$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: Jv47NbDnm3LDlpRSLjD2Kj5t4QnYYdZTY+MuTS5TVDw= Subject key identifier: A9:80:EF:75:B1:74:F2:06:DC:F3:9E:0F:93:48:B7:31:DE:2D:09:84 Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B2D Signing time: Mon 30 Jun 2025 19:21:56 +0000 Manifest this update: Mon 30 Jun 2025 19:21:55 +0000 Manifest next update: Mon 07 Jul 2025 19:21:55 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: p4Hz/PcX5AvYh8RXFCpCKyusPZdtwFjYrawGhA73Q6g=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Jun 30 19:21:55 2025 GMT Not After : Jul 7 19:21:55 2025 GMT Subject: CN=6862e3d3-48ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:8f:18:8f:91:3e:f2:e9:6b:44:26:61:45: 28:24:95:7b:8d:5f:de:38:98:3b:3c:09:2f:c6:45: e4:40:72:97:7a:30:fb:76:b2:d2:14:3a:1b:c4:ef: 32:76:ba:fc:13:d8:ac:eb:1f:75:d2:34:fc:53:e0: de:d5:38:1b:ac:5a:87:6e:f6:14:a6:7e:d5:39:41: c2:7c:43:8e:d1:9c:47:e4:db:b5:cb:aa:7e:a0:53: a1:ce:d2:9c:af:5f:af:49:64:31:aa:28:23:4f:b9: 39:d9:5d:88:05:4d:2c:50:5a:bc:d0:9d:bc:59:0e: 03:b0:8b:c0:37:68:74:76:c9:b6:91:9f:3d:e3:62: 77:5d:c9:3b:49:ee:73:59:e5:8b:17:ce:02:71:54: 9a:f9:84:d9:d6:16:e1:d6:b8:bf:a9:c1:34:7b:63: db:da:cd:13:64:fd:6c:bb:07:18:17:6f:1a:9b:21: 10:f9:9a:40:a9:74:f4:ed:7a:0a:50:33:cd:47:f3: 28:b1:63:4f:1a:0c:6c:3a:ce:3a:54:1d:2d:06:f0: 0a:e7:b6:9f:8c:10:4e:57:3a:3b:5a:21:8f:0a:ba: 1e:ce:5f:09:a0:80:dd:ea:22:f3:be:0f:cf:e3:d1: 85:ee:93:35:64:24:ca:2a:a7:08:b4:56:04:49:76: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:EF:75:B1:74:F2:06:DC:F3:9E:0F:93:48:B7:31:DE:2D:09:84 X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:06:ea:25:c7:1c:9f:91:04:a8:42:ee:82:c8:1c:af:98:ba: 6c:c6:02:97:5c:00:fa:93:59:0c:86:e7:0a:66:b3:8a:17:1d: d5:d2:18:e6:2b:20:ff:b0:64:2d:aa:50:08:20:e0:47:20:0e: a1:c0:ac:07:a7:69:35:e9:f5:d8:43:44:09:9d:52:30:ef:7d: c1:f0:df:5d:a2:53:e2:fa:6f:dd:f6:b5:48:1e:9a:72:97:34: e1:39:79:0a:36:c7:78:94:6b:92:28:2f:23:03:08:a8:17:44: b6:7a:84:11:36:7a:80:1e:11:2f:0b:9d:5e:66:55:84:f9:13: 75:8d:6d:34:eb:b4:02:3c:54:4d:44:5d:66:cb:a4:56:c1:04: 41:ed:3a:ad:68:8e:e3:ab:5e:ab:bb:85:c2:a7:9c:90:e7:cd: 9f:a1:2e:65:07:ad:f2:11:6e:e3:b8:ad:f5:59:99:9c:6b:2c: 6b:fb:0d:b4:6e:bb:ac:4a:cb:7a:cc:a2:19:25:f5:33:29:70: f5:a1:ff:99:7f:4b:da:bb:b7:35:fa:65:ea:59:82:05:17:20: 93:72:f6:bb:d1:cc:fa:69:97:ba:f2:e1:b4:5a:f1:80:67:e4: fc:df:9a:cc:6b:6c:2a:ab:60:a1:08:20:7b:ea:9c:b2:53:80: 53:24:42:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUwNjMwMTkyMTU1WhcNMjUwNzA3MTkyMTU1WjAYMRYwFAYD VQQDEw02ODYyZTNkMy00OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OCPGI+RPvLpa0QmYUUoJJV7jV/eOJg7PAkvxkXkQHKXejD7drLSFDobxO8y drr8E9is6x910jT8U+De1TgbrFqHbvYUpn7VOUHCfEOO0ZxH5Nu1y6p+oFOhztKc r1+vSWQxqigjT7k52V2IBU0sUFq80J28WQ4DsIvAN2h0dsm2kZ8942J3Xck7Se5z WeWLF84CcVSa+YTZ1hbh1ri/qcE0e2Pb2s0TZP1suwcYF28amyEQ+ZpAqXT07XoK UDPNR/MosWNPGgxsOs46VB0tBvAK57afjBBOVzo7WiGPCroezl8JoIDd6iLzvg/P 49GF7pM1ZCTKKqcItFYESXaMTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmA73Wx dPIG3POeD5NItzHeLQmEMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaBuolxxyfkQSoQu6CyByvmLpsxgKXXAD6k1kMhucKZrOKFx3V0hjm KyD/sGQtqlAIIOBHIA6hwKwHp2k16fXYQ0QJnVIw733B8N9dolPi+m/d9rVIHppy lzThOXkKNsd4lGuSKC8jAwioF0S2eoQRNnqAHhEvC51eZlWE+RN1jW0067QCPFRN RF1my6RWwQRB7TqtaI7jq16ru4XCp5yQ582foS5lB63yEW7juK31WZmcayxr+w20 brusSst6zKIZJfUzKXD1of+Zf0vau7c1+mXqWYIFFyCTcva70cz6aZe68uG0WvGA Z+T835rMa2wqq2ChCCB76pyyU4BTJEKq -----END CERTIFICATE-----Generated at Tue Jul 1 22:34:20 2025 by rpki-client