$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: XQvrq6eSDfQqTHZ3hqvvV2Gasiupc2D+oaCnseofYC8= Subject key identifier: 1E:44:01:1A:6B:F7:E0:2E:21:3F:F6:42:DD:E3:D7:3B:AA:66:BE:B4 Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 013F Signing time: Thu 19 Jun 2025 03:49:22 +0000 Manifest this update: Thu 19 Jun 2025 03:49:22 +0000 Manifest next update: Thu 26 Jun 2025 03:49:22 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: njbm/9qdH5/msrck3vqW7wupXxQze/2pTS6hCR5v0oM=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Jun 19 03:49:22 2025 GMT Not After : Jun 26 03:49:22 2025 GMT Subject: CN=685388c2-6b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:6c:88:40:9b:45:5c:8e:fa:00:85:cb:63: ff:73:7c:1c:77:f6:e6:bd:7a:ef:a5:d8:c1:58:f8: be:8d:0f:13:34:d8:6f:4e:2a:c9:01:a6:47:37:bf: f3:74:48:15:fc:f5:8b:17:f9:8a:c0:f5:83:4a:ab: b4:93:1a:29:ef:c5:5b:8a:91:cc:c2:7e:2c:a0:02: 9d:d1:b6:cc:8b:17:a9:8d:e7:a1:6a:09:0a:a2:b7: 77:9a:6f:8e:c1:2e:72:d4:a5:1c:97:f0:78:bb:fe: b4:66:b0:a9:43:3a:e5:7c:1f:f8:ce:e5:37:3c:d6: 7c:22:4c:cb:49:46:76:e5:cc:93:56:00:f0:b2:d0: 63:e4:58:55:a9:ef:c6:97:b1:53:23:bd:84:98:8d: d2:dc:c9:4b:86:c8:88:29:42:db:06:f4:9c:82:99: 7b:94:05:5e:f8:2d:bb:9a:71:71:d5:83:1d:bf:5d: 92:20:d2:2b:42:b4:12:fc:e2:24:78:82:ba:af:9b: 3d:0c:6e:9b:91:f4:b1:8b:ab:9b:d5:f8:93:37:d4: 49:82:35:87:5d:d3:52:08:5c:ec:c5:eb:38:e2:2a: 0a:eb:b6:ad:64:d5:84:a0:30:83:87:72:1d:fd:6c: cc:74:f4:dc:57:79:ed:1c:0a:ed:35:7e:af:8f:ff: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:01:1A:6B:F7:E0:2E:21:3F:F6:42:DD:E3:D7:3B:AA:66:BE:B4 X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:91:2a:13:44:2b:e6:df:bd:29:bf:6e:c8:57:21:08:4b:10: ff:05:23:87:b9:d3:32:4c:4b:55:09:22:55:99:20:e6:87:20: 28:54:10:7b:6e:fe:62:62:31:67:57:e9:7f:24:d7:2a:1a:85: 2f:b9:0a:26:97:24:a2:ce:0f:4d:3a:c4:4b:2e:d4:35:a1:6e: e1:90:94:7c:5e:17:20:fb:f4:d8:a1:a6:3c:ef:40:9d:2d:e9: f1:e2:c5:4a:97:55:f1:31:cc:44:36:0e:a6:ca:64:be:d2:0c: 54:61:04:3f:a9:0e:71:59:8e:34:a1:90:6d:6d:67:c9:de:b6: ac:d9:fb:19:91:96:48:51:4a:18:3d:9f:0e:89:70:19:c1:53: ef:c9:9d:19:9e:06:9a:04:11:60:73:d3:2a:1f:c1:46:b0:91: 58:0b:1e:d5:40:95:91:b9:6a:30:0c:e6:de:15:5e:63:fe:10: 5d:d7:77:d8:29:a5:38:6a:73:2a:68:18:77:4f:e2:46:88:11: 24:88:90:25:f5:eb:c1:48:0c:eb:43:21:f7:db:cf:39:d5:47: 11:6a:90:3a:51:2f:ca:43:88:fc:7f:ba:d1:ef:78:48:24:f0: f8:02:23:f1:42:cd:e8:ac:79:14:dd:34:dd:2f:27:6a:b3:08: 37:0f:2e:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUwNjE5MDM0OTIyWhcNMjUwNjI2MDM0OTIyWjAYMRYwFAYD VQQDEw02ODUzODhjMi02Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8NsiECbRVyO+gCFy2P/c3wcd/bmvXrvpdjBWPi+jQ8TNNhvTirJAaZHN7/z dEgV/PWLF/mKwPWDSqu0kxop78VbipHMwn4soAKd0bbMixepjeehagkKord3mm+O wS5y1KUcl/B4u/60ZrCpQzrlfB/4zuU3PNZ8IkzLSUZ25cyTVgDwstBj5FhVqe/G l7FTI72EmI3S3MlLhsiIKULbBvScgpl7lAVe+C27mnFx1YMdv12SINIrQrQS/OIk eIK6r5s9DG6bkfSxi6ub1fiTN9RJgjWHXdNSCFzsxes44ioK67atZNWEoDCDh3Id /WzMdPTcV3ntHArtNX6vj//J6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5EARpr 9+AuIT/2Qt3j1zuqZr60MB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2kSoTRCvm370pv27IVyEISxD/BSOHudMyTEtVCSJVmSDmhyAoVBB7 bv5iYjFnV+l/JNcqGoUvuQomlySizg9NOsRLLtQ1oW7hkJR8Xhcg+/TYoaY870Cd Lenx4sVKl1XxMcxENg6mymS+0gxUYQQ/qQ5xWY40oZBtbWfJ3ras2fsZkZZIUUoY PZ8OiXAZwVPvyZ0ZngaaBBFgc9MqH8FGsJFYCx7VQJWRuWowDObeFV5j/hBd13fY KaU4anMqaBh3T+JGiBEkiJAl9evBSAzrQyH328851UcRapA6US/KQ4j8f7rR73hI JPD4AiPxQs3orHkU3TTdLydqswg3Dy5g -----END CERTIFICATE-----Generated at Thu Jun 19 14:58:46 2025 by rpki-client