$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json) Hash identifier: 95M6K2SjG6a5NVnDvEs0ERmYkmad9LFi1kA8/vvqesM= Subject key identifier: 91:EF:81:99:E5:34:65:E1:74:32:5E:56:79:34:E3:9A:CA:37:21:48 Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft Manifest number: 24 Signing time: Sat 19 Jul 2025 08:03:54 +0000 Manifest this update: Sat 19 Jul 2025 08:03:54 +0000 Manifest next update: Sat 26 Jul 2025 08:03:54 +0000 Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: bscLoaE1dcTrMeeIhB/b2V5UlchzoDc0xxNdrVNr0AM=) 2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: Jul 19 08:03:54 2025 GMT Not After : Jul 26 08:03:54 2025 GMT Subject: CN=687b516a-b804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:5c:c4:1d:b0:91:96:b3:1a:a2:c5:7a:b5: 61:6b:8e:fe:70:95:85:02:a4:d5:b2:3b:0d:0e:33: d3:3a:7d:fc:af:57:22:26:07:da:b2:36:fa:77:2a: ff:b3:2a:14:56:09:5b:a4:7d:5a:36:d6:1d:21:fb: 16:0e:1c:56:eb:59:aa:19:30:dc:cf:a9:48:1d:b0: 5f:f9:31:74:df:b7:f6:4f:a1:70:69:5b:59:69:df: 70:6a:92:05:08:7c:39:91:8e:2f:79:22:00:c1:fc: 62:40:ec:08:25:73:91:a9:62:06:4a:9f:75:ce:83: bd:40:7d:ec:92:52:e0:93:fd:2f:e5:c0:1c:ce:de: f5:4d:32:8f:74:7a:4d:bc:47:8e:52:fe:7a:fd:91: ba:2a:d7:6e:3d:42:4e:14:c0:e0:4b:7a:9a:98:4f: f5:92:52:a2:b9:68:52:7d:30:06:75:9d:a8:77:21: 64:ad:2d:fe:f5:c4:93:19:72:9c:59:9b:1e:86:e4: fd:f1:f2:42:16:10:47:7f:d8:4e:6c:c1:26:a4:d7: 69:00:de:de:c8:58:b0:d5:b5:32:c8:72:5d:66:80: 5f:e8:c4:6e:f6:d6:e4:c8:2c:16:3e:06:eb:70:fb: 13:27:12:8f:4f:c2:69:d9:4c:62:f4:15:ab:05:70: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EF:81:99:E5:34:65:E1:74:32:5E:56:79:34:E3:9A:CA:37:21:48 X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d4:82:3f:75:2b:e5:b8:6c:7b:5f:95:3d:56:b3:c1:89:83: d1:65:89:32:80:dd:35:7c:23:e3:05:de:74:e9:07:a2:83:e4: 25:2b:b6:9b:03:68:74:b6:af:1b:98:2b:10:6d:47:05:98:91: 52:f4:7e:bc:14:27:d3:46:0c:81:39:14:13:7c:30:8b:56:9a: ce:b3:35:71:ff:6b:ea:bf:ca:59:33:cf:ae:3c:f8:76:93:c8: 47:80:7f:be:19:84:ef:d8:ca:aa:cb:fe:4e:ce:2f:ee:f7:c7: bf:d1:b5:f3:6c:23:ab:dd:af:04:e1:36:ea:fd:4c:e0:0f:55: 36:70:56:13:06:4c:b9:51:ff:e2:62:c1:47:25:ed:a2:3d:69: 87:d7:5e:31:72:e9:35:98:f4:09:1a:9e:32:69:7e:fe:f9:f9: 38:a2:c7:a8:89:f4:66:b8:03:a7:6a:fa:9a:12:0c:90:46:ef: 07:84:18:a8:e7:ab:bd:0e:eb:fd:0e:64:38:da:35:59:a3:44: 45:91:c6:b0:d6:00:a1:e1:4e:88:fb:57:36:8d:3f:23:d1:4b: a7:49:08:c4:a2:42:5f:a6:09:d7:45:9e:dd:17:32:2b:00:e3: ba:ee:bc:08:1d:db:76:7d:ad:92:4a:82:84:6d:f4:62:95:6d: f3:fb:cd:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA3MTkwODAzNTRaFw0yNTA3MjYwODAzNTRaMBgxFjAUBgNV BAMTDTY4N2I1MTZhLWI4MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5NVzEHbCRlrMaosV6tWFrjv5wlYUCpNWyOw0OM9M6ffyvVyImB9qyNvp3Kv+z KhRWCVukfVo21h0h+xYOHFbrWaoZMNzPqUgdsF/5MXTft/ZPoXBpW1lp33BqkgUI fDmRji95IgDB/GJA7Aglc5GpYgZKn3XOg71AfeySUuCT/S/lwBzO3vVNMo90ek28 R45S/nr9kboq1249Qk4UwOBLepqYT/WSUqK5aFJ9MAZ1nah3IWStLf71xJMZcpxZ mx6G5P3x8kIWEEd/2E5swSak12kA3t7IWLDVtTLIcl1mgF/oxG721uTILBY+Butw +xMnEo9PwmnZTGL0FasFcDhdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUke+BmeU0 ZeF0Ml5WeTTjmso3IUgwHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFLUgj91K+W4bHtflT1Ws8GJg9FliTKA3TV8I+MF3nTpB6KD5CUrtpsD aHS2rxuYKxBtRwWYkVL0frwUJ9NGDIE5FBN8MItWms6zNXH/a+q/ylkzz648+HaT yEeAf74ZhO/YyqrL/k7OL+73x7/RtfNsI6vdrwThNur9TOAPVTZwVhMGTLlR/+Ji wUcl7aI9aYfXXjFy6TWY9AkanjJpfv75+Tiix6iJ9Ga4A6dq+poSDJBG7weEGKjn q70O6/0OZDjaNVmjREWRxrDWAKHhToj7VzaNPyPRS6dJCMSiQl+mCddFnt0XMisA 47ruvAgd23Z9rZJKgoRt9GKVbfP7zbA= -----END CERTIFICATE-----Generated at Sun Jul 20 15:14:08 2025 by rpki-client