$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: HoyoiZ5lo809Pf3KDDIgH7eGJDpYnbd27X/Dzf4Dn8Y= Subject key identifier: FA:19:B7:77:64:9E:F0:7D:7C:FF:1A:F0:03:02:3E:1A:38:2A:62:52 Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 03E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 03DE Signing time: Sun 15 Jun 2025 00:18:08 +0000 Manifest this update: Sun 15 Jun 2025 00:18:07 +0000 Manifest next update: Sun 22 Jun 2025 00:18:07 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: gN5Ar7rQ1auiglxPGfb6CZ4Zkc2Gx+KqfnoO1eJ+FyE=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: Jun 15 00:18:07 2025 GMT Not After : Jun 22 00:18:07 2025 GMT Subject: CN=684e1140-22b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:44:f2:f5:10:80:0e:b2:50:cf:26:48:32: fc:19:b0:98:c4:5e:6f:24:34:44:b6:1c:c5:f8:78: 51:64:3e:84:6a:a4:e0:4c:62:6c:9a:2d:65:7e:24: 69:39:47:49:87:f2:1d:4d:f2:dd:96:c2:88:14:5e: 47:d9:5c:f9:e9:bc:59:b7:ee:8f:61:cf:b1:42:90: 01:23:3f:0a:9d:14:fd:49:e3:f8:7c:02:a9:26:e1: 12:df:76:92:f1:04:36:ba:b9:37:61:fb:c1:4f:16: c9:76:19:c2:f0:df:80:7f:26:49:73:6e:22:ec:42: d0:8d:b5:4e:d2:2d:93:5d:e1:85:fe:75:f4:06:73: 4b:0f:37:5d:72:91:da:e4:85:dd:f3:b2:af:05:3d: 5b:e8:3f:3a:cc:86:65:e7:f2:41:d2:a7:36:d4:68: 32:cf:08:ca:6b:47:5f:52:3a:23:cb:97:d2:b5:03: 41:c7:dc:ff:76:0c:25:4c:d8:84:0f:77:27:d7:19: b0:b3:f1:47:21:49:87:37:db:bf:bd:b7:12:2c:d6: 45:bc:a7:a6:5c:7c:b3:c2:ba:e7:22:0a:ba:da:28: 2b:31:f3:9e:66:26:93:7d:8e:56:c3:38:e9:d4:ad: 41:1a:96:43:86:f4:2f:cf:cf:cf:7f:dd:6b:42:77: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:19:B7:77:64:9E:F0:7D:7C:FF:1A:F0:03:02:3E:1A:38:2A:62:52 X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:44:97:a4:41:1e:d2:4d:f4:83:2d:30:80:ef:85:b6:62:5b: 4b:e0:66:51:9f:2a:21:6a:56:af:aa:40:88:d2:36:09:48:85: 96:d4:0e:da:9f:92:e3:87:07:c9:72:e9:d7:77:c2:bb:4e:f5: 5b:52:08:bf:f9:05:a0:a2:03:2f:0c:d9:21:c8:ca:a3:60:97: 32:1b:8d:70:10:ac:77:8d:14:d6:fa:1a:62:96:5c:ef:e5:b3: 38:a6:14:0b:65:65:28:a8:bf:9f:54:ee:ae:60:d4:2e:90:bd: 5f:0e:08:25:bb:f5:84:e1:58:e7:62:bb:68:96:c0:ab:60:98: d1:52:04:b1:76:a9:8c:ac:b1:d4:a7:f8:11:5a:76:e4:37:2c: 33:d3:0d:49:33:33:b7:55:64:09:a0:77:e3:6c:a5:10:3b:88: d6:9f:29:bf:f3:7c:91:56:f9:3f:f7:33:be:9b:00:46:c7:44: c8:30:0c:ec:f8:a9:87:34:fa:2d:48:64:db:06:5b:cc:23:51: 04:e2:4e:f3:75:d6:1d:b7:d2:78:ba:c4:80:ba:65:ad:af:02: 3a:a2:f8:4b:16:48:a9:9f:60:7b:b0:be:ed:3d:2f:69:fe:6f: bd:e2:3c:0b:d3:8c:c3:c4:11:6d:79:29:dd:8f:aa:23:04:eb: 51:26:6a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjUwNjE1MDAxODA3WhcNMjUwNjIyMDAxODA3WjAYMRYwFAYD VQQDEw02ODRlMTE0MC0yMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7lE8vUQgA6yUM8mSDL8GbCYxF5vJDREthzF+HhRZD6EaqTgTGJsmi1lfiRp OUdJh/IdTfLdlsKIFF5H2Vz56bxZt+6PYc+xQpABIz8KnRT9SeP4fAKpJuES33aS 8QQ2urk3YfvBTxbJdhnC8N+AfyZJc24i7ELQjbVO0i2TXeGF/nX0BnNLDzddcpHa 5IXd87KvBT1b6D86zIZl5/JB0qc21GgyzwjKa0dfUjojy5fStQNBx9z/dgwlTNiE D3cn1xmws/FHIUmHN9u/vbcSLNZFvKemXHyzwrrnIgq62igrMfOeZiaTfY5Wwzjp 1K1BGpZDhvQvz8/Pf91rQnetRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoZt3dk nvB9fP8a8AMCPho4KmJSMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIRJekQR7STfSDLTCA74W2YltL4GZRnyohalavqkCI0jYJSIWW1A7a n5LjhwfJcunXd8K7TvVbUgi/+QWgogMvDNkhyMqjYJcyG41wEKx3jRTW+hpillzv 5bM4phQLZWUoqL+fVO6uYNQukL1fDgglu/WE4VjnYrtolsCrYJjRUgSxdqmMrLHU p/gRWnbkNywz0w1JMzO3VWQJoHfjbKUQO4jWnym/83yRVvk/9zO+mwBGx0TIMAzs +KmHNPotSGTbBlvMI1EE4k7zddYdt9J4usSAumWtrwI6ovhLFkipn2B7sL7tPS9p /m+94jwL04zDxBFteSndj6ojBOtRJmqS -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:00 2025 by rpki-client