$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: /H9mkYUme4/0EjusFEAEtcnkEGcYHsPLA7YTJo8jcAo= Subject key identifier: 97:EC:17:0F:09:54:51:44:2E:88:1A:36:28:EB:D8:21:42:11:3F:1E Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 0434 Signing time: Thu 12 Jun 2025 23:54:27 +0000 Manifest this update: Thu 12 Jun 2025 23:54:27 +0000 Manifest next update: Thu 19 Jun 2025 23:54:27 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: ncC66qJloNVsA5z+gG8DFU0jTKm3H8+spZ9v0GFbtmE=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Jun 12 23:54:27 2025 GMT Not After : Jun 19 23:54:27 2025 GMT Subject: CN=684b68b3-f813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:a2:52:4d:82:a9:cd:49:90:a6:42:97:7e: 77:fb:3a:7a:9f:c1:e0:8c:eb:32:c4:04:fb:5f:36: 10:f3:02:41:7e:cc:93:4b:db:09:94:20:b8:5a:f2: db:57:93:1b:d3:41:d7:63:58:2c:d8:0a:d8:3e:eb: 0c:bd:9f:d1:cc:94:24:1a:fd:2d:57:eb:50:d7:ae: 9d:31:be:d7:33:86:33:51:c1:91:b8:67:f8:1b:59: 0d:2c:3f:22:13:98:4d:40:8b:ce:2b:ee:bb:ac:2d: 48:fd:d9:5b:a4:d2:a7:e3:33:dd:99:6c:61:28:e4: 74:5a:25:ee:14:17:39:60:0e:f5:28:20:ee:b1:1c: d8:c9:1d:25:14:64:e5:04:c2:c2:79:71:db:fa:45: 3c:82:49:ed:80:4b:89:d7:07:1b:5f:5f:2c:a7:c8: f7:de:a9:3f:a6:dc:2d:b4:88:9f:b6:49:d4:a3:cd: c1:60:b9:27:ad:2e:45:40:38:55:90:53:07:15:95: fb:73:f7:a6:43:2a:c6:8d:d9:41:7f:4b:34:1b:9f: 18:59:b4:ff:37:f7:1b:d9:f2:c9:1b:52:cd:80:d9: 30:b1:35:9a:87:da:6c:60:23:d8:70:be:4d:d6:60: 88:c9:d0:b6:db:7b:3b:c6:d4:53:dc:a5:cc:fa:ab: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EC:17:0F:09:54:51:44:2E:88:1A:36:28:EB:D8:21:42:11:3F:1E X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ba:8e:fa:c3:3e:7e:89:8f:ab:2f:b2:62:6f:51:42:bc:a3: f6:17:81:56:ed:1e:91:68:91:09:86:b0:54:31:a3:5a:0c:dc: 1b:45:a0:3f:bc:0a:94:fd:29:17:2a:00:8f:3b:22:50:e2:eb: f4:1b:78:2a:a6:71:8d:1d:45:cc:d1:71:9e:74:2f:61:6d:7b: 37:37:87:10:c9:0b:15:de:0f:6d:f9:85:f5:f6:fc:bd:b2:52: 5c:94:a2:92:58:d4:c7:1c:5e:f0:72:6a:c8:a6:63:f4:a7:06: 46:a3:b6:86:b8:5b:d4:7d:0a:27:b1:c6:38:b2:aa:52:9c:65: 83:dc:3c:54:0c:05:7f:89:fa:f2:de:f1:59:3e:69:56:1f:15: 8b:da:d0:61:b7:29:75:5e:31:f9:3e:d4:1f:ee:0c:62:54:50: f8:8f:9e:9c:e6:81:4b:c4:4d:9b:7d:75:1d:89:ca:66:c0:30: 19:30:38:51:04:a2:75:a0:bd:6f:ff:00:71:4d:8e:a4:15:5a: 31:54:b9:c3:4e:47:db:c3:85:56:72:e6:c7:0d:0c:b9:7a:ab: 37:dd:e4:0f:e8:b0:7c:ac:68:3f:4c:29:26:5b:5d:6c:4d:1f: fd:41:54:c5:c8:21:89:a0:a9:b2:9a:87:0b:7b:fd:87:05:1d: 8c:da:db:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUwNjEyMjM1NDI3WhcNMjUwNjE5MjM1NDI3WjAYMRYwFAYD VQQDEw02ODRiNjhiMy1mODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9iiUk2Cqc1JkKZCl353+zp6n8HgjOsyxAT7XzYQ8wJBfsyTS9sJlCC4WvLb V5Mb00HXY1gs2ArYPusMvZ/RzJQkGv0tV+tQ166dMb7XM4YzUcGRuGf4G1kNLD8i E5hNQIvOK+67rC1I/dlbpNKn4zPdmWxhKOR0WiXuFBc5YA71KCDusRzYyR0lFGTl BMLCeXHb+kU8gkntgEuJ1wcbX18sp8j33qk/ptwttIiftknUo83BYLknrS5FQDhV kFMHFZX7c/emQyrGjdlBf0s0G58YWbT/N/cb2fLJG1LNgNkwsTWah9psYCPYcL5N 1mCIydC223s7xtRT3KXM+qsS3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfsFw8J VFFELogaNijr2CFCET8eMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1uo76wz5+iY+rL7Jib1FCvKP2F4FW7R6RaJEJhrBUMaNaDNwbRaA/ vAqU/SkXKgCPOyJQ4uv0G3gqpnGNHUXM0XGedC9hbXs3N4cQyQsV3g9t+YX19vy9 slJclKKSWNTHHF7wcmrIpmP0pwZGo7aGuFvUfQonscY4sqpSnGWD3DxUDAV/ifry 3vFZPmlWHxWL2tBhtyl1XjH5PtQf7gxiVFD4j56c5oFLxE2bfXUdicpmwDAZMDhR BKJ1oL1v/wBxTY6kFVoxVLnDTkfbw4VWcubHDQy5eqs33eQP6LB8rGg/TCkmW11s TR/9QVTFyCGJoKmymocLe/2HBR2M2tui -----END CERTIFICATE-----Generated at Sat Jun 14 17:58:36 2025 by rpki-client