$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: qbl33RU96FZqWwYhloaIDaIa5ZcPJgu478ookoXBMb8= Subject key identifier: A9:F1:00:FA:EC:AD:C7:45:E4:BD:89:CE:88:6A:CF:3A:CD:5D:63:E3 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 032C Signing time: Mon 21 Jul 2025 01:24:17 +0000 Manifest this update: Mon 21 Jul 2025 01:24:17 +0000 Manifest next update: Mon 28 Jul 2025 01:24:17 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: O5HrEhjgEmiWWAfWHVa7u2OpnHpT7kyLbDOVZLeRxuo=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: aPnt9G9PwhxXYMkZOwS2x4lOo/4L3AhIffLQ2SVs6TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Jul 21 01:24:17 2025 GMT Not After : Jul 28 01:24:17 2025 GMT Subject: CN=687d96c1-a144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:87:74:be:4e:16:8f:dd:f8:37:6f:45:ed: f1:60:43:e1:49:28:37:c8:68:d8:bf:07:4f:cb:3f: 14:39:ad:c7:29:af:53:2c:df:df:81:b4:4d:6d:df: 4e:10:49:71:ad:ef:e0:6f:fb:06:94:02:b0:ad:6c: 88:a2:ba:db:d0:17:a5:1a:73:ec:27:d6:8c:68:3c: dd:c3:cc:43:0e:05:82:50:3b:4d:0d:7d:d3:ac:41: e4:32:62:39:62:bf:40:bd:e2:6a:dc:fb:9b:44:4a: 61:ce:4a:5f:79:3b:68:17:40:d9:1e:d2:76:5c:21: 90:4e:b0:cb:0e:46:a3:02:7b:4f:4b:9a:81:2a:4b: 15:1c:7a:9b:81:29:33:de:b9:c3:f8:0e:9c:ac:f3: ca:45:3c:0f:e0:c1:f8:69:e7:3e:bf:39:a1:83:41: 84:1e:fc:94:c7:d9:cc:83:30:34:53:ca:12:ac:7f: 5a:79:b1:ab:5b:31:fe:54:f5:3a:7a:9e:ce:af:75: 50:39:22:c9:c0:2c:cd:c6:8f:df:fa:d1:42:53:cd: 52:d0:ec:02:3f:7d:b4:a2:e9:9f:de:2c:f8:28:9c: f0:02:91:4b:9b:54:e8:b0:4e:33:f8:4d:93:84:9d: 49:af:89:c0:f9:49:ab:c3:fa:34:bc:f7:13:39:6e: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F1:00:FA:EC:AD:C7:45:E4:BD:89:CE:88:6A:CF:3A:CD:5D:63:E3 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:57:b9:05:df:9c:9b:2a:77:38:0d:7a:db:f2:13:04:1b:2a: c2:34:55:c6:08:3c:0e:85:6a:45:97:b2:b6:97:1f:89:b6:88: 87:c3:4f:17:6d:c6:c9:e7:fd:94:ac:6d:99:a2:1c:06:10:13: a8:df:14:c0:5a:f9:e0:94:63:f3:eb:12:e8:84:7a:7e:95:96: 54:2d:2f:c8:b6:8e:f5:f4:8c:0d:89:f0:05:f5:60:ca:b8:a0: bb:93:dd:63:57:da:1e:23:b1:a7:03:49:70:c3:85:c6:46:01: c7:df:8d:a8:db:9b:57:cb:26:9c:88:85:54:9e:30:12:94:97: dd:b0:76:f5:78:ae:3a:90:c5:88:dc:2e:bd:fe:66:5e:5e:fd: 8d:fd:88:e5:ff:2c:49:74:a4:4e:a7:ba:63:a8:ea:f5:08:00: 19:93:e5:26:af:f5:98:48:96:16:bd:1d:f4:54:b4:3d:ce:b5: b3:de:cb:51:f7:84:00:78:17:cf:6f:3b:88:43:32:1d:60:b2: 29:f3:ed:1b:0b:31:ad:f0:84:23:67:0b:60:2a:6e:4c:75:57: de:4b:24:c2:d2:e8:21:ec:cf:12:6f:c0:be:87:6c:dc:04:a2: b7:3d:91:60:c2:a6:eb:f9:c5:cb:26:76:68:fd:4b:d8:9d:cd: 8b:ef:20:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwNzIxMDEyNDE3WhcNMjUwNzI4MDEyNDE3WjAYMRYwFAYD VQQDEw02ODdkOTZjMS1hMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvKHdL5OFo/d+DdvRe3xYEPhSSg3yGjYvwdPyz8UOa3HKa9TLN/fgbRNbd9O EElxre/gb/sGlAKwrWyIorrb0BelGnPsJ9aMaDzdw8xDDgWCUDtNDX3TrEHkMmI5 Yr9AveJq3PubREphzkpfeTtoF0DZHtJ2XCGQTrDLDkajAntPS5qBKksVHHqbgSkz 3rnD+A6crPPKRTwP4MH4aec+vzmhg0GEHvyUx9nMgzA0U8oSrH9aebGrWzH+VPU6 ep7Or3VQOSLJwCzNxo/f+tFCU81S0OwCP320oumf3iz4KJzwApFLm1TosE4z+E2T hJ1Jr4nA+Umrw/o0vPcTOW4mfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnxAPrs rcdF5L2JzohqzzrNXWPjMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNV7kF35ybKnc4DXrb8hMEGyrCNFXGCDwOhWpFl7K2lx+JtoiHw08X bcbJ5/2UrG2ZohwGEBOo3xTAWvnglGPz6xLohHp+lZZULS/Ito719IwNifAF9WDK uKC7k91jV9oeI7GnA0lww4XGRgHH342o25tXyyaciIVUnjASlJfdsHb1eK46kMWI 3C69/mZeXv2N/Yjl/yxJdKROp7pjqOr1CAAZk+Umr/WYSJYWvR30VLQ9zrWz3stR 94QAeBfPbzuIQzIdYLIp8+0bCzGt8IQjZwtgKm5MdVfeSyTC0ugh7M8Sb8C+h2zc BKK3PZFgwqbr+cXLJnZo/UvYnc2L7yCc -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:32 2025 by rpki-client