$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json) Hash identifier: N4tgHdAN+93oP2Teem+vzYNZ2G+VOgVbyOWR19x3uLo= Subject key identifier: 34:F1:84:68:24:8E:FB:1A:9B:79:5A:8C:28:88:D9:FC:27:79:70:2F Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft Manifest number: 0297 Signing time: Sat 19 Jul 2025 02:05:23 +0000 Manifest this update: Sat 19 Jul 2025 02:05:22 +0000 Manifest next update: Sat 26 Jul 2025 02:05:22 +0000 Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: qRYsUzmZGnObNA6m/RmuJl0KHJwBYEryh7ZsXv1Dfko=) 2: 4E2825FA45FF11F0A3585B3BC4F9AE02.roa (hash: I14tAkanqoFouLVzcRpLSZ6N3GY3ekbVlv42ouCU2FE=) 3: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: TtO94NVCrFd/kOM0g0jsLA5taaehqwgncyfWlORB4kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Jul 19 02:05:22 2025 GMT Not After : Jul 26 02:05:22 2025 GMT Subject: CN=687afd62-ce7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:05:93:4b:a7:19:84:c7:fc:3c:5b:a8:a5: ca:94:fc:93:ec:c8:f4:b1:2d:58:80:1f:64:e5:96: ff:ff:d5:a9:ca:f3:80:6d:f4:2d:09:8f:b7:b6:f0: 5a:94:a5:78:2e:33:5b:0c:80:66:35:66:34:c7:0d: 4b:1e:6a:0f:b1:cb:8f:55:a4:6c:d5:45:49:a6:c0: 37:fd:06:51:65:3a:4e:cc:8c:60:30:29:6b:04:1d: 6d:d1:18:25:47:e6:f2:4b:49:5c:f7:7c:5b:a2:f5: c7:44:38:4c:a2:bc:b7:fb:e0:65:16:4d:13:d4:eb: 54:ad:79:0f:fe:69:52:22:8d:8e:71:b7:17:f0:a7: 8d:a7:13:e1:ee:d7:c4:ce:29:81:40:ea:a3:27:30: 7f:94:c8:07:82:9e:53:94:2b:6f:c2:88:3f:a1:f7: 7b:44:7a:53:14:bc:71:ac:be:e2:55:20:c6:6b:e5: a6:c5:11:0d:d9:f0:b7:6e:b7:59:69:fe:3d:f7:e0: 11:28:12:f1:84:da:70:33:f4:30:4f:38:32:46:75: 75:32:76:81:3d:f5:8c:b1:63:64:af:6d:79:0c:8c: 6e:dc:b0:df:3a:a6:61:97:93:ba:e5:6d:b6:8c:3d: bc:04:60:05:b1:bf:d2:e2:89:d9:d4:d9:09:2b:ad: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F1:84:68:24:8E:FB:1A:9B:79:5A:8C:28:88:D9:FC:27:79:70:2F X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:78:a1:7c:95:75:9e:cd:63:ec:f8:44:8d:b4:7c:50:fc:80: 39:92:97:e1:c5:fe:c3:5c:9e:46:64:18:a8:98:78:34:60:a3: 8d:93:b6:a2:36:13:51:b3:97:ff:bb:69:01:fd:c8:a9:37:ad: dc:41:d9:c5:17:23:69:37:41:66:5a:0a:e8:44:5d:f8:1b:a0: 37:93:98:ad:a2:b9:8d:e5:11:13:2c:45:f4:ed:f4:cc:ce:14: bb:ea:05:2e:3b:ef:71:21:25:dd:49:36:41:fb:d1:1b:78:db: e0:fa:91:ec:65:af:45:15:fa:d8:7a:57:21:11:37:2c:87:ab: 57:c9:7f:f9:b4:28:4f:b1:d5:b0:6d:9e:52:46:5c:8c:0b:3d: fa:fd:c0:16:88:25:c4:69:83:0b:71:87:bc:89:7d:06:6f:79: 12:dd:23:41:7e:7e:2a:62:a7:51:a8:84:56:d6:39:35:55:0e: 50:c1:a8:fb:f3:84:2d:80:01:c2:03:41:d4:b1:73:3a:97:81: 7b:1d:63:35:fb:a9:24:e5:69:7d:e7:e9:35:bf:81:4a:17:54: 55:e5:c3:45:f5:23:b4:d6:36:14:48:a4:c4:84:cc:2c:33:44: 54:59:6a:5f:70:91:0b:e2:95:35:51:fa:11:fc:25:e9:b6:85: 92:44:2f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUwNzE5MDIwNTIyWhcNMjUwNzI2MDIwNTIyWjAYMRYwFAYD VQQDEw02ODdhZmQ2Mi1jZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhAFk0unGYTH/DxbqKXKlPyT7Mj0sS1YgB9k5Zb//9WpyvOAbfQtCY+3tvBa lKV4LjNbDIBmNWY0xw1LHmoPscuPVaRs1UVJpsA3/QZRZTpOzIxgMClrBB1t0Rgl R+byS0lc93xbovXHRDhMory3++BlFk0T1OtUrXkP/mlSIo2OcbcX8KeNpxPh7tfE zimBQOqjJzB/lMgHgp5TlCtvwog/ofd7RHpTFLxxrL7iVSDGa+WmxREN2fC3brdZ af499+ARKBLxhNpwM/QwTzgyRnV1MnaBPfWMsWNkr215DIxu3LDfOqZhl5O65W22 jD28BGAFsb/S4onZ1NkJK61mbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTxhGgk jvsam3lajCiI2fwneXAvMB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0Y3RS9DNzYzQjVFMDEwRTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5F enFQTU03WTNQa2xIWXd2SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAeKF8lXWezWPs+ESNtHxQ/IA5kpfhxf7DXJ5GZBiomHg0YKONk7ai NhNRs5f/u2kB/cipN63cQdnFFyNpN0FmWgroRF34G6A3k5itormN5RETLEX07fTM zhS76gUuO+9xISXdSTZB+9EbeNvg+pHsZa9FFfrYelchETcsh6tXyX/5tChPsdWw bZ5SRlyMCz36/cAWiCXEaYMLcYe8iX0Gb3kS3SNBfn4qYqdRqIRW1jk1VQ5Qwaj7 84QtgAHCA0HUsXM6l4F7HWM1+6kk5Wl95+k1v4FKF1RV5cNF9SO01jYUSKTEhMws M0RUWWpfcJEL4pU1UfoR/CXptoWSRC9H -----END CERTIFICATE-----Generated at Sun Jul 20 16:25:56 2025 by rpki-client