$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json) Hash identifier: Cjy43D8HkGV08DigyDuFe1hiA6gfX8QsSYUlIyjIB08= Subject key identifier: 13:57:BC:D5:BD:CE:54:19:FC:26:41:4F:FB:76:40:5B:7A:71:29:60 Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft Manifest number: 0290 Signing time: Sat 19 Jul 2025 02:03:07 +0000 Manifest this update: Sat 19 Jul 2025 02:03:07 +0000 Manifest next update: Sat 26 Jul 2025 02:03:07 +0000 Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: fVlNlaLnB46CarMwgXEbhlUZ5T3MWdqK1IZCUUcpol4=) 2: EE62A36A0D9F11EDB7631D1BC4F9AE02.roa (hash: 79mqc7tZF4tbIphjhbOXUthxD6els9a6zfI1+s7nFSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Validity Not Before: Jul 19 02:03:07 2025 GMT Not After : Jul 26 02:03:07 2025 GMT Subject: CN=687afcdb-6c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:71:b4:77:1a:e8:a5:00:dc:67:83:57:e7: 77:9c:fc:f2:de:37:18:8e:e5:3d:6e:f3:8f:cb:c4: 14:ff:1b:c1:a1:4e:38:35:66:e9:bf:60:88:e9:ba: ff:af:4b:28:6e:e6:10:f5:e3:aa:98:e8:1c:e9:35: 45:6e:79:02:c1:dc:21:99:5d:f8:ec:20:f5:37:d5: 04:90:c2:b3:46:88:ae:df:0f:ae:18:f0:8a:da:b4: 81:5d:b7:7c:43:19:4e:b9:de:b5:2f:d0:cd:be:d4: 01:08:f1:dd:6a:62:b4:6d:62:80:84:6e:de:ee:96: 14:11:88:da:02:96:b5:ca:76:99:ea:93:7c:f5:e3: 44:e3:c2:9a:ad:24:70:64:f7:23:2b:dc:7a:98:6f: c6:45:a1:c4:84:6f:da:bd:a4:9c:b6:a2:85:93:2c: b4:ca:fd:56:65:f7:a3:24:a8:70:ef:3c:6f:eb:6f: 8c:2b:d5:88:e9:13:b9:39:63:ae:3e:06:2b:fe:02: 02:ad:da:18:50:d7:35:43:7a:7c:15:79:ec:f2:48: 79:37:af:4a:38:86:46:b6:97:6d:45:63:db:d6:c7: 26:3f:91:a2:12:0a:ae:a4:71:3c:d5:e4:bb:a1:c5: 73:48:9d:33:f6:8b:6e:25:d2:07:bb:56:7e:e5:c3: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:BC:D5:BD:CE:54:19:FC:26:41:4F:FB:76:40:5B:7A:71:29:60 X509v3 Authority Key Identifier: keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f9:2c:06:5c:96:ae:b0:ad:8b:61:d1:35:e4:0b:60:7c:13: 8c:74:c2:a5:cd:32:05:8f:37:64:7d:e8:c7:69:75:39:08:59: ce:f8:1a:41:52:52:91:e4:14:be:a2:b9:fb:df:73:2c:6d:8e: 5b:aa:21:5e:f1:9d:07:df:36:83:2f:11:2f:89:72:55:28:51: d0:29:df:42:c0:fa:fd:42:0c:3c:81:eb:90:4b:24:cf:c6:ad: 3d:1f:26:60:f8:96:26:05:e6:fd:72:32:45:0d:a2:7f:94:84: 10:b0:eb:f0:5b:45:cf:73:26:21:52:2d:74:47:35:c4:f2:9d: 3e:3e:60:8b:a1:a4:3a:7e:5d:b5:99:40:f4:1d:29:52:fb:aa: fb:95:f7:a2:b4:56:7a:81:b8:df:31:d8:f0:4c:0f:7b:3e:8d: 78:c7:7a:b1:86:0d:6b:41:d0:e8:b2:49:fe:3b:20:7e:e6:51: d8:82:eb:29:94:36:01:5c:83:18:cb:2e:5a:46:a4:fc:0f:51: 23:fa:dd:32:bd:3c:7a:16:cd:17:d2:a7:ca:89:49:19:32:c3: 29:c9:19:c1:aa:0e:65:1f:f5:42:bb:8b:c9:b9:8a:ba:76:cf: ef:6d:a5:91:07:27:c5:60:ba:26:50:05:75:63:6b:ed:82:6b: 47:09:4b:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNBNjcxMTAvBgNVBAUTKDgwRTBBQjE4OUZDRDcwMUVFRTQyQzkyQjkzQzE1QjZG NzQyNDgyNkEwHhcNMjUwNzE5MDIwMzA3WhcNMjUwNzI2MDIwMzA3WjAYMRYwFAYD VQQDEw02ODdhZmNkYi02YzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupdxtHca6KUA3GeDV+d3nPzy3jcYjuU9bvOPy8QU/xvBoU44NWbpv2CI6br/ r0sobuYQ9eOqmOgc6TVFbnkCwdwhmV347CD1N9UEkMKzRoiu3w+uGPCK2rSBXbd8 QxlOud61L9DNvtQBCPHdamK0bWKAhG7e7pYUEYjaApa1ynaZ6pN89eNE48KarSRw ZPcjK9x6mG/GRaHEhG/avaSctqKFkyy0yv1WZfejJKhw7zxv62+MK9WI6RO5OWOu PgYr/gICrdoYUNc1Q3p8FXns8kh5N69KOIZGtpdtRWPb1scmP5GiEgqupHE81eS7 ocVzSJ0z9otuJdIHu1Z+5cPURwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNXvNW9 zlQZ/CZBT/t2QFt6cSlgMB8GA1UdIwQYMBaAFIDgqxifzXAe7kLJK5PBW290JIJq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0E2Ny9DODA2OTc5MjBE OUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNCN3VRc2tyazhGYmIzUWtn bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPQ3JHSl9OY0I3dVFza3JrOEZiYjNRa2dtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0E2Ny9DODA2OTc5MjBEOUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNC N3VRc2tyazhGYmIzUWtnbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1+SwGXJausK2LYdE15AtgfBOMdMKlzTIFjzdkfejHaXU5CFnO+BpB UlKR5BS+orn733MsbY5bqiFe8Z0H3zaDLxEviXJVKFHQKd9CwPr9Qgw8geuQSyTP xq09HyZg+JYmBeb9cjJFDaJ/lIQQsOvwW0XPcyYhUi10RzXE8p0+PmCLoaQ6fl21 mUD0HSlS+6r7lfeitFZ6gbjfMdjwTA97Po14x3qxhg1rQdDoskn+OyB+5lHYgusp lDYBXIMYyy5aRqT8D1Ej+t0yvTx6Fs0X0qfKiUkZMsMpyRnBqg5lH/VCu4vJuYq6 ds/vbaWRByfFYLomUAV1Y2vtgmtHCUvf -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:13 2025 by rpki-client