$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json) Hash identifier: FvCWoMtKiZ/TPcFw+7Uu1vd5gKaJFCsbudLHC6bqzMI= Subject key identifier: D4:60:B4:67:17:0A:68:61:00:B3:D7:85:EA:6E:B9:CE:1A:73:0E:6E Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Certificate serial: 062B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft Manifest number: 0625 Signing time: Sun 20 Jul 2025 22:44:25 +0000 Manifest this update: Sun 20 Jul 2025 22:44:24 +0000 Manifest next update: Sun 27 Jul 2025 22:44:24 +0000 Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: /JnNPCYBHZ770ULeCAl7R4DRDDwvD4J0XALQSkqehVQ=) 2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Validity Not Before: Jul 20 22:44:24 2025 GMT Not After : Jul 27 22:44:24 2025 GMT Subject: CN=687d7148-295d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:7e:a2:4f:56:b0:58:a2:1b:bd:d2:17:57: bd:23:73:e2:ab:ed:63:e4:79:66:0e:78:e7:e5:dc: 3a:01:58:3e:e7:66:67:a9:20:b6:62:e4:41:3f:f0: 11:03:9c:ae:de:8a:70:56:42:cf:7e:38:52:70:ce: 27:b4:3e:f5:5f:57:a0:18:3f:66:8f:62:77:ca:a3: 89:03:31:58:7c:3f:26:7b:70:5e:6d:a4:e6:d8:f6: 7c:70:22:98:eb:cc:15:05:e2:ff:c0:65:ed:34:12: c3:03:9e:d3:5e:6b:82:25:90:f7:0f:aa:4d:a5:d6: 46:1f:58:2a:fa:58:35:34:f2:60:b9:24:80:49:69: 6c:66:89:10:31:25:22:26:f9:db:ce:d6:c0:d7:a4: f1:29:9b:24:01:9b:bb:2a:e6:0b:8d:4c:b6:e8:66: c1:0a:df:4d:65:c0:e5:6a:a1:40:53:14:77:f8:ba: 9c:fc:19:7a:23:ae:80:e3:46:fc:4c:52:b1:b2:cc: 08:ff:36:fc:6e:f7:95:49:45:4e:3f:bf:f7:24:04: 48:f2:09:92:d2:9c:68:34:18:e0:dc:d2:ac:bd:89: 50:67:40:61:ff:bc:b4:1c:72:de:63:4b:e1:14:60: d2:c6:53:2c:24:cb:38:0b:96:23:0d:eb:4c:3c:5d: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:60:B4:67:17:0A:68:61:00:B3:D7:85:EA:6E:B9:CE:1A:73:0E:6E X509v3 Authority Key Identifier: keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:15:86:fd:3c:88:26:3f:68:15:74:7a:eb:4e:87:df:48:b3: 91:ee:e6:0b:34:d5:d5:56:0b:9a:98:14:bf:14:68:e6:ca:5d: 57:3a:58:96:6f:c7:2a:94:47:49:de:7a:54:48:27:29:83:db: c2:f0:d7:cb:24:a3:8e:c6:c4:fd:0d:fb:62:44:2e:16:44:4e: 94:b0:69:34:93:5f:95:cc:8a:5d:70:8a:08:d9:d8:17:24:02: b1:86:ae:cf:10:5b:18:19:25:b5:31:03:83:45:06:a2:44:ab: f9:2a:d5:7e:69:0f:00:25:f8:fa:e3:d4:20:61:76:37:c6:14: 7d:14:15:03:fe:8f:7e:ad:74:a5:ce:a7:18:02:e6:16:5c:d4: 8b:7d:e4:0c:9c:a7:6a:f8:70:ec:23:e9:57:46:59:cd:f7:08: e5:bf:06:c4:89:91:3b:30:ea:a7:2b:58:4b:06:45:d5:7b:99: a9:5e:90:41:62:41:e3:0f:11:f0:fe:53:37:80:cc:dd:b7:06: b9:ab:8a:11:a1:b8:c8:5e:1f:28:7a:a4:7d:d0:45:1e:ef:2c: 09:69:af:dc:69:22:c7:ed:85:6d:2f:05:75:2e:b3:63:a4:c3: 57:a1:29:c2:f1:8d:8d:70:47:50:7f:fc:84:55:1f:61:94:b3: f7:88:62:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz OTJDRTQ3MUMwHhcNMjUwNzIwMjI0NDI0WhcNMjUwNzI3MjI0NDI0WjAYMRYwFAYD VQQDEw02ODdkNzE0OC0yOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tJ+ok9WsFiiG73SF1e9I3Piq+1j5HlmDnjn5dw6AVg+52ZnqSC2YuRBP/AR A5yu3opwVkLPfjhScM4ntD71X1egGD9mj2J3yqOJAzFYfD8me3BebaTm2PZ8cCKY 68wVBeL/wGXtNBLDA57TXmuCJZD3D6pNpdZGH1gq+lg1NPJguSSASWlsZokQMSUi JvnbztbA16TxKZskAZu7KuYLjUy26GbBCt9NZcDlaqFAUxR3+Lqc/Bl6I66A40b8 TFKxsswI/zb8bveVSUVOP7/3JARI8gmS0pxoNBjg3NKsvYlQZ0Bh/7y0HHLeY0vh FGDSxlMsJMs4C5YjDetMPF3g3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRgtGcX CmhhALPXhepuuc4acw5uMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2 NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9FYb9PIgmP2gVdHrrToffSLOR7uYLNNXVVguamBS/FGjmyl1XOliW b8cqlEdJ3npUSCcpg9vC8NfLJKOOxsT9DftiRC4WRE6UsGk0k1+VzIpdcIoI2dgX JAKxhq7PEFsYGSW1MQODRQaiRKv5KtV+aQ8AJfj649QgYXY3xhR9FBUD/o9+rXSl zqcYAuYWXNSLfeQMnKdq+HDsI+lXRlnN9wjlvwbEiZE7MOqnK1hLBkXVe5mpXpBB YkHjDxHw/lM3gMzdtwa5q4oRobjIXh8oeqR90EUe7ywJaa/caSLH7YVtLwV1LrNj pMNXoSnC8Y2NcEdQf/yEVR9hlLP3iGLm -----END CERTIFICATE-----Generated at Tue Jul 22 20:30:54 2025 by rpki-client