$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json) Hash identifier: IArhytDRXW6FpXiHmGXSGk6gu2YBMj1zn6TdEYnOpH4= Subject key identifier: 70:79:7C:9C:DE:0E:F3:C1:83:5D:C5:C4:1A:13:C7:16:16:50:79:47 Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft Manifest number: 07 Signing time: Mon 21 Jul 2025 08:21:10 +0000 Manifest this update: Mon 21 Jul 2025 08:21:09 +0000 Manifest next update: Mon 28 Jul 2025 08:21:09 +0000 Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: QZ7oGod8Hff9gdLdGFivTYAMSO8Vvu828HvnWp/abyE=) 2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: x4FID5zbs9gmZN9FkmWfh+nLmyFuv96NIL9YO3x5RdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Validity Not Before: Jul 21 08:21:09 2025 GMT Not After : Jul 28 08:21:09 2025 GMT Subject: CN=687df875-2ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:47:fe:b4:1a:ee:af:3b:c3:12:c4:80:6b: 64:7a:ea:5b:dc:db:fa:3d:b0:7f:19:4c:82:9f:a1: c6:9d:78:f9:22:d9:09:bb:99:6f:95:fd:b4:f0:00: 11:5a:76:aa:e7:87:e4:30:8e:c9:f9:eb:99:f1:09: 1c:36:68:63:d5:be:3d:ff:7a:b3:df:3e:8c:bb:6e: e9:be:62:8a:0e:65:15:73:d8:d3:11:ed:3c:05:77: ef:c7:32:ab:b6:65:2c:c5:c9:83:ba:57:09:fd:bf: e5:a8:4c:c5:4c:d9:82:02:e6:c2:e4:0f:6b:f1:ee: 59:be:ac:22:c8:2f:0e:c4:cc:fe:a5:16:b4:b0:3e: 1c:ef:09:0d:a4:31:e7:35:1d:0f:4b:c4:80:5f:11: b3:e3:7a:2a:86:26:62:ca:66:59:52:ba:e2:2b:0b: 21:4b:6f:0f:ed:46:c1:89:0f:01:0c:43:17:fa:16: a0:d3:94:62:a9:28:31:78:98:69:b1:b2:fa:9d:82: 66:18:d3:1a:e5:55:ae:b5:64:5a:7d:e3:41:cc:da: 17:c6:8e:5f:ce:4a:d3:07:1e:9b:9b:7b:00:4d:a6: 92:c2:12:81:93:40:21:4d:ce:cb:6d:9a:b9:0d:16: 3a:92:da:46:ff:80:cd:1f:22:a3:92:73:33:90:a7: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:79:7C:9C:DE:0E:F3:C1:83:5D:C5:C4:1A:13:C7:16:16:50:79:47 X509v3 Authority Key Identifier: keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ca:84:ab:f3:0d:24:cb:13:04:1d:fe:f9:0f:22:2b:c3:19: 2f:8e:1b:cd:22:32:fd:0e:db:cd:a0:50:2b:37:99:c6:de:df: 95:45:4a:cc:04:cc:25:87:6d:84:9f:72:6c:92:21:6e:bb:7a: 06:2f:8b:e4:af:67:5d:b2:f6:d9:c2:eb:57:59:f5:49:1a:1d: 6c:f3:c8:71:bc:26:b6:5d:3f:86:80:14:c0:e7:f9:29:a0:79: c0:95:ac:0e:66:5f:f6:6f:7c:f5:e7:99:a9:c1:cf:44:1a:91: ec:bb:16:32:25:93:b7:99:a9:45:16:2f:db:19:64:14:4e:78: 4b:db:83:af:df:8a:c6:e7:7d:3a:27:4f:db:44:8f:40:9d:eb: a5:8b:d9:c4:18:29:e9:0d:eb:01:63:86:84:70:2e:02:3a:82: dd:26:99:56:01:47:ed:59:63:e7:40:36:d8:96:56:5c:2c:51: f0:e0:27:e3:05:4b:56:3b:f3:53:27:63:dc:d7:5a:71:e3:aa: d7:7c:e8:14:e6:f2:1a:92:b8:f6:4d:aa:e8:1e:bc:c9:47:27: 4c:c7:6e:84:5e:21:ac:b2:2f:2d:99:4f:64:0e:d2:13:af:ca: aa:31:75:63:c5:1d:d2:2b:a5:53:f7:f8:18:aa:7d:38:9d:ed: 15:b3:68:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFCNDY0MzE3RTlF N0FCNzBFRjAeFw0yNTA3MjEwODIxMDlaFw0yNTA3MjgwODIxMDlaMBgxFjAUBgNV BAMTDTY4N2RmODc1LTJmZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsb0f+tBrurzvDEsSAa2R66lvc2/o9sH8ZTIKfocadePki2Qm7mW+V/bTwABFa dqrnh+Qwjsn565nxCRw2aGPVvj3/erPfPoy7bum+YooOZRVz2NMR7TwFd+/HMqu2 ZSzFyYO6Vwn9v+WoTMVM2YIC5sLkD2vx7lm+rCLILw7EzP6lFrSwPhzvCQ2kMec1 HQ9LxIBfEbPjeiqGJmLKZllSuuIrCyFLbw/tRsGJDwEMQxf6FqDTlGKpKDF4mGmx svqdgmYY0xrlVa61ZFp940HM2hfGjl/OStMHHpubewBNppLCEoGTQCFNzsttmrkN FjqS2kb/gM0fIqOSczOQp3AxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcHl8nN4O 88GDXcXEGhPHFhZQeUcwHwYDVR0jBBgwFoAUgmqoO74CQNE5BqurRkMX6eercO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0Y1N0QyMzMwNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ21xb083NENRTkU1QnF1clJrTVg2ZWVyY084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0Y1N0QyMzMwNURERjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5F NUJxdXJSa01YNmVlcmNPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACXKhKvzDSTLEwQd/vkPIivDGS+OG80iMv0O282gUCs3mcbe35VFSswE zCWHbYSfcmySIW67egYvi+SvZ12y9tnC61dZ9UkaHWzzyHG8JrZdP4aAFMDn+Smg ecCVrA5mX/ZvfPXnmanBz0Qakey7FjIlk7eZqUUWL9sZZBROeEvbg6/fisbnfTon T9tEj0Cd66WL2cQYKekN6wFjhoRwLgI6gt0mmVYBR+1ZY+dANtiWVlwsUfDgJ+MF S1Y781MnY9zXWnHjqtd86BTm8hqSuPZNqugevMlHJ0zHboReIayyLy2ZT2QO0hOv yqoxdWPFHdIrpVP3+BiqfTid7RWzaJU= -----END CERTIFICATE-----Generated at Tue Jul 22 05:07:45 2025 by rpki-client