$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json) Hash identifier: y4sUseHTMZARd3c9Pc43u+BQHLRPFc6kLICn9/xuwso= Subject key identifier: 53:51:65:C0:C2:72:1C:30:2A:F1:32:A6:59:45:7B:F6:32:EF:78:D0 Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft Manifest number: 3498 Signing time: Sun 20 Jul 2025 15:20:46 +0000 Manifest this update: Sun 20 Jul 2025 15:20:45 +0000 Manifest next update: Sun 27 Jul 2025 15:20:45 +0000 Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: pwCjB/L+9d5nF/1MjCnmeCPMqcW4PHmwYouLH8gmj+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD0C, serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Validity Not Before: Jul 20 15:20:45 2025 GMT Not After : Jul 27 15:20:45 2025 GMT Subject: CN=687d094d-9a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:3f:22:76:e6:b5:cf:9a:4a:37:ed:b3:8e: 30:81:28:52:67:64:02:c7:47:7e:0f:ab:5f:a8:22: 91:ee:b6:b1:a6:cf:d5:3f:df:b7:ea:d3:eb:bb:2b: 06:f9:71:ec:2d:49:8c:67:db:06:ff:91:09:ce:47: 78:f0:34:1f:84:90:90:84:f1:5b:1c:80:69:e2:75: 04:cc:2e:ed:8f:a4:b2:18:b3:9b:c7:b5:86:7a:a7: 9b:0d:d3:87:53:a7:a4:6d:3b:8e:ea:9f:f2:79:62: 40:27:cb:69:76:3f:29:e3:7f:d2:28:94:d3:b7:24: b6:21:b8:d0:7b:aa:25:a3:78:85:c2:2f:43:5d:eb: 33:3b:7a:8b:6f:97:2a:1e:40:b4:39:1b:ea:89:eb: d3:c8:07:7f:10:19:a9:33:8d:2c:db:bb:2e:24:7b: ea:23:8a:a8:8f:b5:6d:0a:f4:a2:ab:49:59:7a:10: c3:ac:8f:08:44:ba:d4:a5:3b:dc:2b:aa:82:12:e9: 99:be:50:c6:ae:82:a9:7f:3e:5a:6d:96:00:00:0f: 63:98:e2:03:d4:ba:7d:a4:2d:e4:cc:e8:9c:c0:6b: 8f:73:e3:f6:ef:ea:25:96:a3:0a:46:69:2d:da:c2: 4e:72:f9:c8:3b:de:3c:64:8a:0e:68:1f:4b:04:64: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:65:C0:C2:72:1C:30:2A:F1:32:A6:59:45:7B:F6:32:EF:78:D0 X509v3 Authority Key Identifier: keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9e:1e:5d:d7:5b:df:fd:b7:c9:4a:9b:4f:0c:05:b3:26:9a: d3:b4:c9:38:10:91:d1:d7:0a:cb:53:0e:59:f7:64:1e:6b:49: fa:9b:12:6a:71:e7:0a:32:33:32:79:1f:d1:98:49:b0:f2:f0: 63:6d:3c:c4:f4:99:ae:97:19:d4:5c:90:d6:e5:bb:a1:02:b9: e3:5f:de:b5:cb:83:b7:41:b3:87:40:a7:10:0d:87:68:44:88: f0:59:84:d6:e8:bb:f4:28:ae:37:af:1c:24:0b:b6:7f:79:f8: cf:20:e8:78:4e:46:50:60:0b:c7:2b:da:42:e9:f9:09:dc:a1: d6:af:23:24:b1:b9:e1:a0:72:d8:ac:76:0b:32:99:a3:07:e5: e8:79:03:22:7c:dc:e0:52:94:74:b6:e6:47:e6:37:ba:59:ae: 3b:bd:b0:84:58:ca:2a:ff:00:0b:57:c7:ca:46:f3:92:ae:f1: c5:83:db:82:fc:b4:e7:a5:a0:fa:23:c1:dd:af:4d:41:e6:a5: 72:0f:a8:17:03:2b:24:5a:c6:8f:16:a7:33:50:54:29:d2:0a: fb:c1:72:71:bf:02:c5:70:66:d3:f1:fd:ad:26:a3:f8:60:0c: 60:ff:ab:db:37:16:ed:cc:ed:af:f8:9c:5b:eb:34:15:7b:25: ba:5e:2f:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy NzNCM0VBMjUwHhcNMjUwNzIwMTUyMDQ1WhcNMjUwNzI3MTUyMDQ1WjAYMRYwFAYD VQQDEw02ODdkMDk0ZC05YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5I/Inbmtc+aSjfts44wgShSZ2QCx0d+D6tfqCKR7raxps/VP9+36tPruysG +XHsLUmMZ9sG/5EJzkd48DQfhJCQhPFbHIBp4nUEzC7tj6SyGLObx7WGeqebDdOH U6ekbTuO6p/yeWJAJ8tpdj8p43/SKJTTtyS2IbjQe6olo3iFwi9DXeszO3qLb5cq HkC0ORvqievTyAd/EBmpM40s27suJHvqI4qoj7VtCvSiq0lZehDDrI8IRLrUpTvc K6qCEumZvlDGroKpfz5abZYAAA9jmOID1Lp9pC3kzOicwGuPc+P27+ollqMKRmkt 2sJOcvnIO948ZIoOaB9LBGQrcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNRZcDC chwwKvEypllFe/Yy73jQMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2 aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4nh5d11vf/bfJSptPDAWzJprTtMk4EJHR1wrLUw5Z92Qea0n6mxJq cecKMjMyeR/RmEmw8vBjbTzE9JmulxnUXJDW5buhArnjX961y4O3QbOHQKcQDYdo RIjwWYTW6Lv0KK43rxwkC7Z/efjPIOh4TkZQYAvHK9pC6fkJ3KHWryMksbnhoHLY rHYLMpmjB+XoeQMifNzgUpR0tuZH5je6Wa47vbCEWMoq/wALV8fKRvOSrvHFg9uC /LTnpaD6I8Hdr01B5qVyD6gXAyskWsaPFqczUFQp0gr7wXJxvwLFcGbT8f2tJqP4 YAxg/6vbNxbtzO2v+Jxb6zQVeyW6Xi9k -----END CERTIFICATE-----Generated at Mon Jul 21 07:22:38 2025 by rpki-client