$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: lzcQanDA21fWkWypVcY8s3ywH7uWCRjZ348n7ZtKRc8= Subject key identifier: B3:DA:20:E3:99:09:21:2A:21:B5:E0:A6:7E:C6:F9:7B:29:8B:BC:BA Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: 75 Signing time: Thu 03 Jul 2025 07:06:31 +0000 Manifest this update: Thu 03 Jul 2025 07:06:30 +0000 Manifest next update: Thu 10 Jul 2025 07:06:30 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: xwHd5z6zrBJEHaToqJIFUkwUMsRJwSnMxjdfAWfV8co=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Jul 3 07:06:30 2025 GMT Not After : Jul 10 07:06:30 2025 GMT Subject: CN=68662bf7-b5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3e:d1:a6:44:4f:25:c6:fa:56:6e:db:c8:74: 13:33:f2:a1:30:e9:bb:7b:bd:db:cb:29:99:b9:7c: 67:8b:22:14:19:73:e9:7d:a2:dd:b7:e2:e2:c1:a7: c2:a6:a9:1a:28:aa:31:43:b5:74:57:05:ec:d5:36: ce:84:0f:9c:5c:1d:75:36:53:7c:d0:6a:e1:4a:1e: d3:50:7d:19:fc:a9:5e:a6:32:85:31:ad:14:7d:3e: df:75:5b:a9:f7:28:b4:e0:07:88:4e:73:1c:c0:71: 01:b4:9a:24:f7:1b:4a:f4:48:0b:90:e4:0f:0e:02: e5:84:1d:1b:5b:35:f6:dd:cf:38:82:ad:2e:a4:fb: 96:a9:d6:57:37:b1:c4:c7:7d:20:f8:80:fd:6a:7e: ac:f1:e2:c2:14:ca:96:49:86:68:54:05:c0:71:08: 08:61:66:93:63:0a:58:7e:ac:98:76:eb:71:ab:22: 37:c1:9a:f2:8a:d4:5a:3f:8a:7f:6b:e7:55:dc:12: d3:3a:b7:ee:49:c3:fd:d6:07:77:3d:11:85:68:75: cb:57:ee:b8:00:65:c2:c0:ed:7f:4c:99:d4:9d:b4: 15:cf:52:37:be:89:05:78:57:eb:27:0a:13:57:7e: 03:cd:6a:6e:99:cb:14:ed:03:9b:3d:ae:46:58:18: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:20:E3:99:09:21:2A:21:B5:E0:A6:7E:C6:F9:7B:29:8B:BC:BA X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:15:fe:fb:49:b0:c9:d7:e2:a5:5f:bd:52:5e:cb:3a:5d:0d: c7:1f:99:c1:da:8a:d0:1a:89:42:fa:85:b9:ec:a8:07:a9:2c: 8b:01:76:e1:09:4c:e0:72:01:94:35:82:69:62:be:9d:5d:42: 01:78:a9:91:7a:5c:72:60:12:0f:00:f4:6a:15:92:20:4c:6a: 05:ac:2f:cf:1b:fd:ac:3c:c6:e1:05:db:e6:61:5c:16:2c:fb: 9f:ab:9a:27:e4:2a:33:cf:53:81:d3:31:88:fb:f7:38:e3:af: 1c:27:f1:8d:68:5f:80:22:93:d5:c2:20:13:20:1b:3a:bc:2b: 76:4c:fe:4c:aa:cc:cd:3f:91:ce:18:1b:86:22:14:57:b1:24: c4:92:4a:9f:de:0c:e8:7f:21:68:0e:7e:28:2b:b9:5d:66:94: 8a:1f:d5:c5:0f:2e:79:fa:82:b0:32:8f:68:52:ca:9b:53:ba: 63:6e:d8:da:0a:3a:0f:ef:5b:ac:5c:1d:5e:27:01:1b:64:f7: bd:84:69:9e:aa:5e:78:31:91:ee:23:5b:25:46:1e:e8:0d:0d: 06:17:70:ea:26:2f:60:60:b6:7b:46:b6:63:ae:07:78:bc:4d: 66:5a:9e:6e:e1:69:cf:19:cf:8c:d5:ac:c4:03:ea:98:c3:87: be:13:31:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoODJBNzY5REQ3NDZDODMxRjRDNERCMjlENkE2NURFMDhE NkFEOTVFRDAeFw0yNTA3MDMwNzA2MzBaFw0yNTA3MTAwNzA2MzBaMBgxFjAUBgNV BAMTDTY4NjYyYmY3LWI1ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtPtGmRE8lxvpWbtvIdBMz8qEw6bt7vdvLKZm5fGeLIhQZc+l9ot234uLBp8Km qRooqjFDtXRXBezVNs6ED5xcHXU2U3zQauFKHtNQfRn8qV6mMoUxrRR9Pt91W6n3 KLTgB4hOcxzAcQG0miT3G0r0SAuQ5A8OAuWEHRtbNfbdzziCrS6k+5ap1lc3scTH fSD4gP1qfqzx4sIUypZJhmhUBcBxCAhhZpNjClh+rJh263GrIjfBmvKK1Fo/in9r 51XcEtM6t+5Jw/3WB3c9EYVodctX7rgAZcLA7X9MmdSdtBXPUje+iQV4V+snChNX fgPNam6ZyxTtA5s9rkZYGNvbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs9og45kJ ISohteCmfsb5eymLvLowHwYDVR0jBBgwFoAUgqdp3XRsgx9MTbKdamXeCNatle0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzc0OTEyQjJDQUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3FkcDNYUnNneDlNVGJLZGFtWGVDTmF0bGUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MUFFLzc0OTEyQjJDQUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5 TVRiS2RhbVhlQ05hdGxlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcV/vtJsMnX4qVfvVJeyzpdDccfmcHaitAaiUL6hbnsqAepLIsBduEJ TOByAZQ1gmlivp1dQgF4qZF6XHJgEg8A9GoVkiBMagWsL88b/aw8xuEF2+ZhXBYs +5+rmifkKjPPU4HTMYj79zjjrxwn8Y1oX4Aik9XCIBMgGzq8K3ZM/kyqzM0/kc4Y G4YiFFexJMSSSp/eDOh/IWgOfigruV1mlIof1cUPLnn6grAyj2hSyptTumNu2NoK Og/vW6xcHV4nARtk972EaZ6qXngxke4jWyVGHugNDQYXcOomL2BgtntGtmOuB3i8 TWZanm7hac8Zz4zVrMQD6pjDh74TMQw= -----END CERTIFICATE-----Generated at Fri Jul 4 22:21:46 2025 by rpki-client