$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft File: GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json) Hash identifier: 0hvMv7qaGDs87dxtBm/qV8veu64OYUcGiE4TwP/1+Q8= Subject key identifier: 20:C5:0C:80:CF:53:73:D5:17:B0:5A:9B:BC:5C:C1:A6:7D:0F:F1:B2 Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 Certificate issuer: /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft Manifest number: 0168 Signing time: Sat 09 Aug 2025 04:15:51 +0000 Manifest this update: Sat 09 Aug 2025 04:15:50 +0000 Manifest next update: Sat 16 Aug 2025 04:15:50 +0000 Files and hashes: 1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: y0npKmul/unkUttSJQAV7ruRCONmI8XD+hHmX+q7Egg=) 2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Validity Not Before: Aug 9 04:15:50 2025 GMT Not After : Aug 16 04:15:50 2025 GMT Subject: CN=6896cb77-6a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:e2:d3:3a:b5:46:f0:f0:6a:4c:4e:a1:0d: 2b:91:2a:28:04:b1:0b:23:93:ef:24:01:21:05:6f: 15:4d:c5:52:2d:be:01:9e:60:e6:68:7f:4a:a3:ce: af:6e:58:9a:de:6e:cf:4b:3c:76:35:d0:d9:d4:47: ba:04:da:ba:90:94:c5:57:1e:90:f6:b4:5e:8b:7b: f8:32:69:ab:0e:e5:3d:c8:e7:80:fb:bd:89:d2:75: 55:3b:d6:29:b7:6c:26:1f:52:0f:41:51:0e:c8:1a: 46:51:15:01:c7:98:c4:13:39:92:0c:28:9e:f5:2b: 90:2e:b8:98:27:0d:21:27:d1:a6:66:15:48:3c:65: 9f:b2:4a:9c:63:9e:a6:84:0e:79:c6:a2:9a:a6:51: 84:6e:41:f3:7d:a2:88:36:06:10:95:77:ab:70:6e: 69:ce:34:ad:fa:40:68:9d:e9:3f:0c:65:63:c9:4b: 63:47:c6:ac:6a:d7:ba:a9:22:c6:ac:ec:68:95:76: ed:05:6a:0c:aa:15:ab:75:9f:76:aa:6b:a4:ab:b7: a0:73:13:a5:af:8c:bc:a5:c5:5d:1a:fd:d6:84:f1: 3d:67:75:73:17:8f:04:16:57:67:ef:b0:dc:35:16: f2:30:34:35:cf:74:35:7b:b3:72:8f:6c:7d:d3:71: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C5:0C:80:CF:53:73:D5:17:B0:5A:9B:BC:5C:C1:A6:7D:0F:F1:B2 X509v3 Authority Key Identifier: keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:64:67:28:be:72:01:45:f7:6a:f6:dd:b9:e4:40:7f:d5:2a: e3:10:d5:d4:0b:5a:59:bd:2d:22:06:72:89:8e:fe:b7:6a:00: d4:0b:9b:91:bd:4d:65:c9:2b:ff:18:77:7f:aa:1d:c2:45:1f: 66:20:d1:32:3d:2f:72:7e:e7:1f:46:aa:45:3d:e2:99:0d:c1: 31:01:fc:e9:cb:6a:bb:b7:fe:76:91:59:86:f2:ca:fa:68:78: cf:0f:53:8a:e9:0d:cc:fc:dd:c5:42:1e:03:2f:c6:17:82:6b: 5f:7e:0e:32:ca:44:bd:57:3c:5c:c8:54:25:c1:3f:f2:b9:d1: 90:7c:45:f8:74:85:a6:03:af:61:bf:a6:cc:30:ea:6f:b8:1f: ec:ce:56:36:5e:ef:85:f9:da:65:d6:a4:40:b6:35:90:55:c8: 1c:1a:30:d0:7f:4d:c6:24:99:b1:02:7b:f6:ea:86:1f:d3:65: 39:25:bf:d4:91:5a:7f:92:e6:3f:68:bf:29:30:8c:10:d6:0b: 8a:5e:b4:bd:c8:1a:c8:cc:1e:16:06:d9:41:94:ca:6a:fd:3d: d2:8b:5a:29:86:e8:41:e0:d2:a8:2b:db:74:7f:e9:b6:c4:73: fe:53:00:dc:19:02:78:8e:27:a7:f2:f0:fe:4c:82:75:2f:4a: ff:de:e3:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzODUxMTAvBgNVBAUTKDFCMjQ4OTU2MjRDMEY1MkQxQTgyM0IyRjI5REFEQzA4 RTJBNjI2NjEwHhcNMjUwODA5MDQxNTUwWhcNMjUwODE2MDQxNTUwWjAYMRYwFAYD VQQDEw02ODk2Y2I3Ny02YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32Hi0zq1RvDwakxOoQ0rkSooBLELI5PvJAEhBW8VTcVSLb4BnmDmaH9Ko86v blia3m7PSzx2NdDZ1Ee6BNq6kJTFVx6Q9rRei3v4MmmrDuU9yOeA+72J0nVVO9Yp t2wmH1IPQVEOyBpGURUBx5jEEzmSDCie9SuQLriYJw0hJ9GmZhVIPGWfskqcY56m hA55xqKaplGEbkHzfaKINgYQlXercG5pzjSt+kBonek/DGVjyUtjR8asate6qSLG rOxolXbtBWoMqhWrdZ92qmukq7egcxOlr4y8pcVdGv3WhPE9Z3VzF48EFldn77Dc NRbyMDQ1z3Q1e7Nyj2x903HqTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDFDIDP U3PVF7Bam7xcwaZ9D/GyMB8GA1UdIwQYMBaAFBskiVYkwPUtGoI7Lyna3AjipiZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4NS83QjIyQzc0MjRF MUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlTMGFnanN2S2RyY0NPS21K bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5U0pWaVRBOVMwYWdqc3ZLZHJjQ09LbUptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4NS83QjIyQzc0MjRFMUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlT MGFnanN2S2RyY0NPS21KbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANZGcovnIBRfdq9t255EB/1SrjENXUC1pZvS0iBnKJjv63agDUC5uR vU1lySv/GHd/qh3CRR9mINEyPS9yfucfRqpFPeKZDcExAfzpy2q7t/52kVmG8sr6 aHjPD1OK6Q3M/N3FQh4DL8YXgmtffg4yykS9VzxcyFQlwT/yudGQfEX4dIWmA69h v6bMMOpvuB/szlY2Xu+F+dpl1qRAtjWQVcgcGjDQf03GJJmxAnv26oYf02U5Jb/U kVp/kuY/aL8pMIwQ1guKXrS9yBrIzB4WBtlBlMpq/T3Si1ophuhB4NKoK9t0f+m2 xHP+UwDcGQJ4jien8vD+TIJ1L0r/3uNo -----END CERTIFICATE-----Generated at Sun Aug 10 21:14:27 2025 by rpki-client