$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: 3xI3zY0F3/3ymnGMgDGla0wekYqyRTgyosh/InQNQ4o= Subject key identifier: 8E:88:84:F5:EF:13:B9:3F:AF:34:C1:C2:D2:A9:03:82:C3:94:0E:32 Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 075F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 0757 Signing time: Sat 14 Jun 2025 21:24:02 +0000 Manifest this update: Sat 14 Jun 2025 21:24:01 +0000 Manifest next update: Sat 21 Jun 2025 21:24:01 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: tvmY5HM4m4MdjUMAyEje/cWmn9Sg0elQNYrdJaeOeCo=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: RF8Kiol9Bl+cT8NMkiixB2yHl7PyCHbWNwT/OTtymFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Jun 14 21:24:01 2025 GMT Not After : Jun 21 21:24:01 2025 GMT Subject: CN=684de871-2d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:32:72:f0:5c:3a:81:35:87:5f:1d:16:74: 4a:96:9a:0e:9d:a4:4b:b4:51:38:35:32:84:85:ab: 27:2b:f3:0f:47:77:e1:9a:bd:0a:c6:f7:1e:8c:b1: 09:b3:55:8e:19:fb:f6:2a:ba:5d:d4:e8:1d:71:18: c0:dc:1c:06:90:31:b6:59:41:dc:79:be:a8:bb:9c: 32:99:ce:67:a7:d3:1b:18:e0:02:59:d1:d0:03:b4: c4:c9:38:cd:b7:fb:ed:31:7a:ce:45:73:98:d0:fe: 71:66:0d:09:5b:a9:0b:b6:ac:52:19:54:b9:03:9d: d3:a4:f1:54:2a:10:17:1a:69:0e:36:a9:02:d8:52: e8:f3:e9:dd:a4:fd:2f:cf:fb:a0:da:ab:ef:2d:42: f7:45:ad:c9:79:0a:66:52:98:ef:cd:e4:93:05:ef: e0:bc:84:37:b7:52:af:be:19:0d:e8:4a:9d:ae:4f: 48:12:ad:b5:17:87:15:a9:67:a6:d5:9e:7e:37:d3: ec:c0:c1:02:d4:61:cb:53:c9:1e:52:f3:c0:ea:c6: ba:8a:79:bf:54:2f:eb:88:17:40:40:46:30:d5:c7: 58:a1:e0:c0:e9:26:cd:1c:93:f0:7f:8d:18:3e:41: c7:14:ba:1f:f4:22:96:f5:fc:5a:ad:15:3c:7b:5c: e7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:88:84:F5:EF:13:B9:3F:AF:34:C1:C2:D2:A9:03:82:C3:94:0E:32 X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cd:c0:51:6a:a3:5a:22:a6:41:28:61:6a:95:15:38:09:3f: df:06:74:e9:19:bd:bd:cb:02:24:4c:b2:5c:fa:7c:3c:4e:a2: 56:32:bc:5e:95:ce:48:37:c8:37:6e:e4:b0:c1:99:2f:40:d5: 6b:69:f1:f6:5e:b0:50:da:1e:3f:de:72:18:18:31:18:22:20: 87:0d:69:30:26:87:e0:fa:75:84:78:1c:34:70:8b:19:0f:48: 3c:7c:2b:a1:09:9e:ab:5a:91:ed:bc:51:8a:ac:07:01:26:c3: 54:ce:04:a0:ec:a4:68:c3:49:b6:93:32:43:5b:ac:5e:dd:2d: 75:bc:45:d8:93:0f:7c:5b:1d:1b:62:1b:23:cd:4a:83:6b:ee: 02:63:53:14:52:09:15:56:84:62:8e:ec:7f:b5:23:21:6c:27: ce:04:7a:63:be:b2:20:23:88:0b:1c:35:c0:70:34:27:10:c5: ba:34:42:4b:50:73:09:f8:63:c3:b9:bd:c9:f4:e8:26:78:58: eb:f1:35:c8:7e:d2:c9:76:d0:8f:3f:22:20:72:09:c0:42:6b: 5f:a9:23:19:7d:57:66:6a:6f:78:23:e1:58:68:18:2d:a7:69: c7:fd:fc:b7:51:fa:ba:7e:b9:27:42:81:ae:dc:9e:90:2d:67: d6:f0:db:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUwNjE0MjEyNDAxWhcNMjUwNjIxMjEyNDAxWjAYMRYwFAYD VQQDEw02ODRkZTg3MS0yZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRAycvBcOoE1h18dFnRKlpoOnaRLtFE4NTKEhasnK/MPR3fhmr0KxvcejLEJ s1WOGfv2Krpd1OgdcRjA3BwGkDG2WUHceb6ou5wymc5np9MbGOACWdHQA7TEyTjN t/vtMXrORXOY0P5xZg0JW6kLtqxSGVS5A53TpPFUKhAXGmkONqkC2FLo8+ndpP0v z/ug2qvvLUL3Ra3JeQpmUpjvzeSTBe/gvIQ3t1KvvhkN6Eqdrk9IEq21F4cVqWem 1Z5+N9PswMEC1GHLU8keUvPA6sa6inm/VC/riBdAQEYw1cdYoeDA6SbNHJPwf40Y PkHHFLof9CKW9fxarRU8e1zn5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6IhPXv E7k/rzTBwtKpA4LDlA4yMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5zcBRaqNaIqZBKGFqlRU4CT/fBnTpGb29ywIkTLJc+nw8TqJWMrxe lc5IN8g3buSwwZkvQNVrafH2XrBQ2h4/3nIYGDEYIiCHDWkwJofg+nWEeBw0cIsZ D0g8fCuhCZ6rWpHtvFGKrAcBJsNUzgSg7KRow0m2kzJDW6xe3S11vEXYkw98Wx0b YhsjzUqDa+4CY1MUUgkVVoRijux/tSMhbCfOBHpjvrIgI4gLHDXAcDQnEMW6NEJL UHMJ+GPDub3J9OgmeFjr8TXIftLJdtCPPyIgcgnAQmtfqSMZfVdmam94I+FYaBgt p2nH/fy3Ufq6frknQoGu3J6QLWfW8Nvc -----END CERTIFICATE-----Generated at Sun Jun 15 06:08:21 2025 by rpki-client