$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: WqTTX1V564LnFcMAOWgGAzH9NAGMO+2oFvnlERbyAfQ= Subject key identifier: 7F:7A:87:88:78:6D:99:F0:97:4F:FF:B9:5B:42:14:75:10:37:D2:48 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0D23 Signing time: Sun 20 Jul 2025 18:05:11 +0000 Manifest this update: Sun 20 Jul 2025 18:05:10 +0000 Manifest next update: Sun 27 Jul 2025 18:05:10 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: KdT9b2J7FU00JprZTMRhNDtB5pH4nZi7UQic4BeCJKU=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: VZ24W4uKwM60qRJ5vfKCX9lh+SGHmx0HfVlijTJVzIY=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: 4yWetI8VRw7mXlPSVbHYiXd6wjj+BvrR9fES4qn/WNo=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: DgvkkBXnQUs6910aIZGV/GX1Y7PZj78ZOyie/aItMGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Jul 20 18:05:10 2025 GMT Not After : Jul 27 18:05:10 2025 GMT Subject: CN=687d2fd6-aeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:73:ca:cf:db:11:bf:4f:1d:52:76:3a:96: 06:01:1b:43:a8:b6:11:71:0d:6a:c2:05:ac:7c:0c: ea:8a:d4:59:0f:39:77:26:52:62:b6:2e:9c:07:1d: e2:ff:21:3b:70:78:fc:f9:d3:71:d3:de:e7:2b:89: 67:c2:62:4e:86:c5:bb:71:64:97:4a:49:d9:d0:8a: 65:e3:31:ea:b4:b1:cc:82:1f:9d:6b:8f:a9:00:3e: 08:a2:7d:28:43:04:4a:3b:4e:c8:91:ac:4d:4e:d8: cc:76:e9:00:c8:71:9a:4d:71:06:35:12:c9:32:50: 90:c5:f3:d5:3f:19:27:61:e4:11:1a:ce:9a:d2:36: 52:ef:02:92:12:3c:3b:f1:d4:11:f7:50:e5:74:2d: 22:aa:a1:c7:d0:27:a1:24:2b:9d:90:e9:b9:76:4c: 97:62:2b:f9:c3:15:35:ad:0d:61:8b:90:95:e0:e7: 17:8f:2a:9a:27:46:38:55:8b:39:ab:f8:ac:02:9c: 19:41:ec:a6:23:9f:ce:f1:25:11:67:5d:c7:54:80: 8c:0b:0b:be:31:ad:ef:c2:6f:82:ae:39:e0:ce:66: ca:d4:75:c3:6e:61:ae:46:b0:4b:3c:78:af:95:0f: 06:61:a3:a5:e3:fa:52:b6:55:b0:fa:bb:13:35:f9: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7A:87:88:78:6D:99:F0:97:4F:FF:B9:5B:42:14:75:10:37:D2:48 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:d9:ef:10:d8:e6:06:4d:8d:33:d1:34:ab:03:95:9d:5e: 86:1c:2c:80:89:17:f0:c1:bc:0b:ad:a5:c1:ae:3e:e4:a1:66: 55:6a:0f:a1:08:83:84:55:30:8f:10:b3:1e:5d:a5:b9:9f:b4: dc:8f:08:c0:ee:bb:93:db:3a:74:de:4b:d0:52:2e:ea:f8:18: e3:0c:3b:47:c1:07:29:84:64:76:5c:c5:ed:e4:c6:df:e9:08: 19:50:6f:79:5c:af:85:ec:fa:3e:c3:37:25:5a:31:43:69:d7: 09:d8:33:07:bf:8c:ea:a4:92:b3:c7:45:d6:86:47:79:8d:5a: 98:45:bc:d8:de:fd:29:62:ec:d5:eb:34:32:e7:39:94:db:08: 79:e4:b1:8e:ec:a9:3f:44:2a:bd:8e:d0:04:ba:4f:48:df:04: 20:6d:26:ab:97:ad:ea:ad:22:48:ff:b3:b7:93:22:d8:2c:f0: 79:cb:2f:d7:f4:49:ce:88:06:df:64:62:29:09:e3:73:47:e1: 21:0e:86:97:c0:5d:d6:fa:92:d5:0f:81:1f:de:da:af:a0:8e: 7c:88:fd:f3:0d:c2:d5:6f:a2:72:f0:10:4d:4f:27:af:3e:0e: 4a:0f:e1:e2:42:3e:6e:43:43:66:ac:24:aa:7c:7f:22:c2:a6: ab:23:33:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNzIwMTgwNTEwWhcNMjUwNzI3MTgwNTEwWjAYMRYwFAYD VQQDEw02ODdkMmZkNi1hZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJxzys/bEb9PHVJ2OpYGARtDqLYRcQ1qwgWsfAzqitRZDzl3JlJiti6cBx3i /yE7cHj8+dNx097nK4lnwmJOhsW7cWSXSknZ0Ipl4zHqtLHMgh+da4+pAD4Ion0o QwRKO07IkaxNTtjMdukAyHGaTXEGNRLJMlCQxfPVPxknYeQRGs6a0jZS7wKSEjw7 8dQR91DldC0iqqHH0CehJCudkOm5dkyXYiv5wxU1rQ1hi5CV4OcXjyqaJ0Y4VYs5 q/isApwZQeymI5/O8SURZ13HVICMCwu+Ma3vwm+CrjngzmbK1HXDbmGuRrBLPHiv lQ8GYaOl4/pStlWw+rsTNflXawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH96h4h4 bZnwl0//uVtCFHUQN9JIMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoqNnvENjmBk2NM9E0qwOVnV6GHCyAiRfwwbwLraXBrj7koWZVag+h CIOEVTCPELMeXaW5n7TcjwjA7ruT2zp03kvQUi7q+BjjDDtHwQcphGR2XMXt5Mbf 6QgZUG95XK+F7Po+wzclWjFDadcJ2DMHv4zqpJKzx0XWhkd5jVqYRbzY3v0pYuzV 6zQy5zmU2wh55LGO7Kk/RCq9jtAEuk9I3wQgbSarl63qrSJI/7O3kyLYLPB5yy/X 9EnOiAbfZGIpCeNzR+EhDoaXwF3W+pLVD4Ef3tqvoI58iP3zDcLVb6Jy8BBNTyev Pg5KD+HiQj5uQ0NmrCSqfH8iwqarIzMZ -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:22 2025 by rpki-client