$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json) Hash identifier: zejDl0kHDxIo1jAiQQdq6nWJLffz2MaevYyO9NQ4Ds4= Subject key identifier: AF:2B:5C:E7:8A:C4:A1:6A:33:6A:35:70:C5:54:BE:3B:7E:3A:2D:7E Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Certificate serial: 0362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft Manifest number: 035A Signing time: Tue 17 Jun 2025 00:33:55 +0000 Manifest this update: Tue 17 Jun 2025 00:33:55 +0000 Manifest next update: Tue 24 Jun 2025 00:33:55 +0000 Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: uXtutbEXGj7n88iqTp7hfmcyusPGd4YgJOHzuij0RiI=) 2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: bwcKq1c0r2cXBrd25MLQlHFjWgMS2hGGf/FnvA7qj34=) 3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: M4NylbqODaGIV7jb3azGtcDcoPjVhzDh1zfYrf7L1aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Validity Not Before: Jun 17 00:33:55 2025 GMT Not After : Jun 24 00:33:55 2025 GMT Subject: CN=6850b7f3-f249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:8d:f9:92:bd:91:d8:40:46:ed:b2:6b:53: 8c:68:95:37:22:0d:ac:b1:ab:9a:fc:96:24:01:f8: 68:f2:5d:67:0f:ff:9b:d8:15:68:e2:e5:1c:cf:70: 65:2d:e6:0a:25:7d:01:b7:f3:7d:1a:47:52:92:38: bc:be:75:36:c1:cc:e7:0e:f0:62:5f:c3:a6:38:f7: 87:18:cc:ad:b0:5b:1a:6e:99:37:70:52:57:3d:ef: 09:dc:8d:ae:08:67:66:3e:7b:d1:03:78:cb:60:b7: 29:dc:bf:9c:7e:59:e7:aa:4e:cd:00:e0:d3:95:4e: 81:9f:06:ef:39:cb:40:9b:80:2c:d9:c9:3c:25:a9: 70:82:57:c7:43:7a:84:ae:fa:9b:f9:21:99:95:63: 0f:5b:1c:73:4f:fd:1a:b1:c3:ee:41:47:ea:27:29: 56:f9:df:90:6d:63:18:c2:73:a2:67:79:a8:bf:42: 39:95:67:57:98:4d:43:37:86:8d:3c:5c:fa:26:fb: c1:bb:94:aa:1b:24:5e:41:67:1f:1c:c0:a6:43:4f: 4d:35:88:6e:81:e2:8a:2c:f7:c6:63:e0:69:27:46: e2:42:b6:4b:21:9f:63:85:e0:d2:4a:1f:41:22:64: 61:8c:a2:32:3f:4e:c1:93:ee:63:b6:cd:da:39:b5: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:5C:E7:8A:C4:A1:6A:33:6A:35:70:C5:54:BE:3B:7E:3A:2D:7E X509v3 Authority Key Identifier: keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0b:a4:1e:dd:f3:f4:a9:11:6c:d6:4d:dd:7d:a0:21:fe:04: c8:12:40:79:27:b0:d2:1e:5b:ad:be:93:4d:7c:d1:66:c1:18: 91:ac:22:81:85:67:b1:78:22:b9:ab:84:95:e7:6c:d4:58:13: 2f:4a:d6:58:e6:d6:e9:ab:89:0b:48:a5:4e:d5:c8:d2:79:e4: 48:f2:c7:c1:75:04:bb:07:91:bc:d5:b3:fe:9e:63:ab:7a:ed: f3:42:0f:22:30:68:f9:63:70:f2:84:59:44:29:5d:bc:25:76: 06:d9:db:b3:be:10:d6:fa:4b:24:e4:f0:d3:69:cf:87:0a:ee: 84:49:c7:be:19:fa:e4:7f:e9:40:dd:52:57:c6:08:6b:44:68: a8:dd:2f:02:b6:16:ad:74:a9:bb:64:b1:ab:af:21:f2:ad:18: 5b:75:5b:22:38:2c:52:f5:f7:11:5d:bb:72:0d:3f:04:8e:a8: 69:7d:10:89:a2:01:74:65:3d:35:44:f4:1a:0f:c5:02:46:df: a7:90:81:f7:4c:15:09:25:42:93:ac:91:ff:3d:2a:b9:ef:ae: ce:49:40:80:df:fd:cf:6b:e0:97:5b:40:df:1d:af:5f:17:a3: 6c:ea:c4:fc:fd:ef:3a:43:5a:4e:fa:35:14:6c:43:7d:97:8a: 18:64:61:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx QUQzNzE0RUMwHhcNMjUwNjE3MDAzMzU1WhcNMjUwNjI0MDAzMzU1WjAYMRYwFAYD VQQDEw02ODUwYjdmMy1mMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zKN+ZK9kdhARu2ya1OMaJU3Ig2ssaua/JYkAfho8l1nD/+b2BVo4uUcz3Bl LeYKJX0Bt/N9GkdSkji8vnU2wcznDvBiX8OmOPeHGMytsFsabpk3cFJXPe8J3I2u CGdmPnvRA3jLYLcp3L+cflnnqk7NAODTlU6BnwbvOctAm4As2ck8JalwglfHQ3qE rvqb+SGZlWMPWxxzT/0ascPuQUfqJylW+d+QbWMYwnOiZ3mov0I5lWdXmE1DN4aN PFz6JvvBu5SqGyReQWcfHMCmQ09NNYhugeKKLPfGY+BpJ0biQrZLIZ9jheDSSh9B ImRhjKIyP07Bk+5jts3aObVBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8rXOeK xKFqM2o1cMVUvjt+Oi1+MB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3 QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU1RC80MEU0M0I4MEI3QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hm X0lBUGdQOHBhNnNhMDNGT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYC6Qe3fP0qRFs1k3dfaAh/gTIEkB5J7DSHlutvpNNfNFmwRiRrCKB hWexeCK5q4SV52zUWBMvStZY5tbpq4kLSKVO1cjSeeRI8sfBdQS7B5G81bP+nmOr eu3zQg8iMGj5Y3DyhFlEKV28JXYG2duzvhDW+ksk5PDTac+HCu6ESce+Gfrkf+lA 3VJXxghrRGio3S8CthatdKm7ZLGrryHyrRhbdVsiOCxS9fcRXbtyDT8EjqhpfRCJ ogF0ZT01RPQaD8UCRt+nkIH3TBUJJUKTrJH/PSq5767OSUCA3/3Pa+CXW0DfHa9f F6Ns6sT8/e86Q1pO+jUUbEN9l4oYZGHR -----END CERTIFICATE-----Generated at Wed Jun 18 10:04:44 2025 by rpki-client