$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: OVZfvojQ5P/bOAqm3RUIAIhYH94SJ6GYeTlWWFeJFaQ= Subject key identifier: C5:57:C5:BB:44:E0:14:81:0C:44:25:67:E9:0D:BA:05:12:C0:DD:78 Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 0699 Signing time: Wed 02 Jul 2025 22:30:07 +0000 Manifest this update: Wed 02 Jul 2025 22:30:06 +0000 Manifest next update: Wed 09 Jul 2025 22:30:06 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: uhfYDFgral5p6DO6ZCDAGBx5/DaQGmCSsOTpEVE5M1U=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: m/HWFJ3zaTbb526BBQjKgkfjO3ab/2s+A2oNRFabdSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Jul 2 22:30:06 2025 GMT Not After : Jul 9 22:30:06 2025 GMT Subject: CN=6865b2ee-803e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:84:2f:8e:12:85:b4:dd:50:b3:bc:e9:c7: 58:2d:55:0d:e4:49:ef:1c:04:1e:42:17:91:d8:d5: 7e:e5:82:68:24:a5:ba:26:83:44:0d:8e:08:c3:c4: 32:01:83:71:89:1d:05:b4:cb:c6:0d:ab:a5:60:2c: 7d:85:30:6c:24:a9:7e:0b:93:f6:70:d9:f0:ad:23: 36:d1:8c:56:1e:f3:a9:1e:9f:d7:38:19:51:8b:b1: e3:91:40:60:bb:8b:1b:3b:a0:35:cc:d6:a4:21:8d: e9:99:2f:d6:ba:58:30:0c:ba:33:3a:56:2c:7a:ba: 74:ea:73:77:91:2f:36:cb:7f:5c:10:d7:39:3b:4c: 63:d3:15:ac:71:a5:78:40:47:c1:3a:df:d9:7b:43: b8:45:fe:a9:cb:8b:c9:15:3d:ae:02:6c:51:b8:cf: 8f:70:6a:19:a8:4b:d1:31:76:2a:65:36:99:16:44: 95:02:ef:19:f8:70:ea:f3:d8:dd:2e:20:ac:c3:6a: f3:45:33:1a:54:95:e5:09:42:3a:4b:ef:73:10:d3: b4:e7:45:a2:77:59:a2:f8:3e:a8:30:e4:ca:a8:95: 48:36:12:94:a6:ee:a8:01:c1:2f:c6:51:bd:6d:31: bb:0b:ff:ae:93:ef:16:88:aa:4f:72:f0:21:6e:21: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:C5:BB:44:E0:14:81:0C:44:25:67:E9:0D:BA:05:12:C0:DD:78 X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:08:84:b9:68:86:bf:35:09:b7:b5:85:f2:27:d5:80:84:89: dc:7f:62:81:fb:10:6f:61:7a:af:3c:b5:eb:25:7c:bb:a2:99: f2:4b:4a:d4:15:cc:c2:60:43:af:37:86:62:95:32:f7:d6:c3: ff:cf:82:8a:8f:20:dd:03:7d:73:49:0c:c5:43:a2:fa:90:9d: 7b:11:1a:c5:13:38:01:f4:de:d9:e7:75:86:33:c3:f7:0f:2e: 27:d9:33:07:ed:74:2f:69:95:53:71:36:58:c3:ae:33:7f:65: 52:20:c5:60:d5:62:1a:f5:ee:91:6a:bc:23:3e:db:de:08:16: 3d:9b:00:ce:c0:59:10:03:c7:af:82:12:63:b6:3f:af:0c:38: 06:a8:56:55:19:94:44:b0:f8:0a:4b:1c:a6:f3:c7:dd:45:c7: 3f:a2:f5:6a:26:e2:4d:7c:88:ff:18:67:89:f0:88:15:8d:55: 9d:b3:43:fc:ad:73:88:d7:e7:be:2a:3a:20:32:7d:65:dd:96: af:3c:c8:c8:fe:ea:43:73:ee:7c:ed:20:98:2e:e0:d1:b1:88: b2:b0:7e:6a:ef:6a:b1:f2:77:16:be:a0:7b:6f:4d:9f:e3:88: 82:f9:70:e7:83:47:8b:b4:81:69:f4:d0:73:2b:9d:b4:31:33: 63:b5:a1:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUwNzAyMjIzMDA2WhcNMjUwNzA5MjIzMDA2WjAYMRYwFAYD VQQDEw02ODY1YjJlZS04MDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVyEL44ShbTdULO86cdYLVUN5EnvHAQeQheR2NV+5YJoJKW6JoNEDY4Iw8Qy AYNxiR0FtMvGDaulYCx9hTBsJKl+C5P2cNnwrSM20YxWHvOpHp/XOBlRi7HjkUBg u4sbO6A1zNakIY3pmS/WulgwDLozOlYserp06nN3kS82y39cENc5O0xj0xWscaV4 QEfBOt/Ze0O4Rf6py4vJFT2uAmxRuM+PcGoZqEvRMXYqZTaZFkSVAu8Z+HDq89jd LiCsw2rzRTMaVJXlCUI6S+9zENO050Wid1mi+D6oMOTKqJVINhKUpu6oAcEvxlG9 bTG7C/+uk+8WiKpPcvAhbiHyWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVXxbtE 4BSBDEQlZ+kNugUSwN14MB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoCIS5aIa/NQm3tYXyJ9WAhIncf2KB+xBvYXqvPLXrJXy7opnyS0rU FczCYEOvN4ZilTL31sP/z4KKjyDdA31zSQzFQ6L6kJ17ERrFEzgB9N7Z53WGM8P3 Dy4n2TMH7XQvaZVTcTZYw64zf2VSIMVg1WIa9e6RarwjPtveCBY9mwDOwFkQA8ev ghJjtj+vDDgGqFZVGZREsPgKSxym88fdRcc/ovVqJuJNfIj/GGeJ8IgVjVWds0P8 rXOI1+e+KjogMn1l3ZavPMjI/upDc+587SCYLuDRsYiysH5q72qx8ncWvqB7b02f 44iC+XDng0eLtIFp9NBzK520MTNjtaGf -----END CERTIFICATE-----Generated at Fri Jul 4 19:35:59 2025 by rpki-client