$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft File: gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json) Hash identifier: SIhpQl1o5JqpmEb4+DbZTCpLfhDqmNaQ/l/dpn3E5Nk= Subject key identifier: D1:A8:6B:F9:97:C2:1D:1C:B6:19:3A:16:62:1B:C9:0A:D6:59:1C:C2 Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft Manifest number: 0B44 Signing time: Fri 18 Jul 2025 19:22:21 +0000 Manifest this update: Fri 18 Jul 2025 19:22:21 +0000 Manifest next update: Fri 25 Jul 2025 19:22:21 +0000 Files and hashes: 1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: RiStUbSlbQcc7CPvK5NFbTOAjuABqtU7sqAHvUS7QeQ=) 2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: 1DhhlreUt8zg3cfxMSneWtvTg2HGZV+ffd2QwHY8Xbg=) 3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: YABE0cos6VtRV6egJC6YTrl7tEuiiHleDpqVdQV913A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: Jul 18 19:22:21 2025 GMT Not After : Jul 25 19:22:21 2025 GMT Subject: CN=687a9eed-dd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:b3:97:fc:b4:e2:4a:09:1d:b0:ae:8c:58: 77:88:c3:a8:fc:90:86:65:4e:9d:48:d5:29:84:c6: 48:98:35:86:33:95:57:e4:06:d4:37:ba:7e:38:ef: 19:f4:21:e2:91:a7:3f:3f:e3:26:87:48:5b:d3:0d: 4d:9c:bd:22:8c:75:e3:71:e3:3a:d4:60:13:3b:17: fd:8c:3b:84:72:fd:d8:93:8f:5d:5f:d9:ec:ec:ab: f7:b0:24:83:36:55:29:d4:03:b1:61:33:94:c3:4a: 8f:86:e3:8b:a3:dc:ec:bc:e0:b3:72:40:1f:9c:8b: 0a:38:fa:e7:3d:53:c8:43:48:9e:80:5d:73:d4:4c: ba:9f:06:d9:12:50:0d:1c:a9:1f:e3:6c:a9:4d:ef: cf:d8:6f:e7:22:25:f0:90:2b:1f:f4:20:77:97:df: e2:8d:38:73:eb:ae:01:6d:59:61:ad:4e:ba:78:b3: 53:39:2e:00:23:ac:28:17:72:43:85:a1:3c:82:64: c6:83:f8:f1:b6:96:e8:29:0b:e1:e9:54:1d:34:55: a1:d8:2d:90:ef:9a:5f:47:3c:61:5f:64:fe:ec:14: 67:c2:4c:9d:49:23:64:40:58:07:01:35:5f:18:33: 7c:1a:d4:d6:8e:48:1c:39:ca:f9:33:55:d7:c5:63: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A8:6B:F9:97:C2:1D:1C:B6:19:3A:16:62:1B:C9:0A:D6:59:1C:C2 X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:9f:7b:83:69:5b:1a:88:5f:51:43:eb:3f:e2:56:43:23:de: bd:63:e6:c3:8b:23:72:3a:27:64:ae:20:03:af:89:ab:aa:02: 27:01:a2:9f:b2:9d:aa:51:4e:0b:c2:93:49:0f:f9:47:2e:06: 3a:29:5c:30:28:1f:5a:5a:d8:15:b5:07:93:6c:60:e2:22:eb: df:7d:a1:48:4a:cd:d4:b9:8f:66:1f:5b:26:a7:82:98:34:e4: f6:87:26:aa:33:a8:39:fd:5a:b6:50:b7:16:05:32:fa:30:eb: 1f:d6:18:3c:fb:35:ea:f9:11:7d:e5:3a:fd:25:5e:e2:07:66: 9d:07:b4:66:cd:33:e9:17:fe:a9:06:63:63:04:2d:88:f7:09: fc:74:5b:1e:d6:e9:f7:9a:65:1a:0b:ee:ff:ed:07:21:4e:b5: 95:90:cd:ab:11:02:dc:6b:13:24:c2:b5:6d:f8:f4:ea:de:48: db:7f:da:20:e0:db:d6:6a:7b:a5:03:1b:9a:6b:15:8f:2f:94: a6:29:7b:77:bc:d6:7d:ba:fe:a4:cf:d6:3c:fb:ad:cc:68:ef: e8:3e:45:f8:e7:59:c0:e9:be:09:20:10:9e:d5:a7:8d:86:f6: 0d:32:c7:fc:38:bc:d7:08:9a:65:83:ae:a9:ed:74:e1:6e:f6: d1:2c:e0:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjUwNzE4MTkyMjIxWhcNMjUwNzI1MTkyMjIxWjAYMRYwFAYD VQQDEw02ODdhOWVlZC1kZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNezl/y04koJHbCujFh3iMOo/JCGZU6dSNUphMZImDWGM5VX5AbUN7p+OO8Z 9CHikac/P+Mmh0hb0w1NnL0ijHXjceM61GATOxf9jDuEcv3Yk49dX9ns7Kv3sCSD NlUp1AOxYTOUw0qPhuOLo9zsvOCzckAfnIsKOPrnPVPIQ0iegF1z1Ey6nwbZElAN HKkf42ypTe/P2G/nIiXwkCsf9CB3l9/ijThz664BbVlhrU66eLNTOS4AI6woF3JD haE8gmTGg/jxtpboKQvh6VQdNFWh2C2Q75pfRzxhX2T+7BRnwkydSSNkQFgHATVf GDN8GtTWjkgcOcr5M1XXxWMVqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGoa/mX wh0cthk6FmIbyQrWWRzCMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0 MnVlLXZSeWFkTHNmSmwxQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSn3uDaVsaiF9RQ+s/4lZDI969Y+bDiyNyOidkriADr4mrqgInAaKf sp2qUU4LwpNJD/lHLgY6KVwwKB9aWtgVtQeTbGDiIuvffaFISs3UuY9mH1smp4KY NOT2hyaqM6g5/Vq2ULcWBTL6MOsf1hg8+zXq+RF95Tr9JV7iB2adB7RmzTPpF/6p BmNjBC2I9wn8dFse1un3mmUaC+7/7QchTrWVkM2rEQLcaxMkwrVt+PTq3kjbf9og 4NvWanulAxuaaxWPL5SmKXt3vNZ9uv6kz9Y8+63MaO/oPkX451nA6b4JIBCe1aeN hvYNMsf8OLzXCJplg66p7XThbvbRLODx -----END CERTIFICATE-----Generated at Sun Jul 20 04:26:20 2025 by rpki-client