$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: G7Jo/e5svsSq7kaTBhS514YbxTeFT8/tzx4urS3uPw0= Subject key identifier: FF:B9:35:53:6D:BF:0F:DB:DE:3D:04:F2:5D:91:3C:80:43:9E:5F:20 Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 0621 Signing time: Sun 20 Jul 2025 23:01:46 +0000 Manifest this update: Sun 20 Jul 2025 23:01:46 +0000 Manifest next update: Sun 27 Jul 2025 23:01:46 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: BjM4G20h7+Yku+q8Yjh9KvQNOmu144xFbyX0sccAloc=) 2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=) 3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=) 4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: Jul 20 23:01:46 2025 GMT Not After : Jul 27 23:01:46 2025 GMT Subject: CN=687d755a-75f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:0f:d0:32:89:88:3a:c2:a0:aa:95:26:d9: 6b:01:ad:68:cb:c2:bf:fc:c3:8e:50:bd:7d:b6:9c: c4:60:da:5c:dd:a5:1f:05:5b:eb:09:e5:48:50:c7: ed:6a:45:1d:bb:61:ef:7c:bf:54:fd:8a:9d:1c:d8: 20:99:38:2e:5e:20:4f:d7:dd:e7:a8:7d:10:53:fc: 25:72:41:95:3c:a9:b9:51:75:eb:f9:4f:3d:23:46: 49:1e:d2:b5:35:bd:fc:43:44:94:d4:3a:dd:44:2f: f3:d4:49:7b:10:87:2d:57:1c:3b:80:9a:19:5b:2b: 24:b4:94:90:1b:95:73:ec:fc:be:03:83:b9:45:fb: f9:d6:b4:5a:c0:5e:61:01:4e:5d:d2:d8:b4:0c:92: aa:ff:c7:1b:ea:a8:4b:db:9d:6d:7f:74:05:fd:cf: 17:e3:87:41:76:b2:da:a9:46:bb:95:3c:52:a0:ea: da:d6:cf:eb:9c:97:1b:e6:43:41:f6:2e:57:3d:a3: 84:73:39:da:08:35:f4:d9:85:15:7f:fe:d1:09:f7: 4f:0e:a9:81:97:85:41:2c:80:ba:da:da:9a:5b:8a: 78:d6:76:8c:93:08:a8:b3:c3:20:a0:7a:6e:16:47: 9c:7b:17:54:31:2e:90:da:51:e2:bf:63:52:c6:46: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B9:35:53:6D:BF:0F:DB:DE:3D:04:F2:5D:91:3C:80:43:9E:5F:20 X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1a:ed:35:ca:94:26:77:0c:61:93:23:7a:1c:99:75:dd:6b: 0a:b9:01:a8:99:f1:e4:55:82:d4:7a:35:de:1b:9b:65:b3:25: 2f:f8:d1:89:ff:f3:68:cc:fb:d2:fc:b5:fe:f1:89:08:28:0e: 93:23:9d:b2:87:1e:4e:d6:a5:5f:bf:c0:f8:aa:20:08:82:a8: fa:a3:25:4d:fa:01:db:6a:05:48:02:33:17:97:26:78:73:a5: fc:b0:a9:fd:2d:ec:52:e9:d2:e9:4b:2f:e2:ea:da:c5:a2:37: 63:fa:ae:00:f2:89:b4:e6:18:20:3d:73:2e:61:7c:45:98:9f: 6f:35:17:2b:58:44:0f:e7:20:84:0e:4d:37:cd:5a:1b:63:6e: 2c:4e:28:f4:6a:7d:fe:79:5a:27:88:5a:da:87:a6:b1:e9:0e: 29:6b:b8:8a:93:de:78:09:ce:04:22:66:32:94:f3:71:b7:1c: a5:b8:dd:da:1e:95:0b:9f:48:6c:d6:fb:9a:11:66:a8:28:f0: 82:42:b5:8b:96:32:38:03:08:f2:4f:e5:6c:05:b7:41:84:d6: 51:40:6a:6c:47:20:68:47:ff:17:a5:63:63:71:8c:76:8a:4d: f9:6a:e5:50:27:b2:ce:6d:b5:40:eb:77:23:70:6e:44:3a:42: 1a:46:ae:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjUwNzIwMjMwMTQ2WhcNMjUwNzI3MjMwMTQ2WjAYMRYwFAYD VQQDEw02ODdkNzU1YS03NWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuQP0DKJiDrCoKqVJtlrAa1oy8K//MOOUL19tpzEYNpc3aUfBVvrCeVIUMft akUdu2HvfL9U/YqdHNggmTguXiBP193nqH0QU/wlckGVPKm5UXXr+U89I0ZJHtK1 Nb38Q0SU1DrdRC/z1El7EIctVxw7gJoZWysktJSQG5Vz7Py+A4O5Rfv51rRawF5h AU5d0ti0DJKq/8cb6qhL251tf3QF/c8X44dBdrLaqUa7lTxSoOra1s/rnJcb5kNB 9i5XPaOEcznaCDX02YUVf/7RCfdPDqmBl4VBLIC62tqaW4p41naMkwios8MgoHpu FkecexdUMS6Q2lHiv2NSxkafvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+5NVNt vw/b3j0E8l2RPIBDnl8gMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrGu01ypQmdwxhkyN6HJl13WsKuQGomfHkVYLUejXeG5tlsyUv+NGJ //NozPvS/LX+8YkIKA6TI52yhx5O1qVfv8D4qiAIgqj6oyVN+gHbagVIAjMXlyZ4 c6X8sKn9LexS6dLpSy/i6trFojdj+q4A8om05hggPXMuYXxFmJ9vNRcrWEQP5yCE Dk03zVobY24sTij0an3+eVoniFrah6ax6Q4pa7iKk954Cc4EImYylPNxtxyluN3a HpULn0hs1vuaEWaoKPCCQrWLljI4AwjyT+VsBbdBhNZRQGpsRyBoR/8XpWNjcYx2 ik35auVQJ7LObbVA63cjcG5EOkIaRq4Y -----END CERTIFICATE-----Generated at Mon Jul 21 12:51:19 2025 by rpki-client