$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft File: GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json) Hash identifier: YzdSFfKiWBtU5dwMIVM6BoLFjWM/ajmeQ9deDQtNNVI= Subject key identifier: EC:59:8F:99:D8:71:9C:2E:C0:DB:39:C4:18:4D:32:7F:3B:D1:31:29 Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 Certificate issuer: /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft Manifest number: 04E0 Signing time: Thu 03 Jul 2025 00:05:02 +0000 Manifest this update: Thu 03 Jul 2025 00:05:01 +0000 Manifest next update: Thu 10 Jul 2025 00:05:01 +0000 Files and hashes: 1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: lLNOrQr9o7iCTFhe2rBs0UOK6lIFYh2NT7h0ul+8M+E=) 2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: 40Tp9vYlwNjlXHzULzghK25QKYAH3IMjVH7JAvH5N/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Validity Not Before: Jul 3 00:05:01 2025 GMT Not After : Jul 10 00:05:01 2025 GMT Subject: CN=6865c92d-c055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:c2:b0:4f:a4:0a:36:c9:43:e1:e4:4a:16: a2:d9:c5:e0:cb:d8:21:80:26:7c:fb:c0:3d:ee:1b: 58:81:81:df:00:56:89:e1:59:14:89:5e:10:0e:d7: 2b:3a:8e:49:e3:98:19:57:4f:66:b3:d0:bd:04:f2: ca:01:65:e5:c1:2d:89:94:66:d5:e9:31:95:5d:99: 94:aa:d8:15:ce:6c:38:2c:5f:3a:a6:6f:9b:f2:2e: 86:ad:8a:ae:71:40:8a:44:bf:b0:1f:a1:8c:eb:53: d3:79:70:4b:47:1e:f9:91:16:8e:55:7b:5a:72:60: 6d:c8:dc:26:4b:e1:0e:f7:19:ed:c7:e3:1c:a8:78: 07:22:84:29:3f:7a:08:68:9c:4c:4c:3a:d9:65:05: 53:af:3b:f6:66:b9:2d:db:eb:b8:b6:bd:eb:47:d5: 5b:3e:d6:c6:bc:25:bc:c2:55:f5:46:8d:a5:2a:1c: 8d:52:c1:93:f3:7e:25:64:4c:ac:c4:7d:5f:c6:91: e4:db:30:1a:1a:a3:14:3f:ee:bc:09:f9:0f:98:53: 26:3a:91:51:a2:26:66:68:64:86:3f:69:75:1d:62: 44:ae:c5:52:89:11:8b:78:04:23:a5:0f:e0:4c:e2: b4:aa:ae:64:ff:7f:7e:6f:5f:1f:58:23:b7:cf:77: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:59:8F:99:D8:71:9C:2E:C0:DB:39:C4:18:4D:32:7F:3B:D1:31:29 X509v3 Authority Key Identifier: keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ad:c6:59:80:d2:05:f2:8d:8d:a8:09:37:64:5d:79:91:a9: b5:53:02:e3:77:13:ff:2e:99:d1:ee:26:48:9c:8d:38:df:d1: a4:fd:f4:32:87:1c:da:be:d4:10:29:81:80:d3:0f:81:52:a1: 84:83:aa:d0:40:62:4f:20:b5:f4:9f:82:6a:83:64:09:40:b5: b7:11:64:3e:e9:10:23:cf:53:83:4a:7d:64:fb:e7:5f:96:7b: 06:e2:c2:d2:a0:94:0f:a5:4d:33:16:a2:ac:66:13:2c:7d:30: 13:6a:d5:fd:3d:13:aa:d5:00:84:5e:6f:b1:63:c7:e8:29:93: d2:7a:a9:df:96:5e:cf:40:1e:e7:e4:58:bc:b8:c4:8d:56:d4: 20:2a:38:c9:9c:52:6d:7b:9c:42:a9:15:15:e7:ce:de:a9:d1: 29:6e:2b:49:09:cd:8f:7c:56:0d:c8:23:aa:a7:b5:1c:99:5f: cc:0e:12:d5:6b:9b:c5:f7:c9:f9:5a:f6:d6:98:40:b5:32:97: 3b:31:47:f3:66:7e:5e:24:21:7a:4d:f4:31:5d:f7:b0:58:12: 16:c3:d5:6d:26:8b:db:78:aa:c4:3c:33:95:05:74:98:df:ba: 63:05:3e:ba:51:50:2d:2d:ae:cb:58:c5:92:bd:2a:ce:0c:99: 20:3c:64:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0RjgxMTAvBgNVBAUTKDFBN0E1MEQ1MjE1QTkyNTkxMTA0MDZCMEI2OTM2RkFF MTRFQTdEODMwHhcNMjUwNzAzMDAwNTAxWhcNMjUwNzEwMDAwNTAxWjAYMRYwFAYD VQQDEw02ODY1YzkyZC1jMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHzCsE+kCjbJQ+HkShai2cXgy9ghgCZ8+8A97htYgYHfAFaJ4VkUiV4QDtcr Oo5J45gZV09ms9C9BPLKAWXlwS2JlGbV6TGVXZmUqtgVzmw4LF86pm+b8i6GrYqu cUCKRL+wH6GM61PTeXBLRx75kRaOVXtacmBtyNwmS+EO9xntx+McqHgHIoQpP3oI aJxMTDrZZQVTrzv2Zrkt2+u4tr3rR9VbPtbGvCW8wlX1Ro2lKhyNUsGT834lZEys xH1fxpHk2zAaGqMUP+68CfkPmFMmOpFRoiZmaGSGP2l1HWJErsVSiRGLeAQjpQ/g TOK0qq5k/39+b18fWCO3z3c6jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxZj5nY cZwuwNs5xBhNMn870TEpMB8GA1UdIwQYMBaAFBp6UNUhWpJZEQQGsLaTb64U6n2D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRGOC82NTQ4NjFEODIw RjUxMUVDQTY3NUM0NDJDNEY5QUUwMi9HbnBRMVNGYWtsa1JCQWF3dHBOdnJoVHFm WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ducFExU0Zha2xrUkJBYXd0cE52cmhUcWZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRGOC82NTQ4NjFEODIwRjUxMUVDQTY3NUM0NDJDNEY5QUUwMi9HbnBRMVNGYWts a1JCQWF3dHBOdnJoVHFmWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADrcZZgNIF8o2NqAk3ZF15kam1UwLjdxP/LpnR7iZInI0439Gk/fQy hxzavtQQKYGA0w+BUqGEg6rQQGJPILX0n4Jqg2QJQLW3EWQ+6RAjz1ODSn1k++df lnsG4sLSoJQPpU0zFqKsZhMsfTATatX9PROq1QCEXm+xY8foKZPSeqnfll7PQB7n 5Fi8uMSNVtQgKjjJnFJte5xCqRUV587eqdEpbitJCc2PfFYNyCOqp7UcmV/MDhLV a5vF98n5WvbWmEC1Mpc7MUfzZn5eJCF6TfQxXfewWBIWw9VtJovbeKrEPDOVBXSY 37pjBT66UVAtLa7LWMWSvSrODJkgPGQx -----END CERTIFICATE-----Generated at Fri Jul 4 03:53:22 2025 by rpki-client