$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: 22Lx6LPo3BcMFfrSPhBee8z7ki2Z/yRmYrQufa9DfXU= Subject key identifier: AB:9A:32:DE:56:B5:56:8C:CD:45:B7:59:B1:D0:DF:90:47:A2:D3:9D Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 018A Signing time: Sun 15 Jun 2025 02:49:30 +0000 Manifest this update: Sun 15 Jun 2025 02:49:29 +0000 Manifest next update: Sun 22 Jun 2025 02:49:29 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: GTW0tBQvYgV+he0/xdT3RFTr6CjDEsaD+zZHwzCRHlU=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: F7gDTN0o2wOD506HIpMLfgl8UeSu5eT6/M2YdzZQ6qI=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: LuIHHuX142jXKv6AN/EbnGBFnLwj6AprExe3Q9LB8Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Jun 15 02:49:29 2025 GMT Not After : Jun 22 02:49:29 2025 GMT Subject: CN=684e34b9-25c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6c:36:1e:75:8d:4a:57:8c:0c:b8:4a:ce:9c: 59:78:15:92:2b:28:69:3e:de:b4:ca:ff:2a:36:34: 2a:c4:95:d9:d6:25:05:f4:55:7a:20:1d:fc:7e:fa: 19:29:d4:18:cc:a5:57:ee:04:6e:3c:a0:77:15:b1: bd:77:9b:b3:de:0b:bf:5a:63:7e:53:b6:57:52:03: 10:06:e6:c4:22:51:5a:a7:46:89:b2:80:90:0c:fc: 80:be:c6:8c:c6:2d:5b:24:23:aa:51:58:75:6c:b5: dc:2f:de:c5:8e:79:70:a6:f3:9c:2d:78:87:1c:a8: 44:0f:6e:05:6b:4f:24:2c:9f:57:6c:be:b5:c3:da: a7:48:b3:a5:d2:0a:53:59:c3:93:d7:23:50:98:92: f8:6d:b3:8e:54:7b:32:63:6d:41:89:54:db:b1:1e: 7d:50:49:89:c5:3d:4f:c8:81:dd:be:e0:cb:24:ac: 53:f4:22:14:71:d5:1b:32:6d:a8:38:28:31:fe:de: eb:1e:a2:3b:fb:ce:4c:a1:73:40:72:ed:c9:46:3a: 20:ff:a3:41:17:ba:0e:d9:3a:ce:c0:0a:e8:e9:3c: f5:87:72:18:11:7d:92:5a:52:16:a4:d6:cc:8f:47: 4d:17:ff:e3:05:71:42:dd:7d:91:fc:1d:2e:2d:2d: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:32:DE:56:B5:56:8C:CD:45:B7:59:B1:D0:DF:90:47:A2:D3:9D X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:91:b1:c6:4f:f1:42:28:10:2e:8e:4c:96:41:f7:f0:98:47: c3:17:8b:32:8e:63:6a:8f:f8:a5:b8:53:e4:d1:d0:6c:16:a5: df:fd:53:b9:d4:1b:3b:a9:b5:0d:0d:bb:89:49:51:db:b6:69: f7:9a:19:0c:06:09:53:48:78:6e:7b:36:1f:b3:26:9f:04:dc: ad:90:e1:c7:f8:78:5d:2f:10:44:9f:7d:09:aa:71:15:4a:3b: 33:f1:81:d2:d1:e5:dd:ca:af:91:85:2e:87:a8:e1:2f:9a:3b: 09:04:7e:de:a9:eb:78:8d:06:91:67:8c:62:c2:8b:b3:52:ab: 4c:af:9d:8f:fd:03:62:6a:ae:51:a3:43:e3:16:03:09:35:11: 16:12:13:b8:cb:c8:b4:e8:d9:d4:b4:ca:8b:6b:59:53:3f:a5: ac:c2:d3:85:3a:34:e2:3d:c8:3e:92:c6:1c:e6:82:80:a5:c1: c9:44:c9:f4:1a:04:63:5e:f2:1e:10:50:8a:50:bd:1a:d8:4a: 7e:48:e8:da:e2:b9:76:81:ec:20:b0:a9:a7:35:1f:39:f3:3c: 90:16:37:97:7a:31:ca:6a:11:cf:a5:0e:44:e9:45:a0:4c:75: f3:bd:9a:d1:9e:99:2d:1a:8b:e4:45:97:c6:f2:1d:ce:0d:0a: 08:8e:09:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUwNjE1MDI0OTI5WhcNMjUwNjIyMDI0OTI5WjAYMRYwFAYD VQQDEw02ODRlMzRiOS0yNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmw2HnWNSleMDLhKzpxZeBWSKyhpPt60yv8qNjQqxJXZ1iUF9FV6IB38fvoZ KdQYzKVX7gRuPKB3FbG9d5uz3gu/WmN+U7ZXUgMQBubEIlFap0aJsoCQDPyAvsaM xi1bJCOqUVh1bLXcL97FjnlwpvOcLXiHHKhED24Fa08kLJ9XbL61w9qnSLOl0gpT WcOT1yNQmJL4bbOOVHsyY21BiVTbsR59UEmJxT1PyIHdvuDLJKxT9CIUcdUbMm2o OCgx/t7rHqI7+85MoXNAcu3JRjog/6NBF7oO2TrOwAro6Tz1h3IYEX2SWlIWpNbM j0dNF//jBXFC3X2R/B0uLS23gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuaMt5W tVaMzUW3WbHQ35BHotOdMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmkbHGT/FCKBAujkyWQffwmEfDF4syjmNqj/iluFPk0dBsFqXf/VO5 1Bs7qbUNDbuJSVHbtmn3mhkMBglTSHhuezYfsyafBNytkOHH+HhdLxBEn30JqnEV Sjsz8YHS0eXdyq+RhS6HqOEvmjsJBH7eqet4jQaRZ4xiwouzUqtMr52P/QNiaq5R o0PjFgMJNREWEhO4y8i06NnUtMqLa1lTP6WswtOFOjTiPcg+ksYc5oKApcHJRMn0 GgRjXvIeEFCKUL0a2Ep+SOja4rl2gewgsKmnNR858zyQFjeXejHKahHPpQ5E6UWg THXzvZrRnpktGovkRZfG8h3ODQoIjgng -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:14 2025 by rpki-client