$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json) Hash identifier: KX+aSz6Zw9dXx8xq8PDj7Dn+0X+VCrXRaMZaXXs6T5M= Subject key identifier: 4C:74:D6:2E:2D:91:A4:49:03:61:15:AE:4A:6E:02:BD:E1:62:B3:A5 Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft Manifest number: 064F Signing time: Fri 08 Aug 2025 23:01:40 +0000 Manifest this update: Fri 08 Aug 2025 23:01:40 +0000 Manifest next update: Fri 15 Aug 2025 23:01:40 +0000 Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: rZR19V5EYASgytjLjwoyDEB8KcjZGlGMBCw/VFBzXV4=) 2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Validity Not Before: Aug 8 23:01:40 2025 GMT Not After : Aug 15 23:01:40 2025 GMT Subject: CN=689681d4-0c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:54:ae:ac:c3:b8:13:5d:46:f5:d7:04:d6: 8a:d5:e7:60:3d:9a:c2:50:98:a3:64:91:df:b0:4b: 60:43:79:c6:0f:3c:bb:bb:11:68:9a:1d:21:d5:d5: a0:ba:e1:1e:1b:08:bd:63:44:8d:24:fa:5b:af:6a: 82:67:8d:a4:a5:79:43:0a:52:d3:8a:1d:67:2b:3b: 06:f8:d3:75:7b:63:00:e8:a6:97:bc:0b:a1:86:db: 39:13:0c:8b:55:7a:de:26:30:17:95:b7:bd:3f:ed: e8:83:ff:09:30:d4:5a:d8:ce:46:25:8b:4a:bf:bd: 2a:87:7f:3b:26:c4:da:f8:c1:f3:47:7e:09:d1:87: 53:be:33:70:21:0c:a5:49:4f:f6:d2:80:70:2c:bb: bd:8e:5e:e0:3b:0e:10:48:5e:5f:e2:b8:ed:f5:62: cd:a1:4c:fc:e5:b9:84:50:65:fa:3a:54:63:cf:f6: 1d:d5:f3:0e:c4:2b:62:6e:97:f9:47:b0:9c:17:86: 84:69:3f:0a:5b:df:a9:11:c8:3d:f6:c4:62:87:b4: 45:50:0d:5a:80:45:42:1e:9b:57:35:fd:c5:03:d0: e6:4f:c1:0b:72:b6:4e:fc:19:0e:02:25:4b:13:28: de:40:3d:aa:83:fd:da:65:da:3e:0f:e0:be:e3:24: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:74:D6:2E:2D:91:A4:49:03:61:15:AE:4A:6E:02:BD:E1:62:B3:A5 X509v3 Authority Key Identifier: keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e3:22:bf:96:39:3d:c9:76:d8:7c:8e:58:0d:88:31:51:4c: 08:02:ce:16:eb:dc:57:ab:86:a0:e1:f5:e8:06:b0:e4:40:17: 67:8b:cf:2f:1c:48:7d:77:34:00:30:dd:7e:99:43:58:0e:8e: 69:08:6e:1d:ed:15:a8:ec:fd:f6:d7:f3:c6:1e:50:08:ad:f5: 74:ca:2c:eb:5f:d2:d0:99:c7:59:8b:4e:76:c9:8e:2c:7f:0b: b7:91:fb:ec:0b:66:59:72:fd:de:1a:54:3b:ce:73:d1:d9:ab: 2b:dd:45:98:21:85:bc:63:a5:4a:c8:e2:cf:be:bd:01:a0:23: 98:b7:3a:33:91:d1:1e:1e:c9:49:20:e0:65:54:7d:60:c9:df: 52:c0:ed:1a:54:db:6c:4a:61:1b:c2:04:6d:84:fd:4e:0d:78: 8c:b0:7f:3d:c8:d9:f6:89:b7:bd:c3:a1:04:6b:ef:aa:d9:03: 13:66:b9:d8:93:20:b7:06:fa:dd:e8:14:d2:d6:a7:a8:02:69: d1:79:ca:c3:0a:f9:a3:72:8d:db:8e:cd:4f:c3:7d:52:db:da: 3e:3c:9f:02:eb:d3:ed:66:29:ee:31:10:3b:51:f4:2e:c6:78: 87:91:f5:33:7a:ba:4a:21:2c:25:2c:1c:f7:22:bf:be:06:e0: d3:51:c2:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy Mzk2NjcwOUMwHhcNMjUwODA4MjMwMTQwWhcNMjUwODE1MjMwMTQwWjAYMRYwFAYD VQQDEw02ODk2ODFkNC0wYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRRUrqzDuBNdRvXXBNaK1edgPZrCUJijZJHfsEtgQ3nGDzy7uxFomh0h1dWg uuEeGwi9Y0SNJPpbr2qCZ42kpXlDClLTih1nKzsG+NN1e2MA6KaXvAuhhts5EwyL VXreJjAXlbe9P+3og/8JMNRa2M5GJYtKv70qh387JsTa+MHzR34J0YdTvjNwIQyl SU/20oBwLLu9jl7gOw4QSF5f4rjt9WLNoUz85bmEUGX6OlRjz/Yd1fMOxCtibpf5 R7CcF4aEaT8KW9+pEcg99sRih7RFUA1agEVCHptXNf3FA9DmT8ELcrZO/BkOAiVL EyjeQD2qg/3aZdo+D+C+4yTjiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx01i4t kaRJA2EVrkpuAr3hYrOlMB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3 NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRFRS8zQTcyN0M3RTk3NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVH SXVoMGtjNUlKN1lqbG1jSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB54yK/ljk9yXbYfI5YDYgxUUwIAs4W69xXq4ag4fXoBrDkQBdni88v HEh9dzQAMN1+mUNYDo5pCG4d7RWo7P321/PGHlAIrfV0yizrX9LQmcdZi052yY4s fwu3kfvsC2ZZcv3eGlQ7znPR2asr3UWYIYW8Y6VKyOLPvr0BoCOYtzozkdEeHslJ IOBlVH1gyd9SwO0aVNtsSmEbwgRthP1ODXiMsH89yNn2ibe9w6EEa++q2QMTZrnY kyC3Bvrd6BTS1qeoAmnRecrDCvmjco3bjs1Pw31S29o+PJ8C69PtZinuMRA7UfQu xniHkfUzerpKISwlLBz3Ir++BuDTUcKt -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:34 2025 by rpki-client