$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft File: GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json) Hash identifier: z1lzPjDDUM7iQQzpI3/7pBgSwW2QKCTupiafXRGBFu0= Subject key identifier: 28:3B:CD:A0:17:E5:9E:65:D2:7A:B8:00:29:F8:5B:C6:EF:83:C5:AF Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 Certificate issuer: /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft Manifest number: 4E Signing time: Wed 23 Jul 2025 07:39:35 +0000 Manifest this update: Wed 23 Jul 2025 07:39:35 +0000 Manifest next update: Wed 30 Jul 2025 07:39:35 +0000 Files and hashes: 1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: hKs1KrgCCtlSrsK4cYxDjrS/l3rzM1+2qQbnKvK4RA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Validity Not Before: Jul 23 07:39:35 2025 GMT Not After : Jul 30 07:39:35 2025 GMT Subject: CN=688091b7-8301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:2b:96:6e:7e:23:64:df:07:2f:43:0e:f8: ce:f9:ad:7b:7d:3a:d3:da:45:30:ef:f3:ed:06:1f: 27:2a:5c:dc:e5:02:22:23:cc:eb:20:5e:e4:3c:5b: 31:45:37:e1:b6:48:5d:5d:78:58:01:47:60:5a:70: 62:06:7c:ad:34:d8:b8:aa:d0:6e:fd:38:a0:76:5c: d3:62:b0:fe:37:46:e6:6f:23:09:53:29:dd:ae:3b: 33:05:f3:98:17:af:a9:d4:62:14:88:09:33:fa:45: 0c:ac:70:97:b7:eb:3b:39:3c:d0:54:a6:c6:65:2c: 0d:24:88:19:26:bd:80:d0:fb:bf:e1:81:e1:5e:ea: 89:46:d9:61:01:e9:17:03:c5:56:c3:ea:a8:04:5b: 72:5a:d6:0c:9e:4f:12:8e:0b:66:46:a1:18:05:06: 31:79:df:72:8d:11:c9:50:03:19:34:ae:cf:ee:3b: fb:75:a3:9e:ac:60:77:16:e4:75:97:ed:13:e2:69: 51:1c:7a:5b:e7:31:e1:dd:5d:44:12:f9:2e:a0:ad: 70:83:42:cf:36:df:45:ab:2e:43:6e:a2:54:17:68: 83:19:7d:d9:25:96:ba:ab:2e:c1:e3:c5:76:37:db: d1:a5:7a:32:53:e1:7c:45:ef:cb:2f:09:6f:a2:b7: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:CD:A0:17:E5:9E:65:D2:7A:B8:00:29:F8:5B:C6:EF:83:C5:AF X509v3 Authority Key Identifier: keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fd:5b:9d:1e:0a:d3:f0:12:ec:45:a7:c9:79:c9:ac:db:9e: 56:8c:fc:4e:0e:58:a7:78:a0:74:66:24:2d:4c:69:30:80:a8: 31:51:26:96:db:b6:05:90:03:4b:67:a1:57:23:99:03:61:11: 8f:50:fc:f9:c1:d8:14:e2:ea:01:4a:90:d1:2c:47:31:df:d5: 57:ac:4c:88:8e:bc:e3:61:35:fa:8b:12:b4:d0:f1:bd:eb:4a: 4c:df:8a:62:23:c6:1f:ac:29:ea:4a:88:90:c1:16:6b:62:dd: 81:5f:da:ca:36:0d:c6:60:46:96:ce:cc:8f:9d:ff:64:8b:51: 08:be:34:6d:cb:4b:1f:8f:17:43:ba:29:a3:06:06:08:a7:33: bb:fe:0b:d3:25:52:24:de:2f:85:81:3d:35:c0:a6:5b:40:71: 76:47:14:5c:09:7c:5d:3c:1b:35:18:b0:0c:49:83:d3:74:39: a0:df:05:8e:bd:17:7d:d6:5c:a2:de:94:ff:97:18:97:a6:cb: 9a:42:23:a1:70:1a:d9:05:80:12:4b:cd:c8:90:6b:16:39:38: b8:79:6d:2e:48:61:c1:4f:7b:de:31:54:76:cd:4f:18:3a:a7: 20:4a:7c:d1:ac:8d:bd:35:de:92:97:9d:64:63:14:db:77:89: 33:d0:b4:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoMTgzQTk4NjdGMkUzQjM3MzE2MkJFRkE2Qjg2RTgxQkQ4 Qzg2ODg3NzAeFw0yNTA3MjMwNzM5MzVaFw0yNTA3MzAwNzM5MzVaMBgxFjAUBgNV BAMTDTY4ODA5MWI3LTgzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDiiuWbn4jZN8HL0MO+M75rXt9OtPaRTDv8+0GHycqXNzlAiIjzOsgXuQ8WzFF N+G2SF1deFgBR2BacGIGfK002Liq0G79OKB2XNNisP43RuZvIwlTKd2uOzMF85gX r6nUYhSICTP6RQyscJe36zs5PNBUpsZlLA0kiBkmvYDQ+7/hgeFe6olG2WEB6RcD xVbD6qgEW3Ja1gyeTxKOC2ZGoRgFBjF533KNEclQAxk0rs/uO/t1o56sYHcW5HWX 7RPiaVEcelvnMeHdXUQS+S6grXCDQs8230WrLkNuolQXaIMZfdkllrqrLsHjxXY3 29GlejJT4XxF78svCW+it5VFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKDvNoBfl nmXSergAKfhbxu+Dxa8wHwYDVR0jBBgwFoAUGDqYZ/Ljs3MWK++muG6BvYyGiHcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzZFMEYyRUEwRjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNNV0stLW11RzZCdll5R2lI Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0RxWVpfTGpzM01XSy0tbXVHNkJ2WXlHaUhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzZFMEYyRUEwRjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNN V0stLW11RzZCdll5R2lIYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIv9W50eCtPwEuxFp8l5yazbnlaM/E4OWKd4oHRmJC1MaTCAqDFRJpbb tgWQA0tnoVcjmQNhEY9Q/PnB2BTi6gFKkNEsRzHf1VesTIiOvONhNfqLErTQ8b3r SkzfimIjxh+sKepKiJDBFmti3YFf2so2DcZgRpbOzI+d/2SLUQi+NG3LSx+PF0O6 KaMGBginM7v+C9MlUiTeL4WBPTXApltAcXZHFFwJfF08GzUYsAxJg9N0OaDfBY69 F33WXKLelP+XGJemy5pCI6FwGtkFgBJLzciQaxY5OLh5bS5IYcFPe94xVHbNTxg6 pyBKfNGsjb013pKXnWRjFNt3iTPQtK8= -----END CERTIFICATE-----Generated at Thu Jul 24 04:01:11 2025 by rpki-client