$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: qRwBhbwYyjgzey2ZfFgLK4lOW+2iNSOIW6wtKhxOVpI= Subject key identifier: 71:8F:E2:D6:9F:D1:31:5F:46:A7:31:8D:7E:0C:F1:50:05:2B:48:E0 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: F4 Signing time: Sat 19 Jul 2025 05:30:30 +0000 Manifest this update: Sat 19 Jul 2025 05:30:30 +0000 Manifest next update: Sat 26 Jul 2025 05:30:30 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: wICLSBhImn3+JFKph+uL2/FSeyt5kPMu05ZRBHpxH4E=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Jul 19 05:30:30 2025 GMT Not After : Jul 26 05:30:30 2025 GMT Subject: CN=687b2d76-ea3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:3e:5c:10:1a:af:03:1d:19:51:d5:f9:9b: 24:4e:79:fa:2b:c4:00:98:e7:e3:fd:6a:5b:15:c5: bf:49:7d:41:ac:ee:a4:cd:a1:5f:39:40:7f:f4:41: eb:7b:a2:bd:ae:35:fa:8f:ad:a6:b0:d6:d0:1b:eb: 90:17:b9:f3:31:73:10:4b:69:79:51:cc:0a:c4:fe: 5e:97:b2:b3:46:8c:51:90:16:d0:d0:a8:90:8f:ee: b7:80:a8:c7:22:bd:f2:86:7a:db:23:4e:06:b9:67: 99:89:87:1b:d7:74:7b:a6:bb:3d:2b:d8:1b:01:14: c4:a0:7f:a1:19:2e:28:05:e1:45:78:a1:b9:7a:02: 75:73:9c:78:aa:a3:68:68:ec:20:7a:98:0b:d3:4c: 07:38:28:71:f5:5b:df:34:5b:62:cf:1b:a5:63:e6: 21:e6:77:50:13:33:a0:ad:19:46:e9:7a:63:ef:89: b6:99:cf:1f:ca:36:5d:03:ca:8d:a5:97:c7:42:09: b0:cc:52:70:d4:a5:b1:f3:d3:a3:1c:fa:6e:fb:7d: 45:52:f2:48:9d:01:cb:b4:94:31:bc:64:15:25:c5: db:b9:a8:ca:09:f0:be:c8:05:e9:9c:4d:0b:83:32: 2c:8b:9b:cd:b8:59:af:6f:9e:5d:9a:c2:cc:0a:24: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:E2:D6:9F:D1:31:5F:46:A7:31:8D:7E:0C:F1:50:05:2B:48:E0 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e7:c8:4d:b2:4b:ed:37:7e:49:09:5b:d9:dc:6f:40:59:a4: 04:d7:94:a2:91:f3:b4:c3:71:ee:1e:6a:e6:94:da:00:b3:3c: 19:f6:9a:9b:5e:e0:68:35:d4:59:f5:f7:7b:58:e8:c0:3e:b0: 57:d3:7a:7d:47:b3:10:7c:32:c3:ad:86:e3:48:64:3d:4a:f3: e5:b7:9d:fe:e0:c7:cc:cd:70:99:58:8a:42:46:36:9c:4a:0c: 47:8a:8a:54:69:42:c3:ab:12:a8:2b:7b:e2:1d:a8:26:21:6f: ae:1d:c4:13:94:50:43:d3:ef:c5:68:30:38:c9:fe:69:84:40: ca:0c:0a:e5:9c:a6:b0:c0:60:c4:db:4c:bc:c3:e0:35:6f:a7: 78:1b:39:42:9d:57:f3:f5:c0:7d:d8:38:a3:de:2c:c5:84:c2: d5:01:4d:bf:bc:b0:c0:3d:e3:1f:ba:e6:d0:20:1d:20:e2:b0: a3:ce:ba:22:6f:1e:fd:8a:e8:e5:b3:c5:7f:9e:95:4b:a3:fe: f0:22:b7:49:c9:b5:fb:ae:75:88:20:0d:a2:56:39:89:fa:99: 56:5c:f2:13:9c:af:fd:0e:a2:21:4c:7e:92:4e:cf:66:86:83: e6:26:f2:af:a2:85:4f:fc:c5:47:9d:70:33:8f:4d:b2:85:39: 20:6a:0b:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUwNzE5MDUzMDMwWhcNMjUwNzI2MDUzMDMwWjAYMRYwFAYD VQQDEw02ODdiMmQ3Ni1lYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu80+XBAarwMdGVHV+ZskTnn6K8QAmOfj/WpbFcW/SX1BrO6kzaFfOUB/9EHr e6K9rjX6j62msNbQG+uQF7nzMXMQS2l5UcwKxP5el7KzRoxRkBbQ0KiQj+63gKjH Ir3yhnrbI04GuWeZiYcb13R7prs9K9gbARTEoH+hGS4oBeFFeKG5egJ1c5x4qqNo aOwgepgL00wHOChx9VvfNFtizxulY+Yh5ndQEzOgrRlG6Xpj74m2mc8fyjZdA8qN pZfHQgmwzFJw1KWx89OjHPpu+31FUvJInQHLtJQxvGQVJcXbuajKCfC+yAXpnE0L gzIsi5vNuFmvb55dmsLMCiQBqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGP4taf 0TFfRqcxjX4M8VAFK0jgMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv58hNskvtN35JCVvZ3G9AWaQE15SikfO0w3HuHmrmlNoAszwZ9pqb XuBoNdRZ9fd7WOjAPrBX03p9R7MQfDLDrYbjSGQ9SvPlt53+4MfMzXCZWIpCRjac SgxHiopUaULDqxKoK3viHagmIW+uHcQTlFBD0+/FaDA4yf5phEDKDArlnKawwGDE 20y8w+A1b6d4GzlCnVfz9cB92Dij3izFhMLVAU2/vLDAPeMfuubQIB0g4rCjzroi bx79iujls8V/npVLo/7wIrdJybX7rnWIIA2iVjmJ+plWXPITnK/9DqIhTH6STs9m hoPmJvKvooVP/MVHnXAzj02yhTkgagvd -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:27 2025 by rpki-client