$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json) Hash identifier: nEyPTp+9To6fwNE9QkYOgJe1YcvTaphA2+XrAn4LtKk= Subject key identifier: 0D:3D:64:F6:A8:C5:28:F7:17:52:F1:F4:0C:BC:1C:D2:65:53:A6:E2 Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft Manifest number: 0287 Signing time: Sat 19 Jul 2025 02:05:16 +0000 Manifest this update: Sat 19 Jul 2025 02:05:15 +0000 Manifest next update: Sat 26 Jul 2025 02:05:15 +0000 Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: YtFq7OalNkcgS56CBmf/V76q6/RaoIiKG6qAObIIQI8=) 2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: dtuYeScxI0cvK8sz9E/Cl0+96zsD1MptOKpsIJKXrl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Validity Not Before: Jul 19 02:05:15 2025 GMT Not After : Jul 26 02:05:15 2025 GMT Subject: CN=687afd5c-83f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:e6:43:e8:a6:4f:0e:f2:3e:d6:71:e4:98: f0:53:7a:af:95:64:1a:8d:f1:92:5b:05:8d:92:68: 97:c9:05:9f:fd:ec:17:6d:55:a8:25:10:ad:22:11: 32:de:c7:63:02:93:18:da:42:ee:dd:25:5d:1e:ef: a2:6f:04:f2:88:5b:57:0d:ef:b1:94:19:54:8e:05: df:13:f4:78:c2:71:94:5e:c7:40:6f:fd:c2:ba:f8: 35:0c:b5:a8:34:03:cd:4a:fc:15:73:e5:6c:23:c4: fb:d9:3d:b0:fe:30:aa:47:44:72:61:e4:2f:85:45: d5:2a:06:b8:3c:58:11:bf:e5:cb:65:4d:fc:00:17: 85:74:3e:57:93:6b:be:2d:b3:79:e1:e2:7b:39:4e: 4a:f5:1e:84:aa:30:66:38:f2:c0:e6:e0:01:7b:ee: 6f:10:3f:f0:66:6e:55:3c:8f:38:b5:d4:c9:8d:72: db:ce:83:a8:17:eb:90:a8:3b:0d:b3:c3:0d:da:50: 3c:75:9a:dc:f0:4d:02:a1:b3:62:7e:f5:bd:6e:06: 7f:a9:49:32:76:0c:2f:fa:9e:3a:14:7f:58:c4:ec: 56:bf:15:5c:c0:6b:ac:86:90:30:52:69:de:07:95: f8:70:38:04:02:83:30:75:f9:67:23:78:72:9e:97: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3D:64:F6:A8:C5:28:F7:17:52:F1:F4:0C:BC:1C:D2:65:53:A6:E2 X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:db:67:e0:6a:3f:03:40:6e:54:68:cf:ca:a8:6d:4b:74:e6: 2f:b4:94:a3:c0:4d:eb:13:40:c0:9e:f9:64:bf:c3:6b:ea:13: 1d:7a:31:1d:d7:59:a0:30:4b:92:dc:75:f2:58:ca:bc:ce:5c: 3e:d2:f3:59:5d:dc:2e:c5:98:b1:c0:85:b7:09:f7:9b:d6:d5: d3:1b:1e:62:c0:cc:3d:25:42:43:96:de:0c:84:12:f4:1e:76: fb:48:c4:fc:36:2b:b8:99:3c:94:e5:24:c3:43:2e:b4:9c:21: 0b:e9:b2:31:d1:e2:66:0b:df:b8:c9:94:83:5b:5d:a3:76:ce: 9b:fe:0f:7f:47:4f:e8:66:9f:cc:30:d7:f4:90:37:2e:4f:98: c2:83:f2:b7:02:75:30:d4:a9:fb:d0:a7:54:17:8f:e3:7f:d8: 22:8f:1d:7f:4a:36:41:83:47:30:62:d5:44:70:cc:ea:91:64: bd:f0:b3:e6:b9:29:69:b5:54:3d:74:a1:30:c7:01:88:16:ae: 95:d6:1d:a1:cf:09:34:72:b7:07:db:f9:b1:4c:65:df:44:88: 50:08:28:07:9a:88:92:71:51:3b:f8:e3:8d:78:e1:aa:56:8c: eb:34:01:45:59:8f:7d:e9:88:1c:b3:9e:e6:87:e7:00:c1:97: cf:c2:89:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjUwNzE5MDIwNTE1WhcNMjUwNzI2MDIwNTE1WjAYMRYwFAYD VQQDEw02ODdhZmQ1Yy04M2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AnmQ+imTw7yPtZx5JjwU3qvlWQajfGSWwWNkmiXyQWf/ewXbVWoJRCtIhEy 3sdjApMY2kLu3SVdHu+ibwTyiFtXDe+xlBlUjgXfE/R4wnGUXsdAb/3Cuvg1DLWo NAPNSvwVc+VsI8T72T2w/jCqR0RyYeQvhUXVKga4PFgRv+XLZU38ABeFdD5Xk2u+ LbN54eJ7OU5K9R6EqjBmOPLA5uABe+5vED/wZm5VPI84tdTJjXLbzoOoF+uQqDsN s8MN2lA8dZrc8E0CobNifvW9bgZ/qUkydgwv+p46FH9YxOxWvxVcwGushpAwUmne B5X4cDgEAoMwdflnI3hynpc3rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA09ZPao xSj3F1Lx9Ay8HNJlU6biMB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFS NkNxazR0Y2hjOHBqNmNUbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe22fgaj8DQG5UaM/KqG1LdOYvtJSjwE3rE0DAnvlkv8Nr6hMdejEd 11mgMEuS3HXyWMq8zlw+0vNZXdwuxZixwIW3Cfeb1tXTGx5iwMw9JUJDlt4MhBL0 Hnb7SMT8Niu4mTyU5STDQy60nCEL6bIx0eJmC9+4yZSDW12jds6b/g9/R0/oZp/M MNf0kDcuT5jCg/K3AnUw1Kn70KdUF4/jf9gijx1/SjZBg0cwYtVEcMzqkWS98LPm uSlptVQ9dKEwxwGIFq6V1h2hzwk0crcH2/mxTGXfRIhQCCgHmoiScVE7+OONeOGq VozrNAFFWY996Ygcs57mh+cAwZfPwokC -----END CERTIFICATE-----Generated at Sun Jul 20 22:47:16 2025 by rpki-client