$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json) Hash identifier: UosSQiZ8Z+q1bvFTkBPqRWv0WbH0WKxI03LMtZriKWE= Subject key identifier: E8:36:96:6B:08:5D:7E:D0:61:EF:A9:D4:03:E3:F8:94:4F:44:47:2A Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft Manifest number: 03B6 Signing time: Sun 15 Jun 2025 00:24:20 +0000 Manifest this update: Sun 15 Jun 2025 00:24:19 +0000 Manifest next update: Sun 22 Jun 2025 00:24:19 +0000 Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: myF1bn7LOmNa8axSE5vpKs9S8UiT5kRUwBnQGv7++iE=) 2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Validity Not Before: Jun 15 00:24:19 2025 GMT Not After : Jun 22 00:24:19 2025 GMT Subject: CN=684e12b4-2dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a6:94:a9:06:c3:93:37:3f:2a:e9:f6:71:fb: 40:cf:f4:9d:7c:04:8f:88:e3:67:43:3a:cc:db:12: e1:d9:6b:78:22:47:6f:7a:0b:eb:db:b3:c9:db:29: 20:7a:f4:61:b6:85:44:e0:ed:60:77:8b:05:de:7b: 3a:41:43:59:c0:e3:2d:c0:92:a5:c3:55:76:23:65: 6e:7b:21:f7:c7:7e:bf:69:2e:d0:75:35:5d:2b:2c: 72:f3:2a:84:35:e3:f6:66:8c:b5:e0:75:7c:52:ce: 3f:be:ae:20:13:42:e9:d7:be:22:94:9b:84:63:bc: c9:8f:a7:34:62:7a:cb:43:c2:11:b3:7e:84:16:2e: 3c:86:0c:a5:be:0a:b6:67:e3:04:da:07:b3:ae:4e: 50:02:4a:f2:0f:77:a0:c8:d8:24:a7:a0:45:91:8d: 83:1f:f7:2c:67:83:c2:aa:c2:0d:bd:4c:f1:17:f9: 01:d8:5e:42:4d:96:b3:c8:2c:68:2d:88:a0:a7:a9: f7:a1:22:8e:c7:e9:a1:43:ef:ab:a9:e7:03:f9:e8: 48:64:bf:db:57:6f:90:39:5a:0a:7c:fe:83:fb:c5: bd:b7:24:03:07:13:ab:74:f2:ce:a0:25:f7:b8:17: 7a:ee:cc:47:9f:06:6d:20:b1:86:1f:16:91:49:45: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:36:96:6B:08:5D:7E:D0:61:EF:A9:D4:03:E3:F8:94:4F:44:47:2A X509v3 Authority Key Identifier: keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:16:b8:37:92:29:8d:5c:f2:1f:05:9a:17:3e:99:ca:54:d9: 1d:41:d6:15:e9:9d:c3:d3:6d:3a:f0:fa:51:6e:da:15:b9:a6: 27:07:54:d9:d3:bd:1c:71:a7:58:6d:5e:5d:53:dd:20:0e:78: 4b:e0:ab:26:31:41:33:59:26:e6:26:dc:1f:52:97:75:d2:06: b1:7e:2a:6a:67:24:14:44:df:39:63:f4:6f:07:6a:02:24:d6: 45:a2:7c:69:49:bb:33:b0:73:16:14:a1:f3:05:e8:b9:56:eb: df:11:23:2d:6e:8a:01:22:23:18:5f:f5:24:55:de:e8:28:5f: b2:e7:52:c7:68:65:e2:88:96:20:51:2b:28:37:39:39:79:c4: f4:45:06:d5:51:87:d5:cc:5a:61:a2:4f:c0:1f:c2:9c:06:0c: 5b:a4:f3:fb:ef:49:52:24:8b:ea:a4:fb:54:f0:62:ce:84:47: 15:9b:8e:28:ad:4d:10:90:c0:d0:d5:4c:d0:29:6d:a3:0c:3d: 41:c0:79:a6:d4:dd:37:b1:26:d9:19:1b:f4:37:3f:5c:8f:e9: d0:5e:2f:a8:62:60:14:4d:ed:57:7e:72:a7:12:fa:04:74:65: 0f:18:da:e3:a5:0c:82:15:55:43:9c:eb:0c:cc:de:51:19:88: 3a:56:42:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2 RDUxNzdERkYwHhcNMjUwNjE1MDAyNDE5WhcNMjUwNjIyMDAyNDE5WjAYMRYwFAYD VQQDEw02ODRlMTJiNC0yZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KaUqQbDkzc/Kun2cftAz/SdfASPiONnQzrM2xLh2Wt4Ikdvegvr27PJ2ykg evRhtoVE4O1gd4sF3ns6QUNZwOMtwJKlw1V2I2VueyH3x36/aS7QdTVdKyxy8yqE NeP2Zoy14HV8Us4/vq4gE0Lp174ilJuEY7zJj6c0YnrLQ8IRs36EFi48hgylvgq2 Z+ME2gezrk5QAkryD3egyNgkp6BFkY2DH/csZ4PCqsINvUzxF/kB2F5CTZazyCxo LYigp6n3oSKOx+mhQ++rqecD+ehIZL/bV2+QOVoKfP6D+8W9tyQDBxOrdPLOoCX3 uBd67sxHnwZtILGGHxaRSUW9oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg2lmsI XX7QYe+p1APj+JRPREcqMB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0 QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM5OS8yNTE1MkU1Qzk0QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcw MGF5MWh0SnpPUXB0VVhmZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlFrg3kimNXPIfBZoXPpnKVNkdQdYV6Z3D02068PpRbtoVuaYnB1TZ 070ccadYbV5dU90gDnhL4KsmMUEzWSbmJtwfUpd10gaxfipqZyQURN85Y/RvB2oC JNZFonxpSbszsHMWFKHzBei5VuvfESMtbooBIiMYX/UkVd7oKF+y51LHaGXiiJYg USsoNzk5ecT0RQbVUYfVzFphok/AH8KcBgxbpPP770lSJIvqpPtU8GLOhEcVm44o rU0QkMDQ1UzQKW2jDD1BwHmm1N03sSbZGRv0Nz9cj+nQXi+oYmAUTe1XfnKnEvoE dGUPGNrjpQyCFVVDnOsMzN5RGYg6VkJk -----END CERTIFICATE-----Generated at Sun Jun 15 09:46:34 2025 by rpki-client