$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json) Hash identifier: klyuYAR7g1AR3fOlBL2CsHQPp57J29Rx+WuqqtBeLWI= Subject key identifier: E5:92:65:48:A6:E5:23:65:1F:90:DD:7D:19:73:07:75:BC:5B:8D:70 Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft Manifest number: 06E4 Signing time: Sat 28 Jun 2025 21:38:35 +0000 Manifest this update: Sat 28 Jun 2025 21:38:35 +0000 Manifest next update: Sat 05 Jul 2025 21:38:35 +0000 Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: cW4H/v5lEwbo/ThwLfa2kivcXOYRT7mS2xeWXDnicTU=) 2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: Jun 28 21:38:35 2025 GMT Not After : Jul 5 21:38:35 2025 GMT Subject: CN=686060db-948e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:73:26:d0:da:54:8f:4e:13:06:81:28:02: c4:b5:36:b4:2b:a0:6a:cb:f5:19:b6:60:1d:a3:19: a5:24:cc:ff:aa:1c:ae:66:aa:62:c3:01:bb:bc:6d: 5b:42:95:de:b9:b8:9f:27:43:0b:5d:ae:c1:61:09: d9:ee:7f:97:7e:c8:32:31:a5:45:f9:48:6e:b7:c8: fe:d7:f9:c3:8b:5c:06:02:44:89:8a:2f:b2:16:0e: 15:20:e0:7a:f2:37:e9:d4:96:e5:70:76:27:6b:ba: 03:d9:2a:24:d7:6b:ac:0c:9b:0b:b2:ad:bf:a3:ba: e4:79:26:3e:09:c3:56:fa:32:63:d4:1e:d4:f8:83: aa:82:d4:be:98:85:22:8b:71:66:96:0c:05:c3:06: ea:8f:0a:cc:6d:0c:86:e5:2d:b4:b4:f4:d9:4a:28: 5b:1d:31:0f:29:0c:ce:a4:9f:7e:f3:bd:ed:65:74: 0f:44:2a:48:a2:99:43:f1:fe:7f:72:42:92:cc:a7: bf:ea:36:8d:13:c3:33:46:d2:49:e8:bc:fa:77:e4: ef:dd:0d:c5:78:cb:37:bb:e4:23:7a:c9:18:73:08: 20:69:fb:84:f0:fa:dd:dc:d9:0b:af:b6:73:e9:37: bf:71:b6:70:a9:23:62:14:a2:75:58:16:0b:f6:b2: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:65:48:A6:E5:23:65:1F:90:DD:7D:19:73:07:75:BC:5B:8D:70 X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7a:df:20:fe:c5:61:39:c4:31:c0:1f:04:2a:3f:bd:b0:7f: c9:7a:d9:d3:17:3c:b4:06:d5:a4:cc:95:b9:fd:4a:c0:47:57: eb:b3:8b:a9:78:97:ca:d4:91:92:34:c9:cb:9a:0e:76:2d:63: 18:ac:e9:a6:7c:73:33:fb:7d:2b:6b:13:17:0b:e4:66:d7:3b: 52:e6:8f:3a:36:eb:2b:a9:31:51:d3:1a:f0:e1:8d:8c:9f:9c: 5b:f4:a6:4b:44:35:11:e6:c9:44:a5:d3:0e:e7:e1:fc:df:0d: 7b:67:f1:30:5d:3d:e3:16:4c:a7:01:a8:55:a4:cc:d8:e2:ec: be:68:6a:bc:44:27:e3:c0:4f:f2:7b:31:ab:85:95:25:90:d8: ef:5a:68:49:75:de:0d:d3:4e:0d:6d:4d:8e:25:e0:9e:c4:08: 70:27:12:51:e3:22:a3:f6:6a:ae:04:dc:01:78:e0:a4:90:08: 18:f4:2b:b0:8e:3a:af:b2:7b:b5:c2:78:62:3c:65:e6:28:a8: 47:34:60:04:a8:48:ce:27:3c:0c:45:eb:38:99:f2:fe:48:5b: 1b:81:bd:65:36:db:40:93:42:b9:cb:57:a5:aa:f6:f0:5a:f9: 19:6e:95:a6:01:80:61:81:b4:81:6b:83:db:db:48:5c:58:6a: 79:0c:65:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjUwNjI4MjEzODM1WhcNMjUwNzA1MjEzODM1WjAYMRYwFAYD VQQDEw02ODYwNjBkYi05NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3xzJtDaVI9OEwaBKALEtTa0K6Bqy/UZtmAdoxmlJMz/qhyuZqpiwwG7vG1b QpXeubifJ0MLXa7BYQnZ7n+XfsgyMaVF+Uhut8j+1/nDi1wGAkSJii+yFg4VIOB6 8jfp1JblcHYna7oD2Sok12usDJsLsq2/o7rkeSY+CcNW+jJj1B7U+IOqgtS+mIUi i3FmlgwFwwbqjwrMbQyG5S20tPTZSihbHTEPKQzOpJ9+873tZXQPRCpIoplD8f5/ ckKSzKe/6jaNE8MzRtJJ6Lz6d+Tv3Q3FeMs3u+QjeskYcwggafuE8Prd3NkLr7Zz 6Te/cbZwqSNiFKJ1WBYL9rIDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWSZUim 5SNlH5DdfRlzB3W8W41wMB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ dERfVlExaVRqZEh6R2hhUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmet8g/sVhOcQxwB8EKj+9sH/JetnTFzy0BtWkzJW5/UrAR1frs4up eJfK1JGSNMnLmg52LWMYrOmmfHMz+30raxMXC+Rm1ztS5o86NusrqTFR0xrw4Y2M n5xb9KZLRDUR5slEpdMO5+H83w17Z/EwXT3jFkynAahVpMzY4uy+aGq8RCfjwE/y ezGrhZUlkNjvWmhJdd4N004NbU2OJeCexAhwJxJR4yKj9mquBNwBeOCkkAgY9Cuw jjqvsnu1wnhiPGXmKKhHNGAEqEjOJzwMRes4mfL+SFsbgb1lNttAk0K5y1elqvbw WvkZbpWmAYBhgbSBa4Pb20hcWGp5DGXk -----END CERTIFICATE-----Generated at Mon Jun 30 19:49:29 2025 by rpki-client