$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json) Hash identifier: 2TLJuVZ4GP+fKL3buhO27vsdAKWpsgzWxuKgAN8vO30= Subject key identifier: 26:FA:AA:51:DB:CC:CA:E6:7B:8C:98:0B:FA:09:5A:7E:CD:B2:87:B5 Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft Manifest number: 3486 Signing time: Sat 14 Jun 2025 15:17:27 +0000 Manifest this update: Sat 14 Jun 2025 15:17:27 +0000 Manifest next update: Sat 21 Jun 2025 15:17:27 +0000 Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: QeWjnNNW2PDsyWpmqQ3I7eHs647VWGhAfB9/8ZnxXTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD0C, serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Validity Not Before: Jun 14 15:17:27 2025 GMT Not After : Jun 21 15:17:27 2025 GMT Subject: CN=684d9287-f27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:38:8b:2e:64:fd:41:f6:f8:5b:63:1c:08: 63:a7:28:ec:20:04:eb:83:b4:ba:db:1c:a5:4b:2a: 80:70:e3:4d:93:31:d4:b9:03:14:72:ac:45:33:a8: f6:6c:21:c6:3a:7a:2d:55:4f:a1:be:8a:bb:51:f8: 7f:cd:78:fc:d9:77:b7:fc:f1:66:3a:e4:bb:c6:d5: 78:3c:78:55:82:2e:74:32:b6:a2:59:e1:28:8e:8e: 26:fd:5d:e2:e6:97:a9:09:19:bd:66:5a:22:0e:27: 4e:7d:1f:9e:48:2f:db:48:45:f3:68:6a:64:97:f7: a9:69:54:52:d0:26:de:5c:db:99:a6:e0:cf:00:96: 5a:ac:ec:b2:5f:6f:e5:eb:eb:fc:32:76:e4:5d:37: 1b:6b:03:48:ff:7e:d7:97:30:bf:77:94:ea:7a:7e: 04:d4:59:9d:69:39:6c:c4:ba:f7:a0:61:7d:4c:56: af:62:50:ac:cf:8e:64:3b:6b:fe:f5:49:37:54:28: e5:37:e9:53:f0:26:8d:72:f2:ba:2e:99:72:4f:91: 7d:d1:29:32:5b:c7:65:dc:96:9f:0b:ed:46:e7:1c: ba:27:97:94:98:bc:b5:ae:dc:06:c9:34:83:cc:e3: 37:54:ae:0a:44:e7:3a:c3:09:c7:3c:12:32:22:6a: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FA:AA:51:DB:CC:CA:E6:7B:8C:98:0B:FA:09:5A:7E:CD:B2:87:B5 X509v3 Authority Key Identifier: keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a2:61:65:7b:14:0a:97:3b:a1:d6:fc:6e:e9:99:17:43:60: c6:17:1a:19:98:e5:db:20:f7:f4:7c:24:0f:0b:4b:4c:8c:5d: 72:77:1b:ad:b3:26:f7:fc:fb:02:b1:f0:4f:97:43:80:28:3c: 4e:ad:e8:42:ef:ec:29:16:fe:f3:cd:78:fb:48:dc:10:b8:bc: 3c:a3:2d:93:d7:6d:da:ea:1d:94:7d:5d:bf:31:e4:ba:5b:8f: 83:af:7e:dd:92:e2:5a:52:12:ff:96:9a:7c:2f:a7:a3:d3:63: fd:b0:98:91:f7:f5:8e:2d:9f:7d:10:a8:cd:33:c7:de:3d:de: 88:b1:66:7a:d3:0a:83:16:7e:e0:2d:7a:a6:5f:57:ca:b7:14: 8c:d1:75:8e:70:51:91:fd:1c:6a:57:02:da:ae:18:78:26:d7: b2:d1:57:fa:6d:d3:a4:c2:7b:aa:bb:64:18:00:db:43:e1:ca: 23:0a:5e:73:ca:f9:e1:a2:f3:bd:80:24:6f:c7:f5:13:15:b9: 77:b0:be:15:b8:73:d3:b5:d8:31:5a:db:98:35:83:05:a6:95: 1d:28:89:52:43:c9:41:a3:f7:c5:61:af:7a:8f:ba:56:b9:cb: d2:8e:e7:a6:a4:3d:10:45:6f:99:64:56:8c:60:0c:45:c8:e2: b7:f1:51:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy NzNCM0VBMjUwHhcNMjUwNjE0MTUxNzI3WhcNMjUwNjIxMTUxNzI3WjAYMRYwFAYD VQQDEw02ODRkOTI4Ny1mMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs984iy5k/UH2+FtjHAhjpyjsIATrg7S62xylSyqAcONNkzHUuQMUcqxFM6j2 bCHGOnotVU+hvoq7Ufh/zXj82Xe3/PFmOuS7xtV4PHhVgi50MraiWeEojo4m/V3i 5pepCRm9ZloiDidOfR+eSC/bSEXzaGpkl/epaVRS0CbeXNuZpuDPAJZarOyyX2/l 6+v8MnbkXTcbawNI/37XlzC/d5Tqen4E1FmdaTlsxLr3oGF9TFavYlCsz45kO2v+ 9Uk3VCjlN+lT8CaNcvK6LplyT5F90SkyW8dl3JafC+1G5xy6J5eUmLy1rtwGyTSD zOM3VK4KROc6wwnHPBIyImrgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb6qlHb zMrme4yYC/oJWn7Nsoe1MB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2 aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgomFlexQKlzuh1vxu6ZkXQ2DGFxoZmOXbIPf0fCQPC0tMjF1ydxut syb3/PsCsfBPl0OAKDxOrehC7+wpFv7zzXj7SNwQuLw8oy2T123a6h2UfV2/MeS6 W4+Dr37dkuJaUhL/lpp8L6ej02P9sJiR9/WOLZ99EKjNM8fePd6IsWZ60wqDFn7g LXqmX1fKtxSM0XWOcFGR/RxqVwLarhh4Jtey0Vf6bdOkwnuqu2QYANtD4cojCl5z yvnhovO9gCRvx/UTFbl3sL4VuHPTtdgxWtuYNYMFppUdKIlSQ8lBo/fFYa96j7pW ucvSjuempD0QRW+ZZFaMYAxFyOK38VG8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:23 2025 by rpki-client