$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft File: Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json) Hash identifier: 7Jxn4zWNsGhCLzybD0/9bg/feWqSPzup8oDxGonAK58= Subject key identifier: E7:39:94:6E:EE:7A:CF:0B:68:07:DA:98:AE:D6:9D:C9:55:11:E3:8D Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD Certificate issuer: /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft Manifest number: 0BE1 Signing time: Sun 20 Jul 2025 18:56:53 +0000 Manifest this update: Sun 20 Jul 2025 18:56:52 +0000 Manifest next update: Sun 27 Jul 2025 18:56:52 +0000 Files and hashes: 1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: EYqN06tytz2LENy2kw676bQmPfh6L/LZQ6mDUi0W8nc=) 2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: 4J/p4/at9N0h24OffWZyBK2PKe4zkvNfclH1N1tyx/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Validity Not Before: Jul 20 18:56:52 2025 GMT Not After : Jul 27 18:56:52 2025 GMT Subject: CN=687d3bf4-09be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:8b:2c:ca:4d:7a:1a:1b:5e:48:ed:6b:4e: 47:9e:ea:3c:8b:23:a5:b0:15:a2:e3:f3:e9:b3:2b: 5d:ab:01:e8:c2:18:e8:58:d9:3b:04:02:f6:d6:a8: e8:43:40:bf:1c:ca:91:4f:b2:61:8c:12:59:31:4d: eb:76:75:1e:7a:f1:47:98:ba:52:4c:e4:5f:b8:7c: e7:44:60:28:a5:28:ee:b2:e6:6f:7a:f2:0b:31:b4: d1:0b:76:11:56:cb:12:fb:4f:a6:0d:2d:3b:8f:d1: cd:fa:5c:97:92:0b:5b:02:8a:c3:2d:61:0c:be:8e: fe:9a:4c:e8:99:ad:74:20:ad:5d:cc:53:39:e9:85: 46:d5:c2:dc:4a:5a:ad:b0:74:db:71:cc:8e:b6:9d: 1b:c3:21:f6:3f:2b:c9:fb:2f:d6:96:97:a6:27:3f: a8:21:43:67:de:05:5e:5b:dc:3f:57:9b:42:68:69: d1:ef:00:a9:19:80:8c:94:90:a7:b5:82:30:74:3d: f7:b7:49:ef:87:2d:37:ac:07:28:f3:bb:c6:23:25: 29:39:cc:22:50:74:27:03:93:6e:4c:78:cc:17:96: 24:f2:a6:c2:ea:1d:ab:dc:b4:cf:81:68:a8:ef:e0: f1:ea:6c:23:54:a7:e1:15:4d:dd:24:1d:e2:84:d7: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:94:6E:EE:7A:CF:0B:68:07:DA:98:AE:D6:9D:C9:55:11:E3:8D X509v3 Authority Key Identifier: keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f6:30:16:6e:23:69:fc:7e:50:23:5e:51:99:a7:82:8a:3f: c2:46:d0:a4:49:b4:3f:0b:32:3d:de:32:b1:10:b6:8e:43:86: b6:42:f9:81:23:90:4d:c2:dd:e1:89:0a:c0:f8:5f:73:76:99: fb:d4:f5:6b:de:4b:82:74:17:da:59:8a:39:37:ba:52:e0:7a: 83:87:24:2c:6f:64:98:e8:fb:e2:85:49:ed:41:19:38:44:20: be:ac:5f:3c:09:88:28:e1:b5:91:4b:aa:ca:79:9c:2c:3c:0f: 95:b3:df:0e:77:eb:c5:06:3c:94:a4:7c:a8:da:49:81:f5:81: 00:64:e4:7b:9a:6a:08:29:37:7b:c6:8c:6e:95:4e:b3:5f:d1: a0:ac:b4:08:1b:11:95:67:58:80:f7:55:a4:bd:12:22:aa:ae: 23:3a:31:99:09:9c:25:6b:60:43:d0:82:d0:06:d0:dd:c2:33: f6:42:e0:0d:6f:da:7b:fb:d1:be:2c:70:88:40:f8:85:8d:b5: 77:25:c3:e6:48:fb:20:aa:88:c2:e4:19:40:c3:33:6e:8b:47: 1e:2b:db:06:c8:e3:54:2c:14:8e:e4:a2:0c:7f:4d:e7:ca:f0: aa:92:20:e6:19:10:86:7e:bb:4e:a1:61:4d:77:db:32:56:2e: 2d:01:f3:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwM0ExMTAvBgNVBAUTKDFBN0U0Q0E0QUExQzIyNzIyNTc3Mjk2QUIwNTc4M0Q3 NTVCMTE2QkQwHhcNMjUwNzIwMTg1NjUyWhcNMjUwNzI3MTg1NjUyWjAYMRYwFAYD VQQDEw02ODdkM2JmNC0wOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorGLLMpNehobXkjta05Hnuo8iyOlsBWi4/PpsytdqwHowhjoWNk7BAL21qjo Q0C/HMqRT7JhjBJZMU3rdnUeevFHmLpSTORfuHznRGAopSjusuZvevILMbTRC3YR VssS+0+mDS07j9HN+lyXkgtbAorDLWEMvo7+mkzoma10IK1dzFM56YVG1cLcSlqt sHTbccyOtp0bwyH2PyvJ+y/WlpemJz+oIUNn3gVeW9w/V5tCaGnR7wCpGYCMlJCn tYIwdD33t0nvhy03rAco87vGIyUpOcwiUHQnA5NuTHjMF5Yk8qbC6h2r3LTPgWio 7+Dx6mwjVKfhFU3dJB3ihNcj7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc5lG7u es8LaAfamK7WnclVEeONMB8GA1UdIwQYMBaAFBp+TKSqHCJyJXcparBXg9dVsRa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAzQS84Q0JEOTc4NjFF NTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0luSWxkeWxxc0ZlRDExV3hG cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0duNU1wS29jSW5JbGR5bHFzRmVEMTFXeEZyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAzQS84Q0JEOTc4NjFFNTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0lu SWxkeWxxc0ZlRDExV3hGcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI9jAWbiNp/H5QI15RmaeCij/CRtCkSbQ/CzI93jKxELaOQ4a2QvmB I5BNwt3hiQrA+F9zdpn71PVr3kuCdBfaWYo5N7pS4HqDhyQsb2SY6PvihUntQRk4 RCC+rF88CYgo4bWRS6rKeZwsPA+Vs98Od+vFBjyUpHyo2kmB9YEAZOR7mmoIKTd7 xoxulU6zX9GgrLQIGxGVZ1iA91WkvRIiqq4jOjGZCZwla2BD0ILQBtDdwjP2QuAN b9p7+9G+LHCIQPiFjbV3JcPmSPsgqojC5BlAwzNui0ceK9sGyONULBSO5KIMf03n yvCqkiDmGRCGfrtOoWFNd9syVi4tAfNn -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:01 2025 by rpki-client