$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json) Hash identifier: WiE/9Cob5Zza4wVVFIsWUo15mCvIs1ekEB4URbwPYN4= Subject key identifier: 0D:7C:92:59:D7:86:65:D2:DF:67:8F:04:F4:FE:30:85:64:7A:3C:67 Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 35B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft Manifest number: 350C Signing time: Tue 22 Jul 2025 14:43:47 +0000 Manifest this update: Tue 22 Jul 2025 14:43:47 +0000 Manifest next update: Tue 29 Jul 2025 14:43:47 +0000 Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: FL8jwJ+hDvdveIpulE74yMrjCMMJwy9pILF2rxTqKfI=) 2: 8C7BC30E5B7E11F0AA42172EC4F9AE02.roa (hash: T4ooPvrdLBAfiayLnI4MRWTb1Jb1klBjv7+Ml585mqQ=) 3: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: gQzWJHoaUz+ZsxQT6VbHPTnmepZXOupiiqIe2nIrQsI=) 4: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: 2jXUTHIbe/4zB55x5aVqbJ++TpfrSTqoaosirfZlKp4=) 5: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: kC85zV9vfowONrQ/4lH4osyAc/gnJivigTW1tOC5o5I=) 6: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: MUiCEFkOTO4FtkjvpufTX4GTFRhCPjdetQYvgSwrwG0=) 7: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: 7vOKeyVZ+3C3IU2Q2LWPiPgpmUgrqFfYYBhoSV6xIdA=) 8: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: tmtO11OOtDriXyiX8yIjjm/tLba1skzLPKICGtpamPs=) 9: 7D883CF033F911E98674843BC4F9AE02.roa (hash: kvRz79x323/sz1CS5sLMmHqk7HExlk2aKA5DVgo+je4=) 10: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: cjk5XxryDCD9iYNOdFDhTcqSurq/6QehBRcXynDGfWE=) 11: A8689054340411E9A22CD05CC4F9AE02.roa (hash: 9Abm2hwP5n1eigQRbM/2Ald4kJwUC5p7xAvKRar2kxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13748 (0x35b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Jul 22 14:43:47 2025 GMT Not After : Jul 29 14:43:47 2025 GMT Subject: CN=687fa3a3-26eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:15:d7:7d:fe:f8:7b:b6:5c:f2:9a:64:03:57: 4c:b4:fd:5a:85:3f:d5:eb:d5:48:ab:0a:51:b9:f7: f3:c5:8e:c0:4c:c8:d2:17:ff:6e:be:e8:5c:30:e9: 4e:a6:92:0d:04:2a:35:8d:cc:ec:94:54:cf:4e:52: 0d:a1:a9:ed:3b:4f:5b:fb:ff:6c:0c:82:37:da:ff: 80:9e:09:31:d4:00:ff:21:34:3e:23:65:98:32:9f: c1:1a:3f:72:ce:7e:33:98:1c:ad:9a:43:59:90:7b: b1:36:23:c7:94:da:82:8f:55:62:d5:da:b8:3f:90: bd:83:d4:25:e2:b7:be:94:5e:cc:ba:28:16:82:aa: de:68:67:11:11:bd:a8:75:89:0c:e4:6e:68:56:2e: 11:f9:3a:9a:06:eb:70:28:90:64:9f:48:62:7b:dc: a6:9a:34:23:2c:6b:c3:49:5e:53:85:10:bd:24:f4: b2:70:b1:9f:16:ac:76:25:22:26:b0:c3:1d:01:9f: 8d:50:37:75:22:cf:ee:90:30:f3:b1:bf:15:22:60: 8d:1f:22:c0:37:c4:81:7e:49:a1:e9:ed:59:41:0e: 08:1c:82:43:13:72:fe:cf:62:4e:ca:db:d5:f4:43: 6b:df:05:98:44:d3:f0:2c:fe:64:15:b4:39:a1:53: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:92:59:D7:86:65:D2:DF:67:8F:04:F4:FE:30:85:64:7A:3C:67 X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:6e:65:17:e3:89:7e:b2:1f:5a:db:0f:db:17:84:6b:40:85: 28:ab:ef:7a:40:c8:31:19:8c:61:ed:25:a9:50:33:8d:27:e8: da:8f:39:c4:9f:e6:05:74:88:fc:39:f9:5d:2d:5c:df:d1:ee: 84:04:60:a2:e7:1a:0f:81:a1:49:f6:68:d6:b8:63:43:73:b9: 45:28:c1:7b:de:62:ec:0a:55:5a:ee:47:81:7f:2e:83:1e:2c: 28:72:18:86:a2:07:dd:3c:f7:58:81:25:59:d0:19:2a:2d:02: 1a:1e:1f:fa:3f:97:fd:4a:5e:e2:20:bd:eb:1c:2e:f5:e6:29: b4:44:73:19:db:0c:64:ff:a2:87:49:68:59:e2:37:2d:4c:d8: b7:b5:82:b5:8e:b1:cf:6f:44:36:6a:8c:f9:de:bd:f8:5f:61: fb:9a:4d:54:17:b7:d3:a4:2c:64:b8:2f:ae:81:8f:1a:12:41: 6f:94:ec:5f:51:ef:0c:d6:b0:ab:83:17:6a:8b:f0:6f:9a:d8: a1:69:a4:9e:df:20:bc:d0:da:de:b1:86:ef:ce:09:93:58:57: 12:a7:9e:f3:b7:b1:2c:79:fe:f8:05:12:d5:06:8b:f5:47:0c: a6:35:07:c9:0a:fc:51:d9:43:2a:c0:dd:70:9c:3d:8b:4d:1c: d8:75:09:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwNzIyMTQ0MzQ3WhcNMjUwNzI5MTQ0MzQ3WjAYMRYwFAYD VQQDEw02ODdmYTNhMy0yNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hXXff74e7Zc8ppkA1dMtP1ahT/V69VIqwpRuffzxY7ATMjSF/9uvuhcMOlO ppINBCo1jczslFTPTlINoantO09b+/9sDII32v+Angkx1AD/ITQ+I2WYMp/BGj9y zn4zmBytmkNZkHuxNiPHlNqCj1Vi1dq4P5C9g9Ql4re+lF7MuigWgqreaGcREb2o dYkM5G5oVi4R+TqaButwKJBkn0hie9ymmjQjLGvDSV5ThRC9JPSycLGfFqx2JSIm sMMdAZ+NUDd1Is/ukDDzsb8VImCNHyLAN8SBfkmh6e1ZQQ4IHIJDE3L+z2JOytvV 9ENr3wWYRNPwLP5kFbQ5oVO4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA18klnX hmXS32ePBPT+MIVkejxnMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL b3czbkNqRWE0dmhKR0p2R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnbmUX44l+sh9a2w/bF4RrQIUoq+96QMgxGYxh7SWpUDONJ+jajznE n+YFdIj8OfldLVzf0e6EBGCi5xoPgaFJ9mjWuGNDc7lFKMF73mLsClVa7keBfy6D HiwochiGogfdPPdYgSVZ0BkqLQIaHh/6P5f9Sl7iIL3rHC715im0RHMZ2wxk/6KH SWhZ4jctTNi3tYK1jrHPb0Q2aoz53r34X2H7mk1UF7fTpCxkuC+ugY8aEkFvlOxf Ue8M1rCrgxdqi/BvmtihaaSe3yC80NresYbvzgmTWFcSp57zt7Esef74BRLVBov1 RwymNQfJCvxR2UMqwN1wnD2LTRzYdQmE -----END CERTIFICATE-----Generated at Wed Jul 23 10:29:10 2025 by rpki-client