$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft File: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json) Hash identifier: OkzIqlYOZlq96SVblJCddST6nmq+ENpa9f/uJ9/Yw0Q= Subject key identifier: 16:C9:D6:A8:64:20:36:EB:08:6C:72:F8:99:00:D8:33:C5:E8:BF:79 Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 Certificate issuer: /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft Manifest number: 02A1 Signing time: Sat 19 Jul 2025 01:59:20 +0000 Manifest this update: Sat 19 Jul 2025 01:59:20 +0000 Manifest next update: Sat 26 Jul 2025 01:59:20 +0000 Files and hashes: 1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: FfhAkeXAvzQGlwt7abBeis9N+ZnBFnOYYIKqUbhRZ6E=) 2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: pHEalHPaBn8YLpxptX62/OxGR+yXDeFh5rO3/NYIRLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Validity Not Before: Jul 19 01:59:20 2025 GMT Not After : Jul 26 01:59:20 2025 GMT Subject: CN=687afbf8-2828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:87:0d:48:d5:fd:6c:a4:63:21:2a:04:98:c2: 50:31:67:10:96:62:fe:68:69:9c:90:0c:8e:4c:db: 67:98:9e:b8:64:32:f0:b2:db:eb:02:19:a0:9e:df: a8:bf:ba:13:3a:29:8e:25:23:8e:c0:2c:02:9f:c2: 00:5d:0c:2e:3c:2a:3c:8f:8d:c3:c5:c2:84:28:cf: 90:d5:ca:e0:72:dc:84:b6:fe:27:d5:84:57:e1:29: e2:a3:a7:94:c9:05:c4:c6:7d:f3:c4:ac:fd:7d:54: a6:ee:f1:db:ac:1f:f8:14:6a:a6:97:0d:45:b4:17: ba:ba:6e:dd:e1:1e:03:7d:cd:50:2f:0b:45:a7:fe: ec:75:d4:1e:ca:3a:11:40:1a:25:77:36:1f:18:c1: 42:cc:e5:f3:5c:7d:42:d0:26:4e:25:fa:a4:82:2b: 55:47:e6:c4:02:39:df:d5:b3:d6:fb:39:b9:3d:b4: 1d:02:5a:7b:09:b5:a9:49:38:8e:51:98:75:c4:26: 11:1c:92:f2:3c:48:26:bb:8c:37:10:9b:9e:d9:04: c6:c4:fb:6a:43:27:89:37:e2:69:da:b9:fd:50:e4: 3e:e6:98:3c:2a:b1:73:8b:67:bf:d1:84:f9:e7:c2: e2:60:41:8a:63:ca:8a:f2:6f:c0:55:3a:22:55:c2: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C9:D6:A8:64:20:36:EB:08:6C:72:F8:99:00:D8:33:C5:E8:BF:79 X509v3 Authority Key Identifier: keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:68:e9:30:89:48:10:0b:f6:43:70:45:d4:5d:0d:a0:dd:8b: 95:59:72:55:b2:6f:d2:48:67:c8:b4:0a:23:fa:a1:9d:f8:9e: 5f:a2:c0:94:c6:ef:aa:fc:e6:77:66:d6:b9:77:c0:aa:67:9d: a7:ff:a0:07:ee:78:e0:b3:bb:8b:91:cf:b5:9a:cd:7e:4f:54: 73:f9:47:c9:8a:8b:e3:eb:91:56:48:58:82:42:7f:86:52:fb: 3d:e6:fc:54:9a:e0:b9:1d:8c:0c:d0:be:59:5f:47:58:55:b3: 34:26:80:7e:c5:e6:70:54:6f:70:49:89:3d:96:1c:8c:64:3b: cf:a7:55:69:da:a1:b7:9f:85:69:1d:1d:23:4d:67:14:2a:12: 1a:68:96:d1:44:c6:e1:b0:d9:af:e7:4c:45:99:00:0a:1b:7d: 10:f6:ea:ec:e0:9d:b4:4c:d5:f1:ee:5d:e0:4e:ef:7e:59:15: 06:99:ba:54:02:0c:10:c9:bd:f0:34:8d:a1:cb:23:e5:e5:42: 6f:fb:fa:4d:d3:60:96:8e:c2:c9:9d:66:05:cc:df:6a:61:04: e8:5e:6c:e8:c5:3e:3c:3a:97:26:c4:43:49:32:26:ef:18:66: 33:0c:cb:7c:ea:e3:08:19:46:2d:2e:cf:68:06:0a:05:44:02: 0d:d5:8c:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCNjAxMTAvBgNVBAUTKDEzRTE4OTlDMjNGRUIwN0ZFMTMxNjJFQjEwM0NDM0Mw MzhENzA4MjQwHhcNMjUwNzE5MDE1OTIwWhcNMjUwNzI2MDE1OTIwWjAYMRYwFAYD VQQDEw02ODdhZmJmOC0yODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ocNSNX9bKRjISoEmMJQMWcQlmL+aGmckAyOTNtnmJ64ZDLwstvrAhmgnt+o v7oTOimOJSOOwCwCn8IAXQwuPCo8j43DxcKEKM+Q1crgctyEtv4n1YRX4Snio6eU yQXExn3zxKz9fVSm7vHbrB/4FGqmlw1FtBe6um7d4R4Dfc1QLwtFp/7sddQeyjoR QBoldzYfGMFCzOXzXH1C0CZOJfqkgitVR+bEAjnf1bPW+zm5PbQdAlp7CbWpSTiO UZh1xCYRHJLyPEgmu4w3EJue2QTGxPtqQyeJN+Jp2rn9UOQ+5pg8KrFzi2e/0YT5 58LiYEGKY8qK8m/AVToiVcJO1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbJ1qhk IDbrCGxy+JkA2DPF6L95MB8GA1UdIwQYMBaAFBPhiZwj/rB/4TFi6xA8w8A41wgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI2MC9CMzJGM0U3MjA4 RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNIX2hNV0xyRUR6RHdEalhD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UtR0puQ1Atc0hfaE1XTHJFRHpEd0RqWENDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI2MC9CMzJGM0U3MjA4RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNI X2hNV0xyRUR6RHdEalhDQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1aOkwiUgQC/ZDcEXUXQ2g3YuVWXJVsm/SSGfItAoj+qGd+J5fosCU xu+q/OZ3Zta5d8CqZ52n/6AH7njgs7uLkc+1ms1+T1Rz+UfJiovj65FWSFiCQn+G Uvs95vxUmuC5HYwM0L5ZX0dYVbM0JoB+xeZwVG9wSYk9lhyMZDvPp1Vp2qG3n4Vp HR0jTWcUKhIaaJbRRMbhsNmv50xFmQAKG30Q9urs4J20TNXx7l3gTu9+WRUGmbpU AgwQyb3wNI2hyyPl5UJv+/pN02CWjsLJnWYFzN9qYQToXmzoxT48OpcmxENJMibv GGYzDMt86uMIGUYtLs9oBgoFRAIN1YwA -----END CERTIFICATE-----Generated at Sun Jul 20 07:25:14 2025 by rpki-client