$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: GoqOGdOb6D47VnAAU6nQOgdqw2FGQHiAwIJ/dPTS3PE= Subject key identifier: 4F:2D:4D:FA:17:9E:FD:B8:75:23:70:CF:42:0B:7E:3E:B6:AD:3A:6C Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: 55 Signing time: Sat 21 Jun 2025 06:13:37 +0000 Manifest this update: Sat 21 Jun 2025 06:13:37 +0000 Manifest next update: Sat 28 Jun 2025 06:13:37 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: xmQjfAi5eS+0gV8w5SyeMgkkyV7YuXdav+XDqDCOyVU=) 2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: /3vnvplidMRV9xBfvWUaE3o6ToOuVyiBtlbFl/8L1Xg=) 3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: /17gKTBKMMs07+KSKB5vkpnNAFNY/B0f0Up4BfWbLBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 06:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: Jun 21 06:13:37 2025 GMT Not After : Jun 28 06:13:37 2025 GMT Subject: CN=68564d91-3270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:04:50:74:f3:c1:00:c3:9e:6d:8c:77:48: ab:ad:1a:10:46:b5:3c:d2:91:fd:34:24:c1:fb:6d: 97:f2:17:82:13:44:e0:8e:25:83:b3:58:64:fc:33: ed:18:81:a4:56:cf:35:cf:de:d1:64:c0:aa:70:80: 3f:e9:ef:a1:bc:2a:33:a7:b3:2a:eb:03:0b:45:75: aa:74:a2:2f:8f:5d:00:a7:10:71:9c:09:a5:65:19: e7:93:ad:3e:c3:5e:61:75:23:d5:3c:36:7c:7b:75: cf:a4:1a:ae:15:87:e8:0e:d2:02:c6:4f:4a:10:9c: 12:16:5d:ea:cb:69:c8:91:b2:03:35:e0:87:2b:37: 21:1e:3d:c5:81:cd:43:ca:6c:b8:31:fe:f8:02:d8: 22:a9:b1:1c:be:84:86:6d:96:0c:45:c3:c3:b5:08: 5c:4d:08:05:41:5c:3e:e5:ae:18:86:98:ed:a9:d5: 15:8c:29:1b:a9:cb:b6:c3:65:c9:e3:e8:d3:4a:a8: a2:c9:57:74:a2:25:e1:d0:6d:fa:05:d4:c0:d8:e0: eb:09:72:f9:8c:39:f4:5d:27:ae:00:e5:8b:fc:a2: 69:2c:56:d5:f2:2c:bf:73:46:31:55:cf:ef:ee:96: f0:a5:bf:06:74:b0:31:8b:f5:25:b8:36:6d:c5:82: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:4D:FA:17:9E:FD:B8:75:23:70:CF:42:0B:7E:3E:B6:AD:3A:6C X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:fb:4d:db:58:4e:b9:38:b2:14:db:81:61:d3:17:68:7c:f0: 7f:8d:7f:46:3d:2f:83:57:d0:78:57:fb:01:ae:76:50:02:0d: 6e:44:7a:31:f5:c5:6f:19:65:aa:ab:3b:f8:76:5b:80:03:78: 52:5c:b7:25:9d:d2:28:fb:aa:f7:dc:dd:25:de:26:fc:e8:1f: c2:d7:9d:38:f5:4f:86:c2:50:9a:00:fa:37:d6:36:5f:5d:31: 2a:4d:58:dc:a1:99:94:67:14:8d:f6:58:78:00:5f:94:d2:b1: 22:b8:8c:1e:3e:eb:78:4c:4b:6d:3c:73:b4:7e:2f:dc:fa:60: 61:8d:2d:57:43:d4:2a:49:b4:86:7e:92:83:90:23:fb:3c:ff: 25:8b:d0:52:3a:14:62:46:c7:f9:49:93:16:5f:f8:33:d7:d7: 64:90:82:e1:db:14:67:77:ea:8c:1a:b9:8d:e2:76:18:ef:e4: 82:bb:21:82:b3:91:ca:eb:01:0e:73:01:c8:b5:d1:4a:8e:1a: 3c:f8:c9:6d:37:0c:ab:8a:50:9d:1b:81:29:3f:76:48:99:a6: f8:6b:e7:04:3b:0c:9e:29:ae:d2:21:53:7c:5d:2c:e2:c9:f8: cb:15:34:62:f0:ff:9b:74:44:37:a9:95:ca:d0:51:1f:b5:1b: 1e:67:10:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDIyMjExMC8GA1UEBRMoODIwNUU5Nzk2RUM2OUEwQzczREMzQjVCM0NFMTJDNDgx OTJCNDU3NzAeFw0yNTA2MjEwNjEzMzdaFw0yNTA2MjgwNjEzMzdaMBgxFjAUBgNV BAMTDTY4NTY0ZDkxLTMyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAXQRQdPPBAMOebYx3SKutGhBGtTzSkf00JMH7bZfyF4ITROCOJYOzWGT8M+0Y gaRWzzXP3tFkwKpwgD/p76G8KjOnsyrrAwtFdap0oi+PXQCnEHGcCaVlGeeTrT7D XmF1I9U8Nnx7dc+kGq4Vh+gO0gLGT0oQnBIWXerLaciRsgM14IcrNyEePcWBzUPK bLgx/vgC2CKpsRy+hIZtlgxFw8O1CFxNCAVBXD7lrhiGmO2p1RWMKRupy7bDZcnj 6NNKqKLJV3SiJeHQbfoF1MDY4OsJcvmMOfRdJ64A5Yv8omksVtXyLL9zRjFVz+/u lvClvwZ0sDGL9SW4Nm3FgoVHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTy1N+hee /bh1I3DPQgt+PratOmwwHwYDVR0jBBgwFoAUggXpeW7Gmgxz3DtbPOEsSBkrRXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMjIyLzg3NjQ0ODlDQ0Q3 RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2dYcGVXN0dtZ3h6M0R0YlBPRXNTQmtyUlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MjIyLzg3NjQ0ODlDQ0Q3RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4 ejNEdGJQT0VzU0JrclJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADT7TdtYTrk4shTbgWHTF2h88H+Nf0Y9L4NX0HhX+wGudlACDW5EejH1 xW8ZZaqrO/h2W4ADeFJctyWd0ij7qvfc3SXeJvzoH8LXnTj1T4bCUJoA+jfWNl9d MSpNWNyhmZRnFI32WHgAX5TSsSK4jB4+63hMS208c7R+L9z6YGGNLVdD1CpJtIZ+ koOQI/s8/yWL0FI6FGJGx/lJkxZf+DPX12SQguHbFGd36owauY3idhjv5IK7IYKz kcrrAQ5zAci10UqOGjz4yW03DKuKUJ0bgSk/dkiZpvhr5wQ7DJ4prtIhU3xdLOLJ +MsVNGLw/5t0RDeplcrQUR+1Gx5nEHs= -----END CERTIFICATE-----Generated at Sun Jun 22 09:01:00 2025 by rpki-client