$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: sgLzwF9zxPh77r0bg+ZscwFlCHJBIPiN9le8Uea6Cd8= Subject key identifier: 9A:1B:82:EE:F7:99:6A:9E:6E:FF:DB:21:9A:19:2E:05:07:38:05:9F Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 043D Signing time: Tue 01 Jul 2025 00:51:34 +0000 Manifest this update: Tue 01 Jul 2025 00:51:33 +0000 Manifest next update: Tue 08 Jul 2025 00:51:33 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: TKPM8CrGeq3JfdTcpRRzwDn8y0+XW8EQNdvZwz5CFOk=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Jul 1 00:51:33 2025 GMT Not After : Jul 8 00:51:33 2025 GMT Subject: CN=68633116-13a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:da:09:d5:65:84:01:f6:39:34:55:37:94: 16:12:28:2d:a4:b4:4c:cb:70:82:be:36:9b:6c:e2: 99:c1:be:2f:1a:09:d0:9c:ac:19:e8:bf:42:e3:d7: eb:57:af:cd:db:bd:16:3b:30:a0:43:72:4c:89:02: 17:ae:48:23:e2:7b:8c:d1:c7:f1:af:be:ab:76:35: 3e:38:9d:ce:c5:d8:dd:47:ca:35:2c:b8:ab:d1:d1: 6b:62:12:70:8f:b8:59:ee:94:61:43:aa:bc:f5:f5: b0:34:d8:bf:f7:83:fb:5c:57:4f:45:ba:e0:df:8b: 9b:76:21:c4:dc:a8:a6:b0:98:bc:58:33:03:e6:97: a1:d3:d8:6b:7b:79:36:0d:77:f5:4f:1d:f1:4a:6e: 15:d0:b7:a1:14:4b:6a:32:d7:b8:74:59:c5:27:72: 95:5e:9b:5f:72:24:e5:f8:f0:dd:f2:ef:c6:d7:aa: bf:e7:60:d8:30:75:eb:9d:45:88:cd:bc:81:1e:4e: 11:db:3b:c4:29:3d:0a:ae:b6:19:31:0f:0f:ec:64: 06:b1:42:2f:b6:a7:de:5b:84:1a:e8:ff:75:35:a3: d5:f0:b8:26:2e:b6:20:37:28:3d:3b:a2:cb:f6:72: 4a:97:bf:b4:4a:d4:a8:84:15:f2:31:dd:4f:4d:56: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:82:EE:F7:99:6A:9E:6E:FF:DB:21:9A:19:2E:05:07:38:05:9F X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:b3:5a:8d:6a:48:2f:84:97:c7:cb:35:e0:f5:7a:9d:86:b7: 6f:c9:04:d2:62:ea:5e:8b:29:87:d7:27:09:16:8b:ee:5c:8b: 51:69:56:5f:66:7d:df:81:b8:b6:d4:23:3a:82:06:e6:13:29: d6:fc:5c:5e:f5:4b:71:b8:df:be:96:1b:9b:f8:a9:af:d9:77: 40:42:8a:00:b3:be:02:f0:20:2e:04:a7:a0:11:3e:80:9c:34: 88:5d:5f:62:c1:ea:76:70:94:9c:47:b9:eb:b9:b5:68:76:ed: 16:1a:99:a3:7f:17:a6:d5:f3:27:5d:6b:a4:7b:30:9c:29:42: bf:b2:0f:16:0c:67:9b:e9:ff:3a:29:3c:37:9e:1b:aa:46:25: 3d:9c:6b:ba:c8:f5:9d:bc:3b:43:53:9a:2b:32:d4:ae:90:40: 99:7e:8c:ab:b3:a7:90:58:3f:58:3f:a8:c9:02:2c:48:50:c2: 6f:ce:37:f1:68:9f:5e:3a:29:ed:1d:33:35:e1:87:b2:cc:53: 8f:55:bf:20:f6:95:70:84:eb:5c:f8:83:6f:b4:68:87:ce:bc: 45:ec:fc:36:99:ab:94:82:eb:a7:37:cc:97:20:c0:ff:97:dd: c9:2b:06:bf:9f:40:cc:93:28:4a:58:8b:0b:6d:2c:00:99:a6: a8:a7:3a:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUwNzAxMDA1MTMzWhcNMjUwNzA4MDA1MTMzWjAYMRYwFAYD VQQDEw02ODYzMzExNi0xM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtszaCdVlhAH2OTRVN5QWEigtpLRMy3CCvjabbOKZwb4vGgnQnKwZ6L9C49fr V6/N270WOzCgQ3JMiQIXrkgj4nuM0cfxr76rdjU+OJ3OxdjdR8o1LLir0dFrYhJw j7hZ7pRhQ6q89fWwNNi/94P7XFdPRbrg34ubdiHE3KimsJi8WDMD5peh09hre3k2 DXf1Tx3xSm4V0LehFEtqMte4dFnFJ3KVXptfciTl+PDd8u/G16q/52DYMHXrnUWI zbyBHk4R2zvEKT0KrrYZMQ8P7GQGsUIvtqfeW4Qa6P91NaPV8LgmLrYgNyg9O6LL 9nJKl7+0StSohBXyMd1PTVYh4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJobgu73 mWqebv/bIZoZLgUHOAWfMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCis1qNakgvhJfHyzXg9XqdhrdvyQTSYupeiymH1ycJFovuXItRaVZf Zn3fgbi21CM6ggbmEynW/Fxe9UtxuN++lhub+Kmv2XdAQooAs74C8CAuBKegET6A nDSIXV9iwep2cJScR7nrubVodu0WGpmjfxem1fMnXWukezCcKUK/sg8WDGeb6f86 KTw3nhuqRiU9nGu6yPWdvDtDU5orMtSukECZfoyrs6eQWD9YP6jJAixIUMJvzjfx aJ9eOintHTM14YeyzFOPVb8g9pVwhOtc+INvtGiHzrxF7Pw2mauUguunN8yXIMD/ l93JKwa/n0DMkyhKWIsLbSwAmaaopzoJ -----END CERTIFICATE-----Generated at Tue Jul 1 21:12:21 2025 by rpki-client