$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json) Hash identifier: m/zQiIoMN0Cm07t/BJRLVDvBOyjZ5MjSdnk4BFFJJXI= Subject key identifier: 36:9D:B5:E3:EC:70:22:57:B2:88:B8:A0:98:39:2C:DA:84:61:9A:52 Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft Manifest number: 0212 Signing time: Sat 19 Jul 2025 02:24:42 +0000 Manifest this update: Sat 19 Jul 2025 02:24:42 +0000 Manifest next update: Sat 26 Jul 2025 02:24:42 +0000 Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: 3lux+TMde6sj9WJrCbz6gSR0HI1oqGetgUcr4xpYHA4=) 2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: zW5H6X8uqPfx0Xsy4TR9o3a+IpV9YO9mu4z+ktesoLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Validity Not Before: Jul 19 02:24:42 2025 GMT Not After : Jul 26 02:24:42 2025 GMT Subject: CN=687b01ea-90af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:7a:6c:90:1a:53:4d:d1:e5:c3:92:f8:53: 62:9d:78:5b:4f:97:ae:52:4f:44:8d:9e:52:e8:0c: e7:32:1f:ba:06:e5:72:93:cc:50:21:da:7d:5f:bd: bd:89:70:62:fa:c8:5a:79:3c:ab:a8:b9:51:bc:f9: f6:35:ad:fa:2a:ac:91:5a:b3:49:3a:ca:b1:03:e2: 95:9e:6d:42:7a:70:64:ad:1b:aa:a8:ba:62:77:87: 32:c2:11:03:4a:d3:0a:30:54:98:c6:00:3c:d7:e1: e9:bd:3f:bb:54:73:2f:a6:14:2d:b2:c6:ec:dc:dc: d8:ee:60:f9:d7:cd:10:46:4a:94:63:30:94:d5:57: b4:5c:57:41:91:be:5e:e1:a5:d4:84:fb:01:d1:a4: 9f:b0:a4:a0:d5:a4:af:5e:64:a3:eb:b1:03:65:13: 66:8d:85:f4:f6:9a:4a:10:33:0a:46:3d:21:46:83: f4:2d:ac:db:ae:ab:ba:65:e3:46:70:5e:94:64:30: 2e:21:69:20:7e:f6:0f:3a:1f:44:07:c6:4c:85:48: 9e:82:c7:61:25:97:ce:01:98:3e:dc:13:d4:cd:b2: f6:c2:d5:69:e7:0f:1a:84:dc:e4:af:c2:9b:b6:a9: 38:dd:44:d2:83:b3:0c:21:b5:7f:1d:8b:e6:ab:9f: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9D:B5:E3:EC:70:22:57:B2:88:B8:A0:98:39:2C:DA:84:61:9A:52 X509v3 Authority Key Identifier: keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:66:3d:67:7f:8c:f7:cb:89:2b:0f:c8:c3:c6:4a:d4:26:07: 6c:e4:18:32:8c:c9:60:a8:d3:85:a4:3c:bf:5d:96:60:7d:af: 75:10:d2:8d:70:49:06:6a:b0:a8:c7:e4:23:a6:e8:09:03:3e: e1:04:3b:c7:d8:da:39:e0:49:1c:65:85:8d:07:73:8e:fc:e7: f6:3f:5a:d5:73:00:98:5d:da:e5:c5:45:6b:69:f6:0e:da:2b: b7:e0:54:f5:5b:d2:d1:56:b8:27:d9:3f:9b:78:9d:30:c8:09: b6:4e:8b:c0:1e:94:32:a4:2a:63:66:71:98:84:2b:30:82:a7: fc:85:66:bd:40:a3:47:63:95:78:bf:70:45:40:56:fa:b1:3f: b9:8e:6d:f7:e4:31:7b:1b:b9:bf:9d:eb:90:03:9f:ac:60:0e: 66:20:5b:66:89:6c:6a:72:1e:c6:11:62:85:a5:8f:2e:60:6f: ba:75:22:b6:55:da:88:1e:c5:80:32:a0:71:bc:89:c3:e8:3a: 40:a4:9e:6a:ac:84:ef:fc:f3:c5:79:95:60:d0:c3:ec:aa:2a: b1:ac:56:5a:2c:e9:f5:c1:bf:ec:96:48:75:ed:93:48:aa:2c: 62:01:75:e7:f4:83:72:12:13:19:b4:b4:31:a7:0a:ad:01:6f: bd:6c:35:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0 MkY2QTY2MEQwHhcNMjUwNzE5MDIyNDQyWhcNMjUwNzI2MDIyNDQyWjAYMRYwFAYD VQQDEw02ODdiMDFlYS05MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cx6bJAaU03R5cOS+FNinXhbT5euUk9EjZ5S6AznMh+6BuVyk8xQIdp9X729 iXBi+shaeTyrqLlRvPn2Na36KqyRWrNJOsqxA+KVnm1CenBkrRuqqLpid4cywhED StMKMFSYxgA81+HpvT+7VHMvphQtssbs3NzY7mD5180QRkqUYzCU1Ve0XFdBkb5e 4aXUhPsB0aSfsKSg1aSvXmSj67EDZRNmjYX09ppKEDMKRj0hRoP0Lazbrqu6ZeNG cF6UZDAuIWkgfvYPOh9EB8ZMhUiegsdhJZfOAZg+3BPUzbL2wtVp5w8ahNzkr8Kb tqk43UTSg7MMIbV/HYvmq5/e0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDadtePs cCJXsoi4oJg5LNqEYZpSMB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTBENy84RkVGODQwNDNFQ0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1U QUt3Rm5HVThLUWhDOXFaZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQZj1nf4z3y4krD8jDxkrUJgds5BgyjMlgqNOFpDy/XZZgfa91ENKN cEkGarCox+QjpugJAz7hBDvH2No54EkcZYWNB3OO/Of2P1rVcwCYXdrlxUVrafYO 2iu34FT1W9LRVrgn2T+beJ0wyAm2TovAHpQypCpjZnGYhCswgqf8hWa9QKNHY5V4 v3BFQFb6sT+5jm335DF7G7m/neuQA5+sYA5mIFtmiWxqch7GEWKFpY8uYG+6dSK2 VdqIHsWAMqBxvInD6DpApJ5qrITv/PPFeZVg0MPsqiqxrFZaLOn1wb/slkh17ZNI qixiAXXn9INyEhMZtLQxpwqtAW+9bDXL -----END CERTIFICATE-----Generated at Sun Jul 20 19:03:01 2025 by rpki-client