$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json) Hash identifier: ni6NSrExNumzFsZBAwhZhOVFk7rvmr+zVuwuX2LW8S0= Subject key identifier: EA:5C:F8:71:4F:D6:81:0F:90:DB:54:04:41:3B:D3:70:99:43:41:29 Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft Manifest number: 0533 Signing time: Sat 28 Jun 2025 23:05:28 +0000 Manifest this update: Sat 28 Jun 2025 23:05:27 +0000 Manifest next update: Sat 05 Jul 2025 23:05:27 +0000 Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: gC6OwsaNMYA0/VIGlGgCY4T3OEg13GuqVEET/KQ2kLQ=) 2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: 68/9CqYRkzm0ius//S97EiCu+9Aa9Wpy/boYkEQX4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Validity Not Before: Jun 28 23:05:27 2025 GMT Not After : Jul 5 23:05:27 2025 GMT Subject: CN=68607537-29b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:9b:14:33:f3:00:61:17:a0:e2:2e:c8:13: 0b:eb:2f:53:ee:c8:71:22:84:68:bf:e1:9d:9a:46: 59:3f:59:c6:e5:98:dc:33:e9:14:b1:82:d6:8e:d0: 68:ea:20:a9:89:a9:54:be:b9:19:52:0a:aa:1a:49: 80:fb:ee:b3:f2:a3:fe:0a:f9:75:20:d0:7f:a4:e2: 63:c0:1f:56:2a:8e:45:ee:7a:91:25:d9:f4:b1:fe: 8d:99:f5:f2:6d:1b:7e:10:9a:54:8a:2b:e9:3e:30: 09:01:81:20:3a:78:c0:ad:8d:8d:e6:c3:ea:64:21: d6:2d:ce:f6:56:c0:21:ea:28:d5:e2:c4:8d:e3:97: 3a:e1:c5:ea:01:78:82:42:f3:28:cf:64:27:0e:3d: c3:67:70:33:45:97:42:cc:ed:ce:97:f3:ae:81:fa: 14:91:f9:29:7c:8a:d3:eb:63:1b:0f:77:13:00:a5: 53:6c:ec:63:b6:81:09:7a:8e:ba:98:4f:10:0b:e9: 28:42:ac:6c:3d:84:53:3d:9e:ea:c3:94:69:0b:89: c5:50:0e:41:97:c9:79:e7:e1:e0:7e:eb:c8:90:73: 97:63:09:0d:31:5a:bd:bc:c0:1e:24:a2:c3:56:95: a4:ae:70:1f:65:7c:d2:fd:e1:17:f2:7f:8f:15:b1: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5C:F8:71:4F:D6:81:0F:90:DB:54:04:41:3B:D3:70:99:43:41:29 X509v3 Authority Key Identifier: keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:67:7a:16:6f:7f:c8:b6:43:5a:0e:3d:ef:af:c0:c7:ce:f7: 2f:29:90:c7:18:b2:7d:77:3b:d6:53:70:47:7c:07:2d:ba:52: 6f:1b:c7:8b:7e:63:7d:89:2d:4c:7a:f5:0b:89:09:42:59:38: 40:6b:3a:69:17:84:18:b8:a9:a5:77:5b:08:ec:99:4e:1e:ed: 30:b9:8d:49:05:2b:21:4b:6b:7c:57:1c:32:12:73:dd:a5:39: 31:67:2a:f0:dc:34:d7:a7:92:52:66:e5:72:64:3a:f1:d2:5d: a5:f3:22:bd:e6:61:9e:e2:2f:b4:5f:49:4a:33:08:68:ef:24: db:40:db:bc:02:57:17:9b:51:89:83:d7:50:25:fc:03:c9:11: e1:4c:27:60:29:84:86:cd:96:35:7c:f1:19:67:d4:a2:c6:66: 4e:ff:45:c4:7e:b7:08:6a:ee:64:1a:f4:0b:d6:28:e4:55:1e: 2b:a1:0e:14:1b:ae:18:26:69:ed:5b:e6:f1:90:b9:ba:53:8c: 40:af:e7:b4:ef:f8:f7:ec:4a:d8:33:0a:6d:69:71:1a:a2:25: 60:a2:90:f0:4a:ff:58:9e:7f:11:bc:10:41:2e:33:57:1d:bb: 2e:54:68:7d:d1:af:e6:18:49:18:0e:7c:9f:95:66:91:24:3b: c2:18:9f:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF NDdDNkI4RkUwHhcNMjUwNjI4MjMwNTI3WhcNMjUwNzA1MjMwNTI3WjAYMRYwFAYD VQQDEw02ODYwNzUzNy0yOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHmbFDPzAGEXoOIuyBML6y9T7shxIoRov+GdmkZZP1nG5ZjcM+kUsYLWjtBo 6iCpialUvrkZUgqqGkmA++6z8qP+Cvl1INB/pOJjwB9WKo5F7nqRJdn0sf6NmfXy bRt+EJpUiivpPjAJAYEgOnjArY2N5sPqZCHWLc72VsAh6ijV4sSN45c64cXqAXiC QvMoz2QnDj3DZ3AzRZdCzO3Ol/OugfoUkfkpfIrT62MbD3cTAKVTbOxjtoEJeo66 mE8QC+koQqxsPYRTPZ7qw5RpC4nFUA5Bl8l55+HgfuvIkHOXYwkNMVq9vMAeJKLD VpWkrnAfZXzS/eEX8n+PFbHyxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpc+HFP 1oEPkNtUBEE703CZQ0EpMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM OHZaamwzaHFiQWprZkd1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtZ3oWb3/ItkNaDj3vr8DHzvcvKZDHGLJ9dzvWU3BHfActulJvG8eL fmN9iS1MevULiQlCWThAazppF4QYuKmld1sI7JlOHu0wuY1JBSshS2t8VxwyEnPd pTkxZyrw3DTXp5JSZuVyZDrx0l2l8yK95mGe4i+0X0lKMwho7yTbQNu8AlcXm1GJ g9dQJfwDyRHhTCdgKYSGzZY1fPEZZ9SixmZO/0XEfrcIau5kGvQL1ijkVR4roQ4U G64YJmntW+bxkLm6U4xAr+e07/j37ErYMwptaXEaoiVgopDwSv9Ynn8RvBBBLjNX HbsuVGh90a/mGEkYDnyflWaRJDvCGJ+s -----END CERTIFICATE-----Generated at Mon Jun 30 02:51:01 2025 by rpki-client