$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json) Hash identifier: Ea7dZoFsJAjQyQmogRO/6uAySZiXRubc7Tv/sP9g6Bw= Subject key identifier: 3A:88:8E:33:1B:8B:E1:DD:C2:89:F5:18:EF:92:CC:04:97:5B:4C:79 Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Certificate serial: 1D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft Manifest number: 1D12 Signing time: Sun 20 Jul 2025 16:11:27 +0000 Manifest this update: Sun 20 Jul 2025 16:11:27 +0000 Manifest next update: Sun 27 Jul 2025 16:11:27 +0000 Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: Ldl3bVrkJ07DXAGrjXC7QmrmwfqJr72lN9PhpUEE+/A=) 2: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: n6ab3BTwAcpH4LegBC83qaXuTY61rSuzXQeixKGRCQ8=) 3: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: ZoYRtsKN6J+JTMHnmtPtNWovLxxrXzjOLNI6FTTDrJk=) 4: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: Yy12wxP/cM0LLNtHiB2aLkhSaVEMx94WCa7jMCYf9WM=) 5: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: wZqrfI6axJ6OhiwV+iuxvLbJgC05OEzm0nCXJ1L7s34=) 6: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: IlNlaUUrIO5psWG9zVe/2cJLa9A72orRKr8ki0wRJ+c=) 7: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: i8SkLvPy/XtXc4ZuxfbQ0jMccOT4jPJgyB/aqJ2e6A0=) 8: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: RxEjxFNvI0DOGeP3888S1tn030BuNHUdNfLt3di15l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7505 (0x1d51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Validity Not Before: Jul 20 16:11:27 2025 GMT Not After : Jul 27 16:11:27 2025 GMT Subject: CN=687d152f-746f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:1a:2d:9f:10:c6:48:ac:e4:3c:0f:e1:6f: 44:68:0b:47:8e:44:f1:ed:b5:9c:57:04:a6:99:2f: da:72:3c:ad:52:f9:88:2a:af:19:6d:ff:0c:8d:5d: 43:bc:92:b5:b6:59:08:ff:57:4d:74:f3:4c:c2:19: 3b:80:e5:a4:a7:61:e8:d9:0a:53:04:44:aa:dd:28: 72:0f:cd:d3:3e:6f:6f:bc:87:60:44:74:10:d1:96: 5e:2d:77:57:59:78:fd:87:48:ad:6f:52:35:8f:8e: 05:91:ba:a0:a2:a6:9c:75:f8:ae:29:8d:57:21:c0: 5c:26:52:0b:00:ae:b5:3e:91:12:85:f6:8d:97:67: 8c:2c:4f:09:e1:fa:9a:34:01:c3:f7:39:41:52:ea: f1:6c:bc:cb:03:01:92:1f:f0:6d:37:ce:b9:17:61: 41:2e:2a:79:d7:10:8c:b2:b0:ae:a4:f6:8d:04:0c: 6f:45:c1:5d:5c:d0:bf:f3:b2:e1:56:11:ca:19:ab: 18:ba:3b:aa:bb:f8:4b:b2:2b:98:29:83:26:61:6a: 36:0d:a8:d6:99:05:a8:f2:44:bc:67:cf:a0:2c:f0: 91:a8:90:6b:db:55:6a:e7:a7:28:a4:36:ee:05:4d: 82:86:7b:88:2e:13:04:94:66:ae:e9:17:c8:b8:0d: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:88:8E:33:1B:8B:E1:DD:C2:89:F5:18:EF:92:CC:04:97:5B:4C:79 X509v3 Authority Key Identifier: keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:45:0c:77:0c:8b:33:06:16:f6:ee:5c:66:f5:f9:23:a0:25: ab:bc:80:05:aa:60:8e:c3:f0:c3:c4:b8:60:63:0e:73:b2:73: eb:7c:80:ea:7b:e8:3b:12:1e:91:5f:75:f5:e1:3d:fa:5d:d9: d7:25:37:18:51:e1:37:a5:40:5e:e1:10:1c:f0:bf:4f:67:a4: 17:1b:79:ab:9d:f2:6f:66:fc:e1:c1:10:3a:53:ba:79:32:af: a9:e1:e3:c3:a0:e7:ea:2f:39:72:e7:7b:f6:fc:c6:59:f6:ea: bb:f9:0e:98:eb:fe:81:3b:c7:c5:15:b2:3a:06:44:40:ab:98: 40:b4:9e:33:6d:9c:9e:c1:9f:ce:60:fd:4c:a9:b6:4d:b3:79: 6d:af:0b:dd:76:a9:81:02:c6:4d:6c:44:f2:fd:ab:a6:7f:15: 23:d7:c0:96:ec:e9:de:f2:7c:86:46:fb:50:f9:40:e5:41:60: 7a:df:77:82:7e:71:c2:90:f2:ed:f1:a5:ed:01:6c:11:aa:7f: 2b:91:36:9a:05:32:b2:ad:71:4e:e1:3d:7e:2d:b7:38:f4:81: 35:04:62:8d:2d:1a:8d:41:3c:83:ae:29:e1:b6:da:a2:fe:de: 66:29:e6:89:6f:66:6e:83:a2:15:56:87:58:d3:f9:5e:26:d9: dd:a0:16:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky Q0Q4ODQ3NDgwHhcNMjUwNzIwMTYxMTI3WhcNMjUwNzI3MTYxMTI3WjAYMRYwFAYD VQQDEw02ODdkMTUyZi03NDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzisaLZ8Qxkis5DwP4W9EaAtHjkTx7bWcVwSmmS/acjytUvmIKq8Zbf8MjV1D vJK1tlkI/1dNdPNMwhk7gOWkp2Ho2QpTBESq3ShyD83TPm9vvIdgRHQQ0ZZeLXdX WXj9h0itb1I1j44FkbqgoqacdfiuKY1XIcBcJlILAK61PpEShfaNl2eMLE8J4fqa NAHD9zlBUurxbLzLAwGSH/BtN865F2FBLip51xCMsrCupPaNBAxvRcFdXNC/87Lh VhHKGasYujuqu/hLsiuYKYMmYWo2DajWmQWo8kS8Z8+gLPCRqJBr21Vq56copDbu BU2ChnuILhMElGau6RfIuA2W/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqIjjMb i+Hdwon1GO+SzASXW0x5MB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REJGMi9FMzQ0NTAxNkMyRjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29q UlNVQ1B2MDJKLWtzMklSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArRQx3DIszBhb27lxm9fkjoCWrvIAFqmCOw/DDxLhgYw5zsnPrfIDq e+g7Eh6RX3X14T36XdnXJTcYUeE3pUBe4RAc8L9PZ6QXG3mrnfJvZvzhwRA6U7p5 Mq+p4ePDoOfqLzly53v2/MZZ9uq7+Q6Y6/6BO8fFFbI6BkRAq5hAtJ4zbZyewZ/O YP1MqbZNs3ltrwvddqmBAsZNbETy/aumfxUj18CW7One8nyGRvtQ+UDlQWB633eC fnHCkPLt8aXtAWwRqn8rkTaaBTKyrXFO4T1+Lbc49IE1BGKNLRqNQTyDrinhttqi /t5mKeaJb2Zug6IVVodY0/leJtndoBaF -----END CERTIFICATE-----Generated at Sun Jul 20 18:17:51 2025 by rpki-client