$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: 6S45/G4kL9eatCptFShpUYzQec5K7JkjuESIf0DCB3E= Subject key identifier: C0:76:F3:51:41:B4:B0:EC:7D:FD:0E:B5:6E:F7:86:7A:B6:19:82:77 Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: 64 Signing time: Mon 21 Jul 2025 07:11:56 +0000 Manifest this update: Mon 21 Jul 2025 07:11:56 +0000 Manifest next update: Mon 28 Jul 2025 07:11:56 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: eLyrjpJR/Z+xvRLBo9/Ue94p0IQj5uht/EliW69EI+8=) 2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: /3vnvplidMRV9xBfvWUaE3o6ToOuVyiBtlbFl/8L1Xg=) 3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: /17gKTBKMMs07+KSKB5vkpnNAFNY/B0f0Up4BfWbLBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: Jul 21 07:11:56 2025 GMT Not After : Jul 28 07:11:56 2025 GMT Subject: CN=687de83c-3d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:82:ba:37:a8:14:5c:b7:22:86:15:d6:85: 11:cc:51:b1:a2:ab:a4:fd:cf:9a:bb:29:72:dd:9d: 03:39:7a:f5:9e:5c:b2:89:96:fb:fb:38:7f:a9:76: c0:54:d1:b8:18:99:4c:fb:02:58:42:24:80:aa:a2: 05:bd:17:3a:ab:e2:5e:d0:ec:98:52:7e:9c:fb:97: d0:16:be:17:2e:57:45:f7:b8:f0:19:ff:e9:ac:2e: 66:8a:96:75:ea:00:5e:4e:8a:01:8a:0f:db:c3:17: b5:ad:65:d1:f8:4e:95:27:44:0f:05:81:69:32:d3: 51:9d:1a:98:c8:90:4b:21:0b:38:12:0f:dd:ec:a6: 40:f6:54:4c:84:66:db:5b:7f:80:fd:bb:b0:30:94: d5:40:80:a0:bd:87:8f:c6:ee:91:e0:0d:75:3a:98: 34:2f:ac:d3:ca:98:57:76:d7:6a:d6:f8:f6:57:f7: 21:e8:f3:51:e8:6f:90:b5:fc:f1:fa:44:5f:68:29: 7c:76:35:77:43:56:57:b5:cf:ac:15:d3:a3:9b:9b: 6f:5e:d7:86:37:53:59:2a:f2:ce:7b:54:36:5a:d3: 45:fd:12:d6:0e:96:93:65:75:23:b6:ab:df:5a:47: ce:d6:f6:62:bf:53:38:d9:2d:91:2f:23:5b:cc:00: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:F3:51:41:B4:B0:EC:7D:FD:0E:B5:6E:F7:86:7A:B6:19:82:77 X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:16:31:55:84:26:c3:6c:e9:95:76:ef:4b:a2:4b:03:50:5c: e0:97:b9:62:f2:a4:ee:be:a3:0b:34:df:ed:d2:4b:6f:83:cf: 91:b0:0d:bd:33:5f:e1:d1:40:d5:35:d6:a0:fc:a9:9b:8b:84: 74:5e:b6:f9:03:07:cb:d6:e2:8f:9a:6d:1f:16:f9:51:d4:22: 78:34:33:3b:3a:c1:64:f6:18:39:04:16:c7:66:a6:73:64:d6: 2f:83:ce:d4:04:0b:71:23:7c:f0:01:31:36:64:24:e4:ed:20: 68:29:3f:5a:28:c5:c8:53:38:59:fa:10:7b:73:e5:80:b0:fc: 0e:67:12:cb:13:88:37:e1:25:34:bb:81:37:99:69:de:28:59: e7:30:08:3f:6d:fc:ad:d1:f2:af:11:6b:34:ff:74:e8:1a:15: 8e:d5:bb:42:5f:f5:11:a4:da:49:3c:45:22:cd:34:50:90:63: 0d:60:7d:f1:3e:91:92:b6:46:5b:26:71:0a:49:c6:05:4c:af: 79:a8:d3:a7:e0:3d:6c:b4:59:68:24:ab:0e:1a:4e:6a:ad:6f: 9c:89:78:f4:59:cb:37:72:78:65:d6:52:f4:f4:ec:31:77:32: a4:76:f9:1b:8c:4e:0d:b5:94:7d:b1:5b:25:ce:b5:06:3e:9f: 03:27:9a:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDIyMjExMC8GA1UEBRMoODIwNUU5Nzk2RUM2OUEwQzczREMzQjVCM0NFMTJDNDgx OTJCNDU3NzAeFw0yNTA3MjEwNzExNTZaFw0yNTA3MjgwNzExNTZaMBgxFjAUBgNV BAMTDTY4N2RlODNjLTNkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ5oK6N6gUXLcihhXWhRHMUbGiq6T9z5q7KXLdnQM5evWeXLKJlvv7OH+pdsBU 0bgYmUz7AlhCJICqogW9Fzqr4l7Q7JhSfpz7l9AWvhcuV0X3uPAZ/+msLmaKlnXq AF5OigGKD9vDF7WtZdH4TpUnRA8FgWky01GdGpjIkEshCzgSD93spkD2VEyEZttb f4D9u7AwlNVAgKC9h4/G7pHgDXU6mDQvrNPKmFd212rW+PZX9yHo81Hob5C1/PH6 RF9oKXx2NXdDVle1z6wV06Obm29e14Y3U1kq8s57VDZa00X9EtYOlpNldSO2q99a R87W9mK/UzjZLZEvI1vMAEgdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwHbzUUG0 sOx9/Q61bveGerYZgncwHwYDVR0jBBgwFoAUggXpeW7Gmgxz3DtbPOEsSBkrRXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMjIyLzg3NjQ0ODlDQ0Q3 RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2dYcGVXN0dtZ3h6M0R0YlBPRXNTQmtyUlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MjIyLzg3NjQ0ODlDQ0Q3RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4 ejNEdGJQT0VzU0JrclJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgWMVWEJsNs6ZV270uiSwNQXOCXuWLypO6+ows03+3SS2+Dz5GwDb0z X+HRQNU11qD8qZuLhHRetvkDB8vW4o+abR8W+VHUIng0Mzs6wWT2GDkEFsdmpnNk 1i+DztQEC3EjfPABMTZkJOTtIGgpP1ooxchTOFn6EHtz5YCw/A5nEssTiDfhJTS7 gTeZad4oWecwCD9t/K3R8q8RazT/dOgaFY7Vu0Jf9RGk2kk8RSLNNFCQYw1gffE+ kZK2RlsmcQpJxgVMr3mo06fgPWy0WWgkqw4aTmqtb5yJePRZyzdyeGXWUvT07DF3 MqR2+RuMTg21lH2xWyXOtQY+nwMnmlQ= -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:50 2025 by rpki-client