$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: nBX3gE7vzklicQqxkvkPRJv1huOhrAkVU2II1M6lwU4= Subject key identifier: 66:8B:FA:9A:96:F3:E8:1D:E0:02:01:4E:34:BE:A2:69:4E:82:F8:F1 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 0245 Signing time: Thu 03 Jul 2025 02:16:08 +0000 Manifest this update: Thu 03 Jul 2025 02:16:08 +0000 Manifest next update: Thu 10 Jul 2025 02:16:08 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: mY9yXXY4bGz9xOL2ahp6y2cyFDw/DUY8PgWRCRoPi98=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Jul 3 02:16:08 2025 GMT Not After : Jul 10 02:16:08 2025 GMT Subject: CN=6865e7e8-29a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:8b:15:cf:81:4e:de:62:73:66:48:42:31: 08:c7:25:22:38:87:bf:73:52:67:bf:50:4d:6c:3c: 36:30:dd:75:a9:fe:46:21:3d:7a:74:26:88:0b:88: 35:af:0a:65:91:38:75:70:46:b9:d4:84:c1:df:5a: c3:1c:37:70:fa:32:80:02:81:a0:ad:81:1a:a2:fd: d5:b0:1a:b3:07:ca:80:dd:7f:fa:a6:a4:47:36:c8: 25:aa:dc:00:5b:99:78:d7:cd:a4:22:e8:d4:0b:1a: 41:8e:1a:58:ea:ba:1a:d3:f3:8f:c6:e7:9d:26:8f: 6b:4f:35:3e:68:ac:c9:c8:62:d0:d3:f6:91:37:39: 9f:4c:8c:eb:13:57:04:ca:18:81:07:6d:4d:e3:29: fa:eb:b5:c3:bb:a8:3d:de:a2:21:fc:07:57:7a:45: c4:0d:83:da:ab:64:58:c2:93:d0:12:4d:76:0f:cc: 8c:a1:e6:c7:e6:77:8e:d7:fa:14:84:1c:bc:1b:97: 77:1c:b8:90:5b:65:58:f1:54:99:04:33:5b:89:19: e1:6e:a1:1e:b2:84:df:f1:95:d3:4e:6b:8f:49:8f: be:23:15:a2:55:fc:f7:c2:a7:13:63:c7:b3:23:5e: b4:82:0d:f8:59:0b:ce:69:17:3e:54:f9:41:e1:bb: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:FA:9A:96:F3:E8:1D:E0:02:01:4E:34:BE:A2:69:4E:82:F8:F1 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0a:71:0b:8d:d8:a7:06:de:76:c2:b6:57:be:d4:11:38:37: 8d:19:c7:db:49:ef:43:8e:78:b3:17:33:a6:5d:7e:5d:09:0b: 88:b2:99:98:3e:ce:27:cc:85:81:2c:7b:62:57:da:e3:88:76: e4:6e:7c:d9:38:28:0a:87:1e:5c:75:bc:31:03:63:8f:70:40: 83:1c:93:bd:2e:be:52:43:08:ef:4f:65:8d:68:cc:8e:87:5e: 05:04:d5:a9:07:4c:3d:6e:82:f8:e2:78:4b:bb:27:5c:cd:3d: e3:38:33:d3:bf:f3:64:97:ed:dc:8a:2b:3a:5c:cc:ef:be:1f: a8:60:8a:cb:54:36:a1:52:93:63:bb:3f:08:42:8d:3e:a9:3e: 92:51:ca:bd:ac:8a:9e:30:00:ef:0b:3b:6d:d2:fc:db:c3:cc: 45:19:8e:ae:99:20:ce:f7:96:fb:af:88:24:60:8d:2f:7b:0a: e5:98:ea:df:29:49:e9:40:7a:92:f0:ff:c5:04:34:02:e7:ee: 89:02:9d:94:81:e9:58:43:df:81:bf:f2:3c:8a:69:92:5c:52: f9:04:fb:a8:72:08:3b:aa:5b:56:88:41:61:4f:f7:99:6e:b4: 69:b9:09:68:11:52:ec:49:e3:d1:a3:dd:e8:ce:a9:2a:74:13: 68:70:56:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUwNzAzMDIxNjA4WhcNMjUwNzEwMDIxNjA4WjAYMRYwFAYD VQQDEw02ODY1ZTdlOC0yOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvqLFc+BTt5ic2ZIQjEIxyUiOIe/c1Jnv1BNbDw2MN11qf5GIT16dCaIC4g1 rwplkTh1cEa51ITB31rDHDdw+jKAAoGgrYEaov3VsBqzB8qA3X/6pqRHNsglqtwA W5l4182kIujUCxpBjhpY6roa0/OPxuedJo9rTzU+aKzJyGLQ0/aRNzmfTIzrE1cE yhiBB21N4yn667XDu6g93qIh/AdXekXEDYPaq2RYwpPQEk12D8yMoebH5neO1/oU hBy8G5d3HLiQW2VY8VSZBDNbiRnhbqEesoTf8ZXTTmuPSY++IxWiVfz3wqcTY8ez I160gg34WQvOaRc+VPlB4bubfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaL+pqW 8+gd4AIBTjS+omlOgvjxMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcCnELjdinBt52wrZXvtQRODeNGcfbSe9DjnizFzOmXX5dCQuIspmY Ps4nzIWBLHtiV9rjiHbkbnzZOCgKhx5cdbwxA2OPcECDHJO9Lr5SQwjvT2WNaMyO h14FBNWpB0w9boL44nhLuydczT3jODPTv/Nkl+3ciis6XMzvvh+oYIrLVDahUpNj uz8IQo0+qT6SUcq9rIqeMADvCztt0vzbw8xFGY6umSDO95b7r4gkYI0vewrlmOrf KUnpQHqS8P/FBDQC5+6JAp2UgelYQ9+Bv/I8immSXFL5BPuocgg7qltWiEFhT/eZ brRpuQloEVLsSePRo93ozqkqdBNocFa8 -----END CERTIFICATE-----Generated at Thu Jul 3 20:46:24 2025 by rpki-client