$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: 3OEvbMYJpQbNnmo77mRaHx8MRLVQDCiFduLWX5Dy5Bw= Subject key identifier: C3:A8:1E:4B:08:30:40:1E:B3:52:A1:1B:41:D9:F5:48:EC:B5:5F:9D Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 0152 Signing time: Tue 01 Jul 2025 04:35:06 +0000 Manifest this update: Tue 01 Jul 2025 04:35:06 +0000 Manifest next update: Tue 08 Jul 2025 04:35:06 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: FRGjabTCepWVMFKU5QCmb71ArLP5VNx/Hdl4Fkgxxcc=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: LEXF9HRhajbu2nLL2GIh97gP542YxXzyNibweT+ZgSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Jul 1 04:35:06 2025 GMT Not After : Jul 8 04:35:06 2025 GMT Subject: CN=6863657a-f752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:53:e4:dc:54:36:41:6f:64:c4:b4:75:79: a2:3c:54:66:e6:27:8b:5b:85:ee:5f:87:69:73:bc: fb:ff:a5:c4:b4:40:8d:31:e3:4c:5e:63:a8:70:0e: 8a:8a:25:8b:36:c0:6b:0c:d8:99:93:04:fa:e5:05: 90:10:9e:3b:a3:da:97:cb:35:6f:da:8c:e9:8c:ca: e7:a4:fb:c4:dc:ef:9f:10:2a:8f:0d:2b:5a:99:45: 0f:ee:30:4a:20:2e:59:68:bf:d0:f0:fa:a1:d9:91: 0b:db:ca:ba:bb:e2:66:4b:0f:1f:67:85:bb:6a:1a: 86:e4:86:47:5a:5b:5a:2d:75:41:ff:be:7b:3c:25: 26:af:94:b5:2a:8e:8d:6b:02:f1:95:55:05:bb:b8: 87:97:f9:84:93:95:4d:30:e8:57:ba:d1:7b:8c:6c: 11:20:f0:ab:bf:fc:20:70:ad:67:3c:0a:41:a7:41: ef:47:d4:d5:6a:bb:1b:1c:fc:1e:33:c3:46:e8:37: 86:e5:41:93:c7:b3:e6:d8:2b:e2:22:db:40:66:24: cf:be:47:c8:bd:5f:69:f1:31:f4:cf:91:f9:56:81: 8e:44:de:df:62:d1:3f:8e:ed:97:22:c0:49:93:c1: 5b:69:77:f5:79:47:91:ed:87:d8:af:99:fa:00:53: 67:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A8:1E:4B:08:30:40:1E:B3:52:A1:1B:41:D9:F5:48:EC:B5:5F:9D X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ed:c1:e3:3f:0b:b6:21:f5:d1:8b:bf:b7:3e:3b:fe:ab:f8: 98:fa:6a:c5:44:4a:cd:62:de:0e:00:6c:f1:f3:30:78:33:3c: e9:8d:87:38:aa:f0:a2:21:5f:1c:f7:a5:1b:98:8a:c3:1b:96: 56:80:39:78:5e:c2:f5:4b:49:6a:6d:be:5b:5e:c6:0b:22:9f: 35:1b:22:1d:2b:e3:ff:e8:1a:e3:1f:dd:0b:75:e4:b2:b0:01: 47:14:bc:73:58:e0:ce:e1:89:69:44:48:36:fb:c4:8e:26:03: 8e:f3:51:69:df:b2:79:d2:e6:94:bf:cd:8e:70:3a:19:b5:17: 4c:45:0e:8e:71:1d:9d:12:49:1b:3e:b5:1c:41:c8:c1:14:c3: 72:f1:da:d8:08:1b:31:2e:54:b7:5a:84:34:cd:7a:1b:ca:91: e2:fe:53:59:96:c8:55:48:f1:e8:51:63:2b:43:fb:2b:c9:73: db:6c:32:18:c1:e3:0a:45:6a:98:fc:cc:9a:4f:16:bc:46:29: 32:c9:eb:e3:2e:f8:65:e8:d8:c4:40:fa:fe:6c:2f:07:82:d2: d3:05:95:58:a7:54:e8:60:73:e4:cb:b7:f7:a7:fc:6c:ed:b4: e6:69:2c:7f:29:a1:cf:b2:ab:57:93:a2:88:d4:71:a1:cd:5b: 1e:ef:e3:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUwNzAxMDQzNTA2WhcNMjUwNzA4MDQzNTA2WjAYMRYwFAYD VQQDEw02ODYzNjU3YS1mNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kZT5NxUNkFvZMS0dXmiPFRm5ieLW4XuX4dpc7z7/6XEtECNMeNMXmOocA6K iiWLNsBrDNiZkwT65QWQEJ47o9qXyzVv2ozpjMrnpPvE3O+fECqPDStamUUP7jBK IC5ZaL/Q8Pqh2ZEL28q6u+JmSw8fZ4W7ahqG5IZHWltaLXVB/757PCUmr5S1Ko6N awLxlVUFu7iHl/mEk5VNMOhXutF7jGwRIPCrv/wgcK1nPApBp0HvR9TVarsbHPwe M8NG6DeG5UGTx7Pm2CviIttAZiTPvkfIvV9p8TH0z5H5VoGORN7fYtE/ju2XIsBJ k8FbaXf1eUeR7YfYr5n6AFNnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOoHksI MEAes1KhG0HZ9UjstV+dMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH7cHjPwu2IfXRi7+3Pjv+q/iY+mrFRErNYt4OAGzx8zB4MzzpjYc4 qvCiIV8c96UbmIrDG5ZWgDl4XsL1S0lqbb5bXsYLIp81GyIdK+P/6BrjH90LdeSy sAFHFLxzWODO4YlpREg2+8SOJgOO81Fp37J50uaUv82OcDoZtRdMRQ6OcR2dEkkb PrUcQcjBFMNy8drYCBsxLlS3WoQ0zXobypHi/lNZlshVSPHoUWMrQ/sryXPbbDIY weMKRWqY/MyaTxa8RikyyevjLvhl6NjEQPr+bC8HgtLTBZVYp1ToYHPky7f3p/xs 7bTmaSx/KaHPsqtXk6KI1HGhzVse7+MJ -----END CERTIFICATE-----Generated at Wed Jul 2 01:47:11 2025 by rpki-client