$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json) Hash identifier: WkLBl9QTG9qeTFpMW8ajHlwVg5wCH/0FLcsg5YHpQFQ= Subject key identifier: DF:2D:A5:98:95:E3:6C:9A:3E:59:8B:73:2E:92:31:40:52:08:EA:E3 Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft Manifest number: 47 Signing time: Fri 25 Jul 2025 07:46:34 +0000 Manifest this update: Fri 25 Jul 2025 07:46:34 +0000 Manifest next update: Fri 01 Aug 2025 07:46:34 +0000 Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: 6EEgIUBG3afc9Qrs0bwwu/ok206rqw1onlpPNaY1K/U=) 2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 9OScaduExEngNPz5wsuWcHvwLQIw8gltPcbBA5tFHWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2 Validity Not Before: Jul 25 07:46:34 2025 GMT Not After : Aug 1 07:46:34 2025 GMT Subject: CN=6883365a-da0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:e7:f4:5e:52:d1:aa:c9:f8:18:9a:3d:54: b9:90:4f:fc:f0:80:e8:77:8b:6f:6f:28:a8:6f:e5: 3d:77:62:09:3e:0a:52:69:93:0c:e6:db:ad:c3:b9: df:88:93:e3:6e:35:29:85:f5:c1:3e:b0:40:8a:5c: 8e:84:99:94:33:63:d6:0f:93:0c:5b:4a:e0:83:ae: 3d:c1:df:7e:1a:8d:cb:41:5b:f8:01:1c:65:d3:b1: 18:64:d9:09:98:82:fd:75:dc:e0:f9:0e:3c:b2:7e: d4:e9:a3:6c:dd:99:68:0b:21:2c:fb:87:8a:a2:76: d1:21:93:e2:c7:0a:07:0f:52:7c:d5:85:cd:c1:67: 61:7e:96:71:36:03:c4:aa:aa:66:fe:6f:57:c2:54: 4d:00:fc:f1:2a:b4:c7:12:58:c6:78:e5:c5:f5:0e: 9e:ab:be:42:9c:2c:4e:72:0b:1b:a2:16:01:31:5f: 7b:87:db:d6:07:82:d8:7d:af:51:21:fb:7f:de:db: 97:78:04:72:56:49:23:04:df:21:e2:94:d8:5d:7e: fd:b7:64:f6:0e:e6:28:5b:f8:0b:32:e9:94:1b:21: c5:7a:a9:14:6b:ce:03:5a:d9:75:ad:64:a2:e3:a0: 85:74:6d:68:f7:cb:2c:33:16:38:51:65:af:25:9e: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:A5:98:95:E3:6C:9A:3E:59:8B:73:2E:92:31:40:52:08:EA:E3 X509v3 Authority Key Identifier: keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5e:7e:7b:e3:a5:6b:d5:86:db:21:81:dd:bd:63:59:3a:00: 4b:a6:8a:02:67:80:10:4b:d6:fa:b9:8a:20:c0:4e:cd:42:66: 3f:2b:d8:d3:b2:da:b9:46:bc:ff:8f:65:26:1b:48:db:93:ab: f9:86:fb:6b:a9:ea:fb:68:8a:75:3e:a3:81:39:9a:d2:cf:44: 8a:f2:03:27:9c:3e:2e:62:dd:50:67:15:1f:53:7a:33:21:f0: d2:7a:97:18:7a:f1:74:89:e0:9a:2c:b7:95:2f:b7:99:ad:25: f7:6d:10:3a:64:d7:6d:6a:e7:1d:ea:75:a3:9c:eb:a6:68:67: ad:5a:ed:f0:e8:2f:ed:27:77:32:b5:74:f5:6f:ae:d2:36:fd: 64:e8:4a:e1:bc:21:85:fb:d8:01:1c:d6:ee:29:ad:95:87:26: 6f:d4:4d:5f:28:69:e6:a6:d7:5f:ab:86:f0:2e:99:6d:a3:3d: 40:be:64:19:04:b1:be:e7:ae:e0:2b:38:86:fb:75:74:50:dd: d1:20:2d:75:18:00:fa:b2:bb:e7:5a:b1:e5:db:60:77:c1:32: 21:5e:41:90:19:a4:a7:2b:b1:1e:f3:d6:3c:12:fe:59:13:db: 22:24:60:23:3a:0c:ed:75:fb:a5:83:fe:80:30:ac:db:82:13: 90:b9:3a:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEZEODExMC8GA1UEBRMoODA0NjMwNzREODNGNUU4MDM1NEQxOTcwNTg2RjU0QTg5 NjVFMThEMjAeFw0yNTA3MjUwNzQ2MzRaFw0yNTA4MDEwNzQ2MzRaMBgxFjAUBgNV BAMTDTY4ODMzNjVhLWRhMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6jef0XlLRqsn4GJo9VLmQT/zwgOh3i29vKKhv5T13Ygk+ClJpkwzm263Dud+I k+NuNSmF9cE+sECKXI6EmZQzY9YPkwxbSuCDrj3B334ajctBW/gBHGXTsRhk2QmY gv113OD5DjyyftTpo2zdmWgLISz7h4qidtEhk+LHCgcPUnzVhc3BZ2F+lnE2A8Sq qmb+b1fCVE0A/PEqtMcSWMZ45cX1Dp6rvkKcLE5yCxuiFgExX3uH29YHgth9r1Eh +3/e25d4BHJWSSME3yHilNhdfv23ZPYO5ihb+Asy6ZQbIcV6qRRrzgNa2XWtZKLj oIV0bWj3yywzFjhRZa8lnvRhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3y2lmJXj bJo+WYtzLpIxQFII6uMwHwYDVR0jBBgwFoAUgEYwdNg/XoA1TRlwWG9UqJZeGNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RkQ4L0YzNTEyQTBBRkND NTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9BMVRSbHdXRzlVcUpaZUdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0VZd2ROZ19Yb0ExVFJsd1dHOVVxSlplR05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RkQ4L0YzNTEyQTBBRkNDNTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9B MVRSbHdXRzlVcUpaZUdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACFefnvjpWvVhtshgd29Y1k6AEumigJngBBL1vq5iiDATs1CZj8r2NOy 2rlGvP+PZSYbSNuTq/mG+2up6vtoinU+o4E5mtLPRIryAyecPi5i3VBnFR9TejMh 8NJ6lxh68XSJ4Jost5Uvt5mtJfdtEDpk121q5x3qdaOc66ZoZ61a7fDoL+0ndzK1 dPVvrtI2/WToSuG8IYX72AEc1u4prZWHJm/UTV8oaeam11+rhvAumW2jPUC+ZBkE sb7nruArOIb7dXRQ3dEgLXUYAPqyu+daseXbYHfBMiFeQZAZpKcrsR7z1jwS/lkT 2yIkYCM6DO11+6WD/oAwrNuCE5C5OlU= -----END CERTIFICATE-----Generated at Sat Jul 26 07:38:53 2025 by rpki-client