$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft File: GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json) Hash identifier: 0jbHkvOM699emIgYSMgpldKcm+jTce4mtsdJXF0ao5w= Subject key identifier: 9C:AA:D0:26:7C:6B:BA:CB:A1:40:CE:31:68:8F:3E:42:64:7C:FD:D3 Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 Certificate issuer: /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft Manifest number: 4D Signing time: Mon 21 Jul 2025 07:30:50 +0000 Manifest this update: Mon 21 Jul 2025 07:30:49 +0000 Manifest next update: Mon 28 Jul 2025 07:30:49 +0000 Files and hashes: 1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: dbjQ7EV9kbtR9fOPpNyktpzgXZDzunVjK6NP9wrQtog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Validity Not Before: Jul 21 07:30:49 2025 GMT Not After : Jul 28 07:30:49 2025 GMT Subject: CN=687decaa-d902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:e6:fe:48:d2:54:2a:82:0a:cc:8d:57:ed: 0f:85:63:c5:27:41:69:ce:6f:fd:1e:22:b0:c2:47: 51:27:5e:01:80:0d:80:43:e3:4d:d8:d1:30:b7:bc: a1:20:d0:2a:51:a0:a2:b3:16:1b:4a:3b:68:d1:da: 13:25:d3:1b:ec:e6:eb:98:fb:50:bb:0b:d2:d6:49: da:90:cb:58:2c:23:61:3c:fb:b4:56:c5:17:9b:00: b6:dd:e6:87:d0:81:0b:dd:7d:da:ca:d8:ff:4d:6a: cb:9e:70:fe:20:73:6f:85:b0:2b:64:73:3d:3c:cf: 33:25:19:d4:33:f7:99:44:48:ea:b4:ce:52:a5:a1: 4c:90:34:00:13:de:c4:9c:c7:e3:45:87:20:47:64: 38:da:5f:01:3c:58:1a:33:fe:07:19:1d:41:3f:69: c1:73:2a:57:26:3a:28:c0:8e:62:f7:90:e2:64:5a: d1:1b:8b:57:76:32:4c:d2:a0:73:a5:7b:14:c9:6a: 28:6b:38:c8:c3:9b:60:50:49:bb:4c:f1:ed:a6:f2: d7:91:1c:43:a3:60:1f:4a:c4:42:9d:df:bd:aa:e0: 0c:22:9d:c8:f3:e8:26:bb:6b:13:af:76:54:dc:dd: a4:2f:81:f6:8f:1f:f3:21:0a:b7:7a:e8:ab:7a:c5: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AA:D0:26:7C:6B:BA:CB:A1:40:CE:31:68:8F:3E:42:64:7C:FD:D3 X509v3 Authority Key Identifier: keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9d:c8:be:fe:7f:df:83:35:e2:1b:05:5e:53:21:09:32:b0: e4:0e:ce:72:c5:bd:d3:d7:ca:5b:88:52:c3:81:ea:e4:f7:f0: 42:57:e2:65:ef:4b:87:ec:94:48:b7:e5:71:a3:4a:4d:d4:cc: ee:89:c1:13:45:b7:0a:93:1f:14:5f:9f:8f:54:52:65:a9:bb: 35:89:64:6c:6f:72:49:8a:6a:33:ab:14:de:55:ad:7a:a9:e1: 6f:d2:77:10:67:c5:f9:89:83:00:44:d5:58:1c:52:10:a7:7d: 95:28:db:9c:80:68:05:0a:35:34:c0:2e:ef:c2:92:43:05:96: 44:8a:80:5a:56:67:4c:cf:30:a2:73:c4:b5:99:74:5b:a0:79: 9c:3f:85:59:20:d7:24:38:dc:da:d1:48:d7:ad:27:ad:58:57: dc:cc:2c:c3:64:99:24:7e:eb:50:8c:70:e5:de:a8:df:24:10: 61:2e:97:37:64:51:31:43:4e:6f:bf:76:0e:c0:f9:6b:9c:b2: 35:fa:24:2e:c6:46:d4:86:eb:b7:c5:20:0d:24:93:e6:7e:0b: 87:ca:a6:9e:f1:e8:1f:e1:02:df:fe:be:38:17:65:a0:05:e0: dc:5c:ec:bb:22:51:03:55:8b:ca:b8:7b:89:bf:6d:c7:6f:a5: 9e:5f:1f:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoMTgzQTk4NjdGMkUzQjM3MzE2MkJFRkE2Qjg2RTgxQkQ4 Qzg2ODg3NzAeFw0yNTA3MjEwNzMwNDlaFw0yNTA3MjgwNzMwNDlaMBgxFjAUBgNV BAMTDTY4N2RlY2FhLWQ5MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbJ+b+SNJUKoIKzI1X7Q+FY8UnQWnOb/0eIrDCR1EnXgGADYBD403Y0TC3vKEg 0CpRoKKzFhtKO2jR2hMl0xvs5uuY+1C7C9LWSdqQy1gsI2E8+7RWxRebALbd5ofQ gQvdfdrK2P9NasuecP4gc2+FsCtkcz08zzMlGdQz95lESOq0zlKloUyQNAAT3sSc x+NFhyBHZDjaXwE8WBoz/gcZHUE/acFzKlcmOijAjmL3kOJkWtEbi1d2MkzSoHOl exTJaihrOMjDm2BQSbtM8e2m8teRHEOjYB9KxEKd372q4Awincjz6Ca7axOvdlTc 3aQvgfaPH/MhCrd66Kt6xe87AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnKrQJnxr usuhQM4xaI8+QmR8/dMwHwYDVR0jBBgwFoAUGDqYZ/Ljs3MWK++muG6BvYyGiHcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzZFMEYyRUEwRjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNNV0stLW11RzZCdll5R2lI Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0RxWVpfTGpzM01XSy0tbXVHNkJ2WXlHaUhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzZFMEYyRUEwRjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNN V0stLW11RzZCdll5R2lIYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+dyL7+f9+DNeIbBV5TIQkysOQOznLFvdPXyluIUsOB6uT38EJX4mXv S4fslEi35XGjSk3UzO6JwRNFtwqTHxRfn49UUmWpuzWJZGxvckmKajOrFN5VrXqp 4W/SdxBnxfmJgwBE1VgcUhCnfZUo25yAaAUKNTTALu/CkkMFlkSKgFpWZ0zPMKJz xLWZdFugeZw/hVkg1yQ43NrRSNetJ61YV9zMLMNkmSR+61CMcOXeqN8kEGEulzdk UTFDTm+/dg7A+WucsjX6JC7GRtSG67fFIA0kk+Z+C4fKpp7x6B/hAt/+vjgXZaAF 4Nxc7LsiUQNVi8q4e4m/bcdvpZ5fH8g= -----END CERTIFICATE-----Generated at Tue Jul 22 05:59:19 2025 by rpki-client