$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: wB48keqiIKj5WL8bPmr0tu25FbBJVoEj4hVwEG8kFU0= Subject key identifier: 4A:60:75:12:0B:5E:8B:9D:B5:6D:91:3A:B6:09:65:7F:09:9D:2F:0F Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 080A Signing time: Mon 30 Jun 2025 21:05:15 +0000 Manifest this update: Mon 30 Jun 2025 21:05:14 +0000 Manifest next update: Mon 07 Jul 2025 21:05:14 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: Fx+MZLoSkVeMIa9FGeDeaCv0nP87Oshu4VcQ5Rpv0pU=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: Jun 30 21:05:14 2025 GMT Not After : Jul 7 21:05:14 2025 GMT Subject: CN=6862fc0a-1e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:12:4f:f4:db:83:cd:76:07:b0:fb:68:74: ea:ba:4c:58:df:d7:3b:76:e1:62:0a:a7:79:4b:2d: bc:e9:8b:86:55:7b:47:1c:1d:fe:13:81:0f:42:e2: 78:25:e2:1c:a4:84:62:99:1b:b3:d6:2b:55:40:17: 7b:7e:74:16:74:23:cc:71:07:0a:32:26:ff:23:d3: 85:6a:bd:2b:fb:45:2f:1a:56:fa:64:e9:8d:71:4f: 52:4a:83:77:f7:34:97:f4:b9:64:91:6b:f1:d7:83: b9:fe:5f:65:ec:7f:bf:a1:c9:9d:03:07:a5:25:e9: 99:66:99:14:c0:23:6d:1a:80:8a:28:5b:c8:ba:28: 08:47:21:b5:6f:cd:ad:0d:5f:b8:f1:3f:5c:03:0a: 17:d4:64:b7:95:33:ec:b3:36:73:fc:d2:8c:1b:d3: 67:58:89:30:5b:01:36:14:5d:d7:8f:68:ea:59:26: 1a:00:88:c2:6d:52:47:20:d6:0b:93:3d:61:d7:d3: 38:e7:bd:99:72:7f:ab:74:95:39:d1:8b:80:66:67: 1b:97:48:ad:b8:6a:1e:4f:ab:5f:98:cf:06:2c:74: 25:63:11:a0:27:73:f4:ed:fa:52:3a:48:80:7c:ca: e8:4d:1c:e2:fa:ab:39:47:fd:db:c9:e3:1c:84:bf: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:60:75:12:0B:5E:8B:9D:B5:6D:91:3A:B6:09:65:7F:09:9D:2F:0F X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:53:b3:f0:df:99:cb:d6:0f:63:f6:85:20:7f:55:9c:ec:2e: e7:9e:09:37:c7:75:fc:a1:19:03:b5:92:c2:0e:f2:aa:35:1a: 39:f3:ae:11:d9:12:a1:1a:ad:6c:6a:22:cf:79:fb:3a:84:2e: 6d:5e:2f:30:bc:49:bc:90:2e:e7:9f:05:ae:26:92:e9:6a:43: 75:59:5a:d9:3d:96:19:f5:ef:90:e7:12:30:e1:8f:d3:91:c1: 52:18:2b:8e:16:23:ac:e2:5d:8a:00:06:da:e8:9d:fd:58:a5: 46:22:a7:37:0b:6e:7f:bc:93:9d:25:6d:fa:06:a0:ed:6c:ca: 1c:c7:3b:8a:1d:2c:03:fa:48:7a:02:f4:bd:75:ee:07:7c:f3: ab:7d:46:e1:fe:5c:63:d0:31:85:1f:b8:46:1b:2f:a2:d6:6b: 9b:1c:c2:10:d4:ea:87:9a:ca:d9:9a:b6:dd:86:b0:4b:d9:3f: 77:0b:17:c7:df:80:f1:3f:01:4c:0b:e7:9b:97:a4:d4:d9:86: ce:2f:a3:39:72:04:87:0c:14:d9:25:d8:07:de:f7:87:dd:d8: 35:6d:cb:e2:cf:bf:0e:96:2b:31:b4:0a:30:4e:b5:98:59:0f: 40:e8:96:f4:31:63:6f:c3:35:a1:ef:99:f1:ec:87:c8:fc:72: 9b:06:12:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUwNjMwMjEwNTE0WhcNMjUwNzA3MjEwNTE0WjAYMRYwFAYD VQQDEw02ODYyZmMwYS0xZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvisST/Tbg812B7D7aHTqukxY39c7duFiCqd5Sy286YuGVXtHHB3+E4EPQuJ4 JeIcpIRimRuz1itVQBd7fnQWdCPMcQcKMib/I9OFar0r+0UvGlb6ZOmNcU9SSoN3 9zSX9LlkkWvx14O5/l9l7H+/ocmdAwelJemZZpkUwCNtGoCKKFvIuigIRyG1b82t DV+48T9cAwoX1GS3lTPsszZz/NKMG9NnWIkwWwE2FF3Xj2jqWSYaAIjCbVJHINYL kz1h19M4572Zcn+rdJU50YuAZmcbl0ituGoeT6tfmM8GLHQlYxGgJ3P07fpSOkiA fMroTRzi+qs5R/3byeMchL+HtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpgdRIL XoudtW2ROrYJZX8JnS8PMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDU7Pw35nL1g9j9oUgf1Wc7C7nngk3x3X8oRkDtZLCDvKqNRo5864R 2RKhGq1saiLPefs6hC5tXi8wvEm8kC7nnwWuJpLpakN1WVrZPZYZ9e+Q5xIw4Y/T kcFSGCuOFiOs4l2KAAba6J39WKVGIqc3C25/vJOdJW36BqDtbMocxzuKHSwD+kh6 AvS9de4HfPOrfUbh/lxj0DGFH7hGGy+i1mubHMIQ1OqHmsrZmrbdhrBL2T93CxfH 34DxPwFMC+ebl6TU2YbOL6M5cgSHDBTZJdgH3veH3dg1bcviz78OlisxtAowTrWY WQ9A6Jb0MWNvwzWh75nx7IfI/HKbBhKo -----END CERTIFICATE-----Generated at Wed Jul 2 21:47:32 2025 by rpki-client