$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: lG+v4zCJkPnR1n5NdHCjsSUeL0fGGxSmEmp80Kd3LRA= Subject key identifier: 05:E1:72:28:7C:C1:11:2D:86:0B:7B:C7:0B:F5:7B:D4:A2:AD:D6:31 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C27 Signing time: Wed 18 Jun 2025 18:30:52 +0000 Manifest this update: Wed 18 Jun 2025 18:30:51 +0000 Manifest next update: Wed 25 Jun 2025 18:30:51 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: v2G5y4YLazN/9fSofWJYW9TTAG0nEezloArv6fpJsuM=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: E0+Wetfx26FkfR/4N1Ow0BnaKFJugSEUCFgfURwthKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Jun 18 18:30:51 2025 GMT Not After : Jun 25 18:30:51 2025 GMT Subject: CN=685305db-3fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:5f:90:3e:34:17:70:65:0b:dd:65:a7:02: 52:00:20:2e:80:e3:ad:04:94:a4:1e:65:74:3f:b0: 4f:21:72:bf:d9:05:d1:7a:8a:88:a1:03:16:4b:36: b2:19:de:56:3f:f7:9d:29:b9:48:da:3f:40:46:2f: f7:95:a7:30:53:d5:07:a8:46:19:d9:37:71:8d:c7: 6d:0b:7e:1b:0d:84:28:93:7b:78:97:a7:55:2a:d1: 6d:f0:fa:fd:f1:1d:ce:26:ea:27:2f:ac:0c:b1:0f: a7:4b:3b:e0:dc:52:20:8b:bf:3f:17:02:cb:d1:2d: 58:b4:6d:23:8d:8f:77:46:4c:d1:72:89:93:d6:0f: a0:ab:37:55:8a:00:d0:92:8a:02:25:2c:26:7c:f7: 9d:e3:32:dc:94:6e:2e:f8:20:fd:dc:b1:d5:34:9f: 6a:52:7e:ac:2b:57:71:26:d8:37:37:4e:4f:6e:d8: 65:5f:70:fb:cc:10:2d:4f:0e:69:cc:47:af:eb:7e: 7e:ea:71:ef:1a:51:72:66:16:54:84:f6:ff:e5:db: 76:0a:1e:39:d7:72:88:e5:3c:7d:8c:87:83:f4:02: ed:ab:cb:8a:d9:a6:60:1f:6b:56:00:45:65:39:21: 79:11:59:71:4d:84:dd:88:10:97:2b:cc:ad:ea:65: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E1:72:28:7C:C1:11:2D:86:0B:7B:C7:0B:F5:7B:D4:A2:AD:D6:31 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:0a:73:25:f1:85:3e:4e:cb:d5:ea:d8:d9:b6:7c:22:ef:80: 14:cd:c3:e3:b0:c5:16:3d:c8:38:bd:e8:44:87:a9:c5:66:08: b7:30:e1:f1:a2:c8:68:c9:fe:c3:ea:b5:83:0a:d0:a9:9c:01: eb:dd:dc:6a:e6:dc:3f:65:bb:aa:1e:83:f6:a4:2a:2c:e6:74: 3f:bf:d1:9f:c2:d7:b7:e8:90:e1:4e:e4:fa:e4:75:53:45:1f: 46:ea:04:96:a9:d7:c1:34:ec:ed:ae:6e:84:12:88:9e:67:6c: c5:6f:25:c7:4f:e3:ac:a4:ff:dd:af:51:dc:e2:9f:a4:d2:30: 4b:c4:88:de:f5:11:54:e0:44:07:23:70:63:38:06:db:03:ad: 7d:95:95:d7:90:11:2c:b5:2a:b3:d3:b3:f8:d7:ad:e2:bb:e5: 8a:6b:f3:6d:bd:1b:db:d9:e8:8d:3c:32:ad:c1:e7:2a:dd:72: d5:8e:d0:60:3d:36:10:28:b1:83:0d:49:16:b7:db:17:87:12: 11:20:e2:26:dc:32:b2:95:a0:c4:1b:05:22:81:73:1c:90:a5: 4f:d7:99:31:a5:52:52:38:a8:1c:01:62:e5:44:ac:be:95:35: 3f:49:e9:d5:d9:48:7c:ed:bf:4d:a1:3e:11:f4:8a:52:5a:f7: 31:d6:89:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUwNjE4MTgzMDUxWhcNMjUwNjI1MTgzMDUxWjAYMRYwFAYD VQQDEw02ODUzMDVkYi0zZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvRfkD40F3BlC91lpwJSACAugOOtBJSkHmV0P7BPIXK/2QXReoqIoQMWSzay Gd5WP/edKblI2j9ARi/3lacwU9UHqEYZ2TdxjcdtC34bDYQok3t4l6dVKtFt8Pr9 8R3OJuonL6wMsQ+nSzvg3FIgi78/FwLL0S1YtG0jjY93RkzRcomT1g+gqzdVigDQ kooCJSwmfPed4zLclG4u+CD93LHVNJ9qUn6sK1dxJtg3N05PbthlX3D7zBAtTw5p zEev635+6nHvGlFyZhZUhPb/5dt2Ch4513KI5Tx9jIeD9ALtq8uK2aZgH2tWAEVl OSF5EVlxTYTdiBCXK8yt6mWszwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXhcih8 wREthgt7xwv1e9SirdYxMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWCnMl8YU+TsvV6tjZtnwi74AUzcPjsMUWPcg4vehEh6nFZgi3MOHx oshoyf7D6rWDCtCpnAHr3dxq5tw/ZbuqHoP2pCos5nQ/v9Gfwte36JDhTuT65HVT RR9G6gSWqdfBNOztrm6EEoieZ2zFbyXHT+OspP/dr1Hc4p+k0jBLxIje9RFU4EQH I3BjOAbbA619lZXXkBEstSqz07P4163iu+WKa/NtvRvb2eiNPDKtwecq3XLVjtBg PTYQKLGDDUkWt9sXhxIRIOIm3DKylaDEGwUigXMckKVP15kxpVJSOKgcAWLlRKy+ lTU/SenV2Uh87b9NoT4R9IpSWvcx1omR -----END CERTIFICATE-----Generated at Thu Jun 19 08:40:02 2025 by rpki-client