$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: VKpKi9LDxDtM5TL4SUWclNlFQfKAV9C4C+Bba3NtHuE= Subject key identifier: 36:39:F8:6E:2F:F4:98:AA:2B:7B:B2:04:C8:13:03:F0:6C:45:0B:20 Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: C6 Signing time: Tue 01 Jul 2025 06:23:52 +0000 Manifest this update: Tue 01 Jul 2025 06:23:51 +0000 Manifest next update: Tue 08 Jul 2025 06:23:51 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: 6RBXcok3Z4FWhmChrs5ZVY6X2IUZ+khk/+oiD+5SXJA=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Jul 1 06:23:51 2025 GMT Not After : Jul 8 06:23:51 2025 GMT Subject: CN=68637ef8-53bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:84:6b:75:20:8f:d7:aa:4f:cf:a7:91:55: 6b:ca:b4:44:83:39:67:30:72:1c:00:99:a1:b3:4a: 98:59:7f:19:ca:9d:bd:60:e7:01:34:18:7d:72:6c: a7:64:c0:79:36:49:5f:8b:fe:e0:fa:33:f2:12:c1: 4f:05:bd:32:6c:fc:32:37:f3:d9:af:ae:55:95:10: 87:3c:1d:ad:f6:bb:8e:e9:c8:02:da:f7:b4:c5:67: a7:67:8f:1c:e7:e6:5f:0a:3f:8f:2b:bf:a4:18:6b: ff:1c:d9:1b:2d:04:9f:9b:0f:c1:f9:12:8f:3e:76: d9:1b:85:c1:db:6d:a8:64:84:53:22:15:6e:47:c9: 92:7f:f6:f4:9f:e3:ec:9e:cb:f2:17:df:66:14:be: f9:34:a5:2c:bf:06:cd:5d:58:6a:90:a7:48:a4:aa: 58:3a:9b:66:80:c7:af:e2:6d:31:4b:10:00:dd:9b: c4:ec:8d:59:3c:2b:4b:97:6b:e6:22:a5:92:3a:71: aa:47:b2:a7:60:de:59:1d:63:f9:30:d6:e7:c1:bb: 54:9b:8e:c6:b3:85:fc:b0:be:b7:97:23:0a:05:13: 31:25:70:56:22:6a:55:67:e3:63:b8:02:4b:63:49: a7:cd:bc:1d:b7:56:a2:08:ef:fe:42:a2:34:9f:0c: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:39:F8:6E:2F:F4:98:AA:2B:7B:B2:04:C8:13:03:F0:6C:45:0B:20 X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:98:0b:ba:16:bb:ac:70:e9:a6:17:e1:de:f0:4f:e4:f4:24: e6:45:b7:e1:d1:08:c7:1e:42:14:6e:85:95:47:20:08:5c:ec: 1b:a8:58:aa:67:69:9e:58:e0:60:51:80:b4:86:bb:e9:f4:65: 21:c4:b5:35:d8:05:96:08:2c:b9:8f:74:50:7f:6d:f0:9b:84: 44:6d:04:4c:3a:8c:22:10:36:41:6f:9b:61:1d:f6:c2:b9:26: 89:5e:c7:85:21:87:4a:f4:f1:c2:35:53:6e:b2:29:be:3a:0e: 18:bd:bd:c0:47:73:b7:f9:e9:c1:cf:3d:cf:d3:15:2f:00:ce: 61:7e:cc:3c:c8:9b:fb:e2:4e:dc:e5:43:2b:68:2f:bd:58:71: da:ea:92:e8:30:4d:c3:f1:93:2b:91:40:03:65:08:0b:89:2e: c6:ea:32:7d:e8:63:ec:32:33:f0:c6:50:de:04:ef:da:38:3c: b5:46:64:0c:37:11:bd:99:a0:14:d5:04:76:15:72:b7:e9:3a: a8:8b:89:94:5f:47:ad:c8:91:f0:dc:c4:4d:72:ad:b0:93:22: 6e:52:87:66:53:f7:b6:3f:c5:6f:b7:71:2e:4a:53:f0:15:84: 3e:a0:25:d4:13:17:ee:ca:38:9a:cf:5a:3c:c3:a1:5c:6e:71: b3:a9:5d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUwNzAxMDYyMzUxWhcNMjUwNzA4MDYyMzUxWjAYMRYwFAYD VQQDEw02ODYzN2VmOC01M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0U2Ea3Ugj9eqT8+nkVVryrREgzlnMHIcAJmhs0qYWX8Zyp29YOcBNBh9cmyn ZMB5Nklfi/7g+jPyEsFPBb0ybPwyN/PZr65VlRCHPB2t9ruO6cgC2ve0xWenZ48c 5+ZfCj+PK7+kGGv/HNkbLQSfmw/B+RKPPnbZG4XB222oZIRTIhVuR8mSf/b0n+Ps nsvyF99mFL75NKUsvwbNXVhqkKdIpKpYOptmgMev4m0xSxAA3ZvE7I1ZPCtLl2vm IqWSOnGqR7KnYN5ZHWP5MNbnwbtUm47Gs4X8sL63lyMKBRMxJXBWImpVZ+NjuAJL Y0mnzbwdt1aiCO/+QqI0nwxsCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY5+G4v 9JiqK3uyBMgTA/BsRQsgMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCmAu6FruscOmmF+He8E/k9CTmRbfh0QjHHkIUboWVRyAIXOwbqFiq Z2meWOBgUYC0hrvp9GUhxLU12AWWCCy5j3RQf23wm4REbQRMOowiEDZBb5thHfbC uSaJXseFIYdK9PHCNVNusim+Og4Yvb3AR3O3+enBzz3P0xUvAM5hfsw8yJv74k7c 5UMraC+9WHHa6pLoME3D8ZMrkUADZQgLiS7G6jJ96GPsMjPwxlDeBO/aODy1RmQM NxG9maAU1QR2FXK36Tqoi4mUX0etyJHw3MRNcq2wkyJuUodmU/e2P8Vvt3EuSlPw FYQ+oCXUExfuyjiaz1o8w6FcbnGzqV00 -----END CERTIFICATE-----Generated at Wed Jul 2 22:34:44 2025 by rpki-client