$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: vBgeMlHuF3EbgUwhFAtOSqmsE9jdIOoKuG/LnsHG6f8= Subject key identifier: B1:A8:0D:BD:92:E6:32:FB:DE:05:02:FF:5D:4B:71:FE:1D:33:9F:C1 Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: EA Signing time: Sat 19 Jul 2025 05:34:54 +0000 Manifest this update: Sat 19 Jul 2025 05:34:53 +0000 Manifest next update: Sat 26 Jul 2025 05:34:53 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: lFOj5crUcgScF8/1jqewT+BbAtq3IPW0ZOvmEUiuAqA=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: kL+8sBegJ1XGnndePATDLqR1ij+F7xDhoLyLkaA0qyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: Jul 19 05:34:53 2025 GMT Not After : Jul 26 05:34:53 2025 GMT Subject: CN=687b2e7e-75b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c7:1f:03:9b:fd:46:45:eb:2b:61:9e:a5:5c: 07:cf:6c:c0:16:00:5a:2b:aa:b6:f9:b8:66:40:25: c3:a6:94:45:ec:1b:c4:0d:60:5a:ac:d9:44:ea:87: b0:40:17:2a:d1:18:be:51:35:90:12:e4:9e:05:54: f9:a3:01:ab:37:f6:48:ff:4f:ad:90:d4:14:df:99: d2:ec:1c:76:10:42:65:76:0a:56:74:22:1d:a3:95: bc:a7:05:c8:2f:ea:40:15:76:ce:ca:d3:1e:55:64: c6:80:95:b8:29:b7:ee:28:09:66:54:ae:dc:ea:68: a2:a1:bf:40:36:e9:2a:d8:e1:b6:13:dc:6c:a4:c8: dc:39:63:a8:9d:86:43:84:42:5d:77:56:e9:53:f8: f7:2f:8a:46:f9:73:31:fe:8a:b4:4a:d2:95:14:58: fd:b6:2e:b6:47:7b:8c:50:5c:06:84:a5:8a:dd:48: ca:1e:8d:90:a0:9b:04:a6:52:ec:08:92:9f:75:95: c3:6b:76:c2:90:33:52:a4:6d:e3:0a:5e:48:16:f2: f8:3f:d8:18:ae:5f:a8:ac:a4:ed:1d:67:8a:22:ff: bb:eb:24:21:37:62:ae:15:c3:12:4e:86:2a:b9:c9: 63:21:25:0a:d8:9d:a5:06:03:db:b9:76:a2:ed:b0: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:0D:BD:92:E6:32:FB:DE:05:02:FF:5D:4B:71:FE:1D:33:9F:C1 X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:07:40:46:4e:25:b6:eb:e3:9b:b2:b5:45:36:56:9b:a2:74: 0b:b4:f1:2b:ed:36:fe:96:a8:c1:7d:dc:ea:d4:c9:13:5f:08: 11:37:ae:32:76:ec:dd:6d:93:ea:c5:3d:20:66:8e:46:6c:cc: 0a:10:d0:3a:a3:9a:c9:57:3d:9c:38:f8:12:60:90:49:5d:63: 70:c7:1f:be:17:09:d1:04:97:a9:b4:9b:58:ac:98:e4:e6:0b: c4:f2:4f:89:14:e6:ff:d1:1b:69:e9:b0:72:f7:5b:17:a9:0d: 6b:8b:02:36:3c:b6:6d:9c:2c:bb:f0:fb:60:1a:e2:3b:33:b6: b6:72:9f:21:70:a2:8a:54:b3:62:d8:9b:59:27:26:58:b2:c7: ba:92:99:5f:5f:da:77:56:50:0a:b0:e9:09:ba:81:bb:41:a9: a1:ba:05:46:a3:f9:bc:c6:52:a2:d6:07:1a:79:41:63:8e:ab: 99:6f:96:ef:9e:24:4b:2a:ba:11:b3:d6:9a:ba:b4:81:0a:27: 79:bc:8a:02:15:a2:41:a6:39:a4:16:66:56:9e:9d:37:43:88: ad:f2:50:94:ee:1c:f0:d6:2a:ef:f6:b9:9c:9d:e7:ff:07:6a: ad:8c:1b:dc:ad:c8:05:04:8a:e2:bd:45:8b:50:20:c3:88:25: c2:ab:23:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBNDgxMTAvBgNVBAUTKDE5Nzk0RjNDQUEzNzU1MjdCQTBGRDMzNDQ4MEM3RTAz MzhFNzlFMkEwHhcNMjUwNzE5MDUzNDUzWhcNMjUwNzI2MDUzNDUzWjAYMRYwFAYD VQQDEw02ODdiMmU3ZS03NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ccfA5v9RkXrK2GepVwHz2zAFgBaK6q2+bhmQCXDppRF7BvEDWBarNlE6oew QBcq0Ri+UTWQEuSeBVT5owGrN/ZI/0+tkNQU35nS7Bx2EEJldgpWdCIdo5W8pwXI L+pAFXbOytMeVWTGgJW4KbfuKAlmVK7c6miiob9ANukq2OG2E9xspMjcOWOonYZD hEJdd1bpU/j3L4pG+XMx/oq0StKVFFj9ti62R3uMUFwGhKWK3UjKHo2QoJsEplLs CJKfdZXDa3bCkDNSpG3jCl5IFvL4P9gYrl+orKTtHWeKIv+76yQhN2KuFcMSToYq ucljISUK2J2lBgPbuXai7bC7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGoDb2S 5jL73gUC/11Lcf4dM5/BMB8GA1UdIwQYMBaAFBl5TzyqN1Unug/TNEgMfgM4554q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkE0OC9COUUyQUNBMEZF NTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZTZTZEOU0wU0F4LUF6am5u aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZT ZTZEOU0wU0F4LUF6am5uaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqB0BGTiW26+ObsrVFNlabonQLtPEr7Tb+lqjBfdzq1MkTXwgRN64y duzdbZPqxT0gZo5GbMwKENA6o5rJVz2cOPgSYJBJXWNwxx++FwnRBJeptJtYrJjk 5gvE8k+JFOb/0Rtp6bBy91sXqQ1riwI2PLZtnCy78PtgGuI7M7a2cp8hcKKKVLNi 2JtZJyZYsse6kplfX9p3VlAKsOkJuoG7QamhugVGo/m8xlKi1gcaeUFjjquZb5bv niRLKroRs9aaurSBCid5vIoCFaJBpjmkFmZWnp03Q4it8lCU7hzw1irv9rmcnef/ B2qtjBvcrcgFBIrivUWLUCDDiCXCqyNV -----END CERTIFICATE-----Generated at Sun Jul 20 07:30:11 2025 by rpki-client