$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json) Hash identifier: h4Abtjc/6LIazZwK/KQDm6mKxcSxQzHM8cLKzp1LLmg= Subject key identifier: 84:4D:46:63:4C:B2:F2:92:E4:BC:7F:94:B4:C9:53:5B:6C:74:8E:4E Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft Manifest number: 0135 Signing time: Thu 03 Jul 2025 04:33:22 +0000 Manifest this update: Thu 03 Jul 2025 04:33:21 +0000 Manifest next update: Thu 10 Jul 2025 04:33:21 +0000 Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: vhOcnS7U5FikFHK9msCexq6vUPPKgHBdEboVF+t8s5k=) 2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE Validity Not Before: Jul 3 04:33:21 2025 GMT Not After : Jul 10 04:33:21 2025 GMT Subject: CN=68660811-88d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:3f:d7:5d:d4:59:b5:81:bb:9f:f3:3a:22: 07:62:5e:84:dc:e4:6b:77:35:38:c7:64:8d:7e:5b: dd:e9:0b:bf:13:7a:14:7c:7d:f2:88:20:c6:1c:39: 7b:88:76:92:5c:d5:e4:a9:ce:3c:28:ca:ed:62:d0: 01:74:d3:98:d1:c3:d5:0b:f7:d0:ad:fd:cf:8e:6a: be:76:f9:3c:ea:ac:f7:43:ae:0a:f0:ec:52:0e:f8: 2a:12:bb:a2:c5:dd:29:68:1c:db:93:7c:35:1c:0e: 26:09:8a:c5:b6:db:c5:f2:bb:d3:db:9c:7a:32:25: f7:c5:8d:a9:de:63:eb:39:f2:48:ae:10:18:0a:c7: ad:11:02:76:07:19:9c:fd:23:98:2b:db:fa:8d:cf: 5e:aa:5d:2b:89:5c:12:e4:d5:e0:13:f2:6c:6e:43: 08:23:2e:2b:98:5b:22:10:ac:c8:33:37:22:f2:da: 46:53:68:6d:7b:ce:4e:f6:ef:b9:9b:54:b2:94:dc: 94:f2:bd:a3:a6:74:0b:81:75:94:f2:de:03:5d:b6: 42:54:9a:34:d4:72:3c:03:a3:74:7d:d2:d2:9d:f1: 99:d2:2f:16:88:7e:2d:c4:3a:55:87:91:14:91:22: ad:33:ee:2a:07:80:13:43:f0:4a:dd:c6:4e:b6:7f: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4D:46:63:4C:B2:F2:92:E4:BC:7F:94:B4:C9:53:5B:6C:74:8E:4E X509v3 Authority Key Identifier: keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:67:a0:26:f3:e9:e6:cb:c8:ba:ce:5a:3f:23:a6:45:3b:ad: 55:8a:e3:58:2c:e2:d2:8e:cb:bd:f6:62:12:1a:80:af:92:d6: 33:65:1e:2e:7c:e0:8f:e3:9d:db:5d:94:69:04:e6:45:89:ff: 93:c2:69:12:8d:97:c0:fd:74:5c:39:31:16:2e:ce:8a:67:d2: b7:ad:e7:e6:90:02:c1:f9:9e:df:4e:11:75:6e:41:07:89:9d: a5:fd:4d:a5:73:11:b6:49:84:79:af:3d:95:94:c4:1c:85:db: 70:99:92:3f:d5:f7:6c:46:7f:f3:14:e8:69:91:f8:09:9f:4a: 3f:95:29:66:5a:9e:9d:d4:51:ce:04:25:17:3a:a3:ba:b3:ad: ad:7b:4d:bc:70:db:52:0d:05:11:11:10:48:b8:08:f1:6c:1c: 2d:07:1a:20:5b:3f:8c:cf:63:2a:23:21:26:a7:22:3c:d7:99: e8:7a:5e:34:7e:49:ab:28:3f:37:f9:bd:59:11:80:8e:2a:c5: cb:7a:54:f2:00:cb:ac:56:1a:d0:46:ff:e7:1b:0a:34:9d:e8: 11:19:48:ca:51:cc:8b:a8:dd:6f:12:b2:b8:8f:7c:23:6c:43: 41:03:63:83:54:b0:db:19:49:85:60:dc:83:38:db:df:1a:c6: 1d:b1:21:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQwOEExMTAvBgNVBAUTKDgxNkE0NzhEODZFN0UyMUJGMzE3ODUxMEI4NTg1MzI1 NTgzNDMwRUUwHhcNMjUwNzAzMDQzMzIxWhcNMjUwNzEwMDQzMzIxWjAYMRYwFAYD VQQDEw02ODY2MDgxMS04OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKI/113UWbWBu5/zOiIHYl6E3ORrdzU4x2SNflvd6Qu/E3oUfH3yiCDGHDl7 iHaSXNXkqc48KMrtYtABdNOY0cPVC/fQrf3Pjmq+dvk86qz3Q64K8OxSDvgqErui xd0paBzbk3w1HA4mCYrFttvF8rvT25x6MiX3xY2p3mPrOfJIrhAYCsetEQJ2Bxmc /SOYK9v6jc9eql0riVwS5NXgE/JsbkMIIy4rmFsiEKzIMzci8tpGU2hte85O9u+5 m1SylNyU8r2jpnQLgXWU8t4DXbZCVJo01HI8A6N0fdLSnfGZ0i8WiH4txDpVh5EU kSKtM+4qB4ATQ/BK3cZOtn916wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRNRmNM svKS5Lx/lLTJU1tsdI5OMB8GA1UdIwQYMBaAFIFqR42G5+Ib8xeFELhYUyVYNDDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDA4QS9DMEY0RTg2NDc4 OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRodnpGNFVRdUZoVEpWZzBN TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dXcEhqWWJuNGh2ekY0VVF1RmhUSlZnME1PNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDA4QS9DMEY0RTg2NDc4OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRo dnpGNFVRdUZoVEpWZzBNTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcZ6Am8+nmy8i6zlo/I6ZFO61ViuNYLOLSjsu99mISGoCvktYzZR4u fOCP453bXZRpBOZFif+TwmkSjZfA/XRcOTEWLs6KZ9K3refmkALB+Z7fThF1bkEH iZ2l/U2lcxG2SYR5rz2VlMQchdtwmZI/1fdsRn/zFOhpkfgJn0o/lSlmWp6d1FHO BCUXOqO6s62te028cNtSDQURERBIuAjxbBwtBxogWz+Mz2MqIyEmpyI815noel40 fkmrKD83+b1ZEYCOKsXLelTyAMusVhrQRv/nGwo0negRGUjKUcyLqN1vErK4j3wj bENBA2ODVLDbGUmFYNyDONvfGsYdsSGX -----END CERTIFICATE-----Generated at Fri Jul 4 14:43:44 2025 by rpki-client