6S8Pr6jYYMupnyk6LAA3iGxv4MWZ1Imd9I29gnLJejGZOPnKLEunU yBs8yB1qY4UdmtWlsn+GkZoQs7yEvTKu4dD46K7dI+R1SMVBktjuvp9CsqjF4/Va LkbiqLb4f4mdv7tJber2TTloNy8ghely+j1jVDfugyk72zcRUTinJzir+GYH5GZ2 0P4SrM4CDfEW6Z5qO4ipR50eSh5ZYAbGZEjFhqp4qkLVJp/CBQczFLtv1sNn7XW6 jhhGx60lBVUMXW/N44pAMx3AVLjAQ05k8kZrKLmqd5GXmB630vlBL3EC1deVvm71 X1syVHlEaCYZ0GiY/zb2XctXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtgbwr1Ks KYwQem4eeCRU+LHrqAAwHwYDVR0jBBgwFoAUgaZX6qx1VMq3oaKI9bP+7dilzEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBLzc2MTNGMzE2NTMx MzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2FaWDZxeDFWTXEzb2FLSTliUC03ZGlsekVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBLzc2MTNGMzE2NTMxMzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1x M29hS0k5YlAtN2RpbHpFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKMU7nfKXiF77Pq6v+2bivmrnE8Mganwtyoz/relpfHH4g9zNbSwKr6z xCW+CzlYQK2ASQfuFsghKpPQGrv0VEyCbIvjgULEAjw9pnG4KXW9pYZ5vLcpWrvS BUiIeYebG76tP90GG1kxmPAMDHAA1CPdLdbkFLukJnpXMNZ5oWUmBkoDvmoboLe/ dh9I2wz7ntTyXgMjRo3ME5bnHPMFEuzXfzMD/bSwNQ8KwYbd0XulBB1pa5JY0boV XZco3EEmHB68KHOexBVTwbkdgXshoJuBn/EeOwmisNdqCAHSmB/XlvTNI1RyQXMa oiVWdwyjcA+0pmMNeUU0extdmNakfSw= -----END CERTIFICATE-----Generated at Thu Jul 3 23:33:57 2025 by rpki-client