$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: TpboV+xfETHVlLRs67493KWFBA/iY3JeyZthvG+wTO8= Subject key identifier: 4C:40:59:C9:63:12:7B:C8:48:C2:EE:AA:7B:CC:B5:F6:F5:75:75:03 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0B30 Signing time: Sat 19 Jul 2025 06:59:05 +0000 Manifest this update: Sat 19 Jul 2025 06:59:04 +0000 Manifest next update: Sat 26 Jul 2025 06:59:04 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: YCOeTh8hY9jdwBXrz77+X3jTVab+3URDEOwibQP9uWI=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 4RpDGoas6qlBW19Q5SIFrbnYOe5op4thcR7lPfP6BCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Jul 19 06:59:04 2025 GMT Not After : Jul 26 06:59:04 2025 GMT Subject: CN=687b4239-53c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:6c:1b:b5:5e:8f:20:6f:10:a0:a2:d0:38: ee:8a:03:6b:21:1c:65:e7:87:41:b2:86:33:dc:f8: 4a:2b:2f:64:b2:1e:2b:52:3d:3f:7a:9b:f0:6a:a1: a8:0b:0e:ac:cd:61:c6:04:0c:6e:05:b6:e9:a2:49: c2:8f:f8:f4:e8:fd:83:1d:09:06:52:62:d0:28:80: 31:7c:39:c1:72:7c:fc:5c:6a:84:08:4d:78:7f:ad: 07:d3:07:c3:33:71:45:82:9e:15:d7:01:87:c9:1b: 1e:37:90:81:dc:9e:e7:00:24:64:15:f1:ae:2e:c4: ee:97:63:59:1a:0d:a9:0d:a3:33:35:8e:7a:1c:26: c1:a0:8f:b0:6c:4a:04:47:bc:b0:f1:b7:3f:40:88: f5:ea:b0:c8:27:55:60:21:b1:16:77:da:e1:c1:bf: 09:a8:d4:39:d9:9d:ff:30:6b:01:fb:49:70:2b:c0: 73:fa:38:74:15:f7:f7:7a:d4:d9:b0:c5:83:53:c6: 6f:ee:87:ec:42:40:50:f1:08:c5:e4:1f:ce:61:95: 6b:12:40:cf:cd:23:c2:10:39:df:6c:45:2b:c6:2d: dd:8b:85:b8:42:45:d0:3c:30:7c:b3:4f:36:9e:f6: af:84:97:54:6f:33:32:90:8f:53:ed:29:78:5a:17: 23:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:40:59:C9:63:12:7B:C8:48:C2:EE:AA:7B:CC:B5:F6:F5:75:75:03 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:54:14:d6:5a:5e:fb:15:6b:b5:59:78:4f:72:43:b6:c9:ca: 88:c4:9d:fe:75:d0:9c:27:a8:42:0f:27:7f:4c:c7:2e:14:73: 50:25:39:93:b7:6b:60:fb:54:97:ab:cf:c2:fa:9e:31:1b:cf: 7f:ca:0c:43:14:08:ca:39:2d:aa:d3:02:3e:c2:9e:8b:16:31: 77:14:c9:df:30:63:d8:2f:da:53:15:61:22:cf:a1:8f:00:d5: f6:c0:ec:5d:d8:64:44:c9:59:7a:fd:43:1b:03:e2:48:81:3b: 46:92:b2:e8:e5:a5:b9:1d:e3:5d:9b:03:d5:42:5c:c7:83:8f: 08:77:47:27:a2:2e:85:e8:48:93:92:1c:84:4d:2a:f1:d3:08: bf:fa:9a:6c:45:93:ab:d2:3d:2e:bf:31:53:81:54:03:e6:b0: 2e:a1:52:9f:90:be:2e:3e:84:17:db:13:33:9f:11:0c:34:c9: b4:2e:67:0e:f4:c2:ca:ce:75:6a:bc:a2:3a:a1:f8:ef:b9:a4: 24:37:36:f8:38:db:87:9f:82:0d:c9:b5:0c:a9:6a:e5:f1:3b: 6f:80:76:09:7a:f6:31:b2:bb:94:b4:eb:a8:45:17:ec:98:78: ab:83:60:4f:8c:11:d5:61:53:52:e2:b6:79:65:85:6a:e9:0d: 8c:d7:1b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUwNzE5MDY1OTA0WhcNMjUwNzI2MDY1OTA0WjAYMRYwFAYD VQQDEw02ODdiNDIzOS01M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQNsG7VejyBvEKCi0DjuigNrIRxl54dBsoYz3PhKKy9ksh4rUj0/epvwaqGo Cw6szWHGBAxuBbbpoknCj/j06P2DHQkGUmLQKIAxfDnBcnz8XGqECE14f60H0wfD M3FFgp4V1wGHyRseN5CB3J7nACRkFfGuLsTul2NZGg2pDaMzNY56HCbBoI+wbEoE R7yw8bc/QIj16rDIJ1VgIbEWd9rhwb8JqNQ52Z3/MGsB+0lwK8Bz+jh0Fff3etTZ sMWDU8Zv7ofsQkBQ8QjF5B/OYZVrEkDPzSPCEDnfbEUrxi3di4W4QkXQPDB8s082 nvavhJdUbzMykI9T7Sl4WhcjvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExAWclj EnvISMLuqnvMtfb1dXUDMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCVBTWWl77FWu1WXhPckO2ycqIxJ3+ddCcJ6hCDyd/TMcuFHNQJTmT t2tg+1SXq8/C+p4xG89/ygxDFAjKOS2q0wI+wp6LFjF3FMnfMGPYL9pTFWEiz6GP ANX2wOxd2GREyVl6/UMbA+JIgTtGkrLo5aW5HeNdmwPVQlzHg48Id0cnoi6F6EiT khyETSrx0wi/+ppsRZOr0j0uvzFTgVQD5rAuoVKfkL4uPoQX2xMznxEMNMm0LmcO 9MLKznVqvKI6ofjvuaQkNzb4ONuHn4INybUMqWrl8TtvgHYJevYxsruUtOuoRRfs mHirg2BPjBHVYVNS4rZ5ZYVq6Q2M1xt1 -----END CERTIFICATE-----Generated at Sun Jul 20 06:19:40 2025 by rpki-client