$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json) Hash identifier: H4XY0eKK5xHWs2+wLg8mQvE2B5bz2ZcR/oJcQYkRsdg= Subject key identifier: C8:72:82:0C:3A:D5:6E:5F:70:D8:E6:D2:B5:A0:9D:9C:A6:49:FA:D5 Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft Manifest number: 07AB Signing time: Wed 02 Jul 2025 21:31:11 +0000 Manifest this update: Wed 02 Jul 2025 21:31:11 +0000 Manifest next update: Wed 09 Jul 2025 21:31:11 +0000 Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: 6YjmVawJ+IcLzKnEwaMkuQbvE38KNaYYfYWzSftLHAY=) 2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: YgjG4RIq8/AXh0+vxXX2Pz+/mF/LDmvghTRwjTbmhTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: Jul 2 21:31:11 2025 GMT Not After : Jul 9 21:31:11 2025 GMT Subject: CN=6865a51f-c400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:dc:be:07:e6:ca:c3:46:5b:fa:17:d9:97: a8:08:3d:c4:54:4d:12:7e:bd:db:95:d4:c5:91:1f: 05:53:96:03:8b:70:9e:45:75:89:7c:20:81:02:63: 02:4c:27:3d:6a:22:37:37:27:de:a9:d1:4a:43:1e: 03:99:ad:c7:36:26:57:f0:e4:c1:18:3e:dd:dd:05: 78:97:db:79:23:9c:6b:82:0b:23:af:44:c1:63:dd: f3:5f:59:b3:8d:1a:f8:bd:21:40:94:6d:72:3f:62: d0:60:c2:e1:84:9e:08:45:21:ba:f4:68:5a:52:56: 8f:3b:d9:e9:9d:0a:4c:20:ea:d7:d1:8f:56:2e:c7: 82:b0:3b:3e:26:5b:3a:b3:65:c0:b5:66:b6:6b:3b: fc:b9:af:3f:ea:68:4a:22:72:2b:a3:af:35:e9:47: 8e:1e:83:89:60:df:75:44:0f:cd:4a:27:ad:e6:29: b0:c1:16:b9:20:e6:14:40:83:1d:84:29:ef:c9:1e: dc:89:a1:99:4b:22:25:d0:1a:83:48:a7:6f:99:23: f6:d7:89:b4:0b:24:bf:71:d1:5e:54:90:b6:c7:68: a8:3a:20:89:ae:0c:00:e6:6a:36:c0:f2:18:6d:9e: fe:ff:3b:92:24:bc:9e:c3:21:a3:d8:0e:4f:b3:06: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:82:0C:3A:D5:6E:5F:70:D8:E6:D2:B5:A0:9D:9C:A6:49:FA:D5 X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:29:60:0a:95:8f:ae:d2:82:ea:3b:3d:15:10:43:fe:ea:6a: 82:4a:37:9a:cc:b5:df:49:89:c9:a2:4c:d2:d8:c4:63:75:d9: cf:ee:e7:a8:64:8a:da:7e:07:41:53:2b:29:10:a5:68:31:9a: c1:7e:9b:49:59:04:b3:9a:a8:bf:18:2e:1f:4c:db:26:5e:a6: 70:99:55:40:92:e4:eb:56:62:0d:aa:10:99:35:c2:cc:0b:34: 6b:7f:03:f3:ce:eb:a2:35:8a:12:ee:b8:ff:5f:92:64:97:a8: 87:c2:eb:99:a8:f1:6a:e5:e7:45:67:47:33:c0:89:c6:95:72: b6:8f:25:52:4a:81:e9:ef:6d:c9:83:e2:7f:81:65:1c:9b:a4: 56:1f:0f:aa:f0:94:2b:dd:d7:c0:30:51:eb:c1:ee:92:7d:be: 72:09:4e:db:24:0b:c4:3e:1e:5d:31:9e:76:76:df:65:9a:3a: e6:c3:87:35:ee:aa:e7:ab:f1:aa:fc:d5:37:2c:8f:f4:56:17: 16:96:3e:5a:31:0d:61:d3:c2:63:4c:d8:2d:e9:50:c3:ec:14: cd:09:cd:42:85:2a:82:93:a6:4f:66:57:64:b5:f1:ca:fb:3f: be:71:72:c0:2e:9f:e6:cc:4d:5c:2b:e8:31:4a:7d:8a:fb:ac: 75:9d:20:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjUwNzAyMjEzMTExWhcNMjUwNzA5MjEzMTExWjAYMRYwFAYD VQQDEw02ODY1YTUxZi1jNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIvcvgfmysNGW/oX2ZeoCD3EVE0Sfr3bldTFkR8FU5YDi3CeRXWJfCCBAmMC TCc9aiI3NyfeqdFKQx4Dma3HNiZX8OTBGD7d3QV4l9t5I5xrggsjr0TBY93zX1mz jRr4vSFAlG1yP2LQYMLhhJ4IRSG69GhaUlaPO9npnQpMIOrX0Y9WLseCsDs+Jls6 s2XAtWa2azv8ua8/6mhKInIro6816UeOHoOJYN91RA/NSiet5imwwRa5IOYUQIMd hCnvyR7ciaGZSyIl0BqDSKdvmSP214m0CyS/cdFeVJC2x2ioOiCJrgwA5mo2wPIY bZ7+/zuSJLyewyGj2A5PswZZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhyggw6 1W5fcNjm0rWgnZymSfrVMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUY5Ni8wRjg2RTYwRTA2Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3 WW5oRDIxbjZRYS1uODdmRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDKWAKlY+u0oLqOz0VEEP+6mqCSjeazLXfSYnJokzS2MRjddnP7ueo ZIrafgdBUyspEKVoMZrBfptJWQSzmqi/GC4fTNsmXqZwmVVAkuTrVmINqhCZNcLM CzRrfwPzzuuiNYoS7rj/X5Jkl6iHwuuZqPFq5edFZ0czwInGlXK2jyVSSoHp723J g+J/gWUcm6RWHw+q8JQr3dfAMFHrwe6Sfb5yCU7bJAvEPh5dMZ52dt9lmjrmw4c1 7qrnq/Gq/NU3LI/0VhcWlj5aMQ1h08JjTNgt6VDD7BTNCc1ChSqCk6ZPZldktfHK +z++cXLALp/mzE1cK+gxSn2K+6x1nSBY -----END CERTIFICATE-----Generated at Thu Jul 3 07:11:06 2025 by rpki-client