$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: leSkWIQQWsx46vyqGgv0tjylYtUIiE+U/XEW4s9vQgQ= Subject key identifier: 4D:E8:74:EB:08:E9:6A:B9:C4:2C:67:A0:1B:A2:68:F3:29:38:FF:78 Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 0159 Signing time: Sat 09 Aug 2025 04:30:48 +0000 Manifest this update: Sat 09 Aug 2025 04:30:47 +0000 Manifest next update: Sat 16 Aug 2025 04:30:47 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: hK7knTuyEZLpIEvGw6KOWvX8VZnMME1T2x3AlVef1Y0=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Aug 9 04:30:47 2025 GMT Not After : Aug 16 04:30:47 2025 GMT Subject: CN=6896cef8-d8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:60:47:8e:99:17:4c:34:53:cd:57:ef:58: 6d:d5:99:24:11:a9:ce:bc:f5:c8:e9:b2:66:b7:73: bc:e7:a7:c1:c2:da:27:9e:40:fb:15:5c:32:ae:47: 56:99:38:81:64:52:97:56:82:91:0a:91:03:e1:e3: 11:47:fb:68:ad:f0:24:69:f3:d4:4a:eb:c6:fd:fd: 5d:33:3c:6a:5a:45:48:83:a3:ad:dd:7c:88:97:eb: 3c:87:60:b4:40:f3:bf:a1:34:90:97:cc:27:4a:c8: 54:1c:1c:96:4a:93:fa:e9:ba:34:f5:8b:b3:dd:03: 1c:d8:82:50:77:b1:3a:70:a9:bc:d8:30:05:a7:1c: 50:c5:23:a4:73:3a:0a:ca:7d:c2:a5:e2:d9:a6:67: 35:5c:af:b2:ef:b6:e6:fe:c1:b4:1c:fd:2a:97:ef: 56:77:60:b3:29:64:5a:a4:3a:2d:57:ed:b2:44:65: b9:d4:d6:f4:79:0d:cd:00:49:9d:4a:b7:f8:54:ec: 3d:83:66:d4:24:92:08:02:4c:32:29:09:65:5a:d1: 41:77:f7:dd:24:f6:07:6e:5c:5f:7b:f6:42:5c:be: 47:ed:bd:a5:57:38:b3:34:1a:70:34:b0:24:67:b6: 77:75:76:57:b0:f4:74:1a:79:51:24:dd:cc:fb:8f: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E8:74:EB:08:E9:6A:B9:C4:2C:67:A0:1B:A2:68:F3:29:38:FF:78 X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:85:76:cd:64:9b:5f:a0:78:4a:ca:90:49:a8:0a:2f:7b:68: 7f:71:64:b1:54:85:6b:0c:e8:91:f1:0d:dd:a3:ea:7c:e9:4a: e2:46:cf:ed:ea:be:2b:d5:83:f6:2f:77:5a:c7:f1:ff:fb:8b: a7:6c:55:cc:81:40:01:ec:41:1a:0b:d4:10:3d:d9:69:bb:ee: c8:4a:2e:3c:c8:c4:91:d9:0e:78:34:23:cc:2d:a6:58:08:29: b6:be:b6:1c:90:9f:ff:a5:74:5c:3b:26:33:10:69:c0:40:5b: b8:eb:c3:15:39:93:cf:69:ae:2c:92:af:70:97:86:86:ab:21: 66:c2:46:c7:29:3c:42:08:b8:d6:19:0e:c3:2b:77:80:81:9f: 37:8f:ff:d8:12:f3:e3:68:40:59:b8:c0:5b:a9:17:ec:ac:66: 60:bc:4d:d7:06:2f:e5:ee:d4:e8:4e:61:26:34:69:ba:92:45: 83:64:22:fe:79:41:6b:66:83:3f:22:e1:7d:da:a1:fb:e2:95: d4:8b:a0:95:87:ed:24:6d:67:bc:2a:59:b6:30:fc:04:8a:a0: f2:42:1b:04:c4:32:35:ce:59:d7:00:6c:da:38:fc:76:bd:fd: 0f:62:c4:34:97:bd:ff:26:52:c3:cd:87:39:c1:93:a6:9f:27: 51:77:45:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUwODA5MDQzMDQ3WhcNMjUwODE2MDQzMDQ3WjAYMRYwFAYD VQQDEw02ODk2Y2VmOC1kOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFlgR46ZF0w0U81X71ht1ZkkEanOvPXI6bJmt3O856fBwtonnkD7FVwyrkdW mTiBZFKXVoKRCpED4eMRR/torfAkafPUSuvG/f1dMzxqWkVIg6Ot3XyIl+s8h2C0 QPO/oTSQl8wnSshUHByWSpP66bo09Yuz3QMc2IJQd7E6cKm82DAFpxxQxSOkczoK yn3CpeLZpmc1XK+y77bm/sG0HP0ql+9Wd2CzKWRapDotV+2yRGW51Nb0eQ3NAEmd Srf4VOw9g2bUJJIIAkwyKQllWtFBd/fdJPYHblxfe/ZCXL5H7b2lVzizNBpwNLAk Z7Z3dXZXsPR0GnlRJN3M+49lUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3odOsI 6Wq5xCxnoBuiaPMpOP94MB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+hXbNZJtfoHhKypBJqAove2h/cWSxVIVrDOiR8Q3do+p86UriRs/t 6r4r1YP2L3dax/H/+4unbFXMgUAB7EEaC9QQPdlpu+7ISi48yMSR2Q54NCPMLaZY CCm2vrYckJ//pXRcOyYzEGnAQFu468MVOZPPaa4skq9wl4aGqyFmwkbHKTxCCLjW GQ7DK3eAgZ83j//YEvPjaEBZuMBbqRfsrGZgvE3XBi/l7tToTmEmNGm6kkWDZCL+ eUFrZoM/IuF92qH74pXUi6CVh+0kbWe8Klm2MPwEiqDyQhsExDI1zlnXAGzaOPx2 vf0PYsQ0l73/JlLDzYc5wZOmnydRd0XD -----END CERTIFICATE-----Generated at Sun Aug 10 10:35:52 2025 by rpki-client