$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: Zq5TaxGOUB6Mke4NZS/64S/5+5FOFBm6CSLPPO4E7+s= Subject key identifier: D9:68:B1:5A:65:9C:99:A0:10:7C:20:13:73:71:B2:F5:2D:76:7B:00 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3F72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3B05 Signing time: Wed 02 Jul 2025 14:20:19 +0000 Manifest this update: Wed 02 Jul 2025 14:20:18 +0000 Manifest next update: Wed 09 Jul 2025 14:20:18 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: R0TxTAQjdRxDluMdQVaPl23Svulw92udTj6F3WBqQwg=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: PALIyVWAsvtscgbg+sm73eiiYRuD68MSbPN0evXTaxE=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: XIkS3fiVeDxNk75oObZc/USCn6ndycSaKmVzL41B8c0=) 4: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: GhiisK+xkE915yTtyPUFYsaGYRY3S2Kd3NQqsg2cf3U=) 5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: YU4YZ74T7xW8XI8cuLhtjNp6mdFgmcLPCumM3sCTd+o=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 4LrbAymfyErsiUGk8ioJ8VeDxysNk9CIt+uac7LIaSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16242 (0x3f72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Jul 2 14:20:18 2025 GMT Not After : Jul 9 14:20:18 2025 GMT Subject: CN=68654023-62d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:a4:4c:e4:b6:9b:f5:aa:52:8b:62:05:b1: 1e:0a:30:70:1f:c9:86:02:15:b3:b6:f4:03:5b:e2: 62:f1:c9:a5:07:02:1d:b4:27:22:aa:62:5f:5a:d4: 23:b5:7e:7b:f2:f1:1b:f2:20:cb:e5:fa:e1:24:27: ab:90:21:a2:a3:67:1b:5a:72:ba:6e:59:2f:7e:04: e1:57:1c:f4:d7:50:03:a7:88:c9:7f:74:88:10:ef: 2d:76:76:c3:04:aa:24:2f:08:2c:58:db:5d:94:ff: 4d:39:6f:da:83:a8:d8:50:a0:e7:9a:62:fd:37:9c: 9e:28:6e:f2:12:9e:36:45:be:10:e2:6e:6a:14:04: 5f:14:b1:6d:97:b8:eb:8b:bf:7f:62:65:a1:86:26: c0:3b:08:90:66:ae:2e:04:28:aa:73:bc:9b:b5:89: 21:bf:6f:37:e9:9f:ee:a5:a3:40:7e:8d:6d:4a:6c: 09:8c:92:81:68:f8:7d:76:34:91:6c:09:95:8c:a4: f2:76:31:67:9a:8a:5f:ff:2e:2c:61:e4:46:75:5d: b1:9a:1c:fe:49:0f:9b:5b:d4:3b:6d:76:3d:4c:c7: 7e:3c:00:c3:48:b1:f4:dc:aa:d7:fa:10:54:8a:d0: 98:62:96:51:6e:e1:05:fd:72:70:54:d2:d8:2b:90: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:68:B1:5A:65:9C:99:A0:10:7C:20:13:73:71:B2:F5:2D:76:7B:00 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6c:d0:d6:15:f5:b5:d1:12:f1:25:65:25:78:ec:90:ee:b0: 41:c6:2e:76:94:6a:0f:83:62:88:b8:2b:8a:4c:bd:23:d9:dd: 74:7d:67:94:04:da:90:c6:2d:6e:35:39:e4:32:bd:6f:b6:a7: ff:06:5b:57:11:fa:4e:9e:e5:bc:5b:ea:cd:cf:7d:4d:f5:8c: ce:7b:b4:24:13:25:5d:46:3e:82:0d:ad:fb:79:c1:3e:a3:54: d2:40:51:01:25:74:bb:97:95:79:ed:14:ad:25:4d:82:1f:48: 40:54:c6:72:02:b5:d2:64:6f:46:c6:a0:83:0f:ce:0e:12:a8: 56:b3:ce:90:56:86:1c:de:02:15:57:73:5f:2d:15:21:d8:7f: 38:61:98:55:38:d5:67:37:23:d4:f9:f8:13:a9:a0:eb:16:47: 84:c1:08:30:d2:ea:58:1b:58:94:96:97:be:61:38:f2:fd:8e: bb:72:0d:37:bc:d4:00:a5:ce:1a:29:2b:ae:c5:eb:1d:f6:4c: c4:e1:24:dc:0d:5d:e6:d4:78:5f:d9:6e:9d:e1:28:e7:c7:c3: 04:ef:79:18:3a:02:b1:8b:9d:7e:63:d2:26:95:9c:f5:03:d5: 7f:a7:f7:2e:28:6e:bc:7d:2d:72:52:c0:60:e5:20:05:ee:a8: 72:d4:6b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUwNzAyMTQyMDE4WhcNMjUwNzA5MTQyMDE4WjAYMRYwFAYD VQQDEw02ODY1NDAyMy02MmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugOkTOS2m/WqUotiBbEeCjBwH8mGAhWztvQDW+Ji8cmlBwIdtCciqmJfWtQj tX578vEb8iDL5frhJCerkCGio2cbWnK6blkvfgThVxz011ADp4jJf3SIEO8tdnbD BKokLwgsWNtdlP9NOW/ag6jYUKDnmmL9N5yeKG7yEp42Rb4Q4m5qFARfFLFtl7jr i79/YmWhhibAOwiQZq4uBCiqc7ybtYkhv2836Z/upaNAfo1tSmwJjJKBaPh9djSR bAmVjKTydjFnmopf/y4sYeRGdV2xmhz+SQ+bW9Q7bXY9TMd+PADDSLH03KrX+hBU itCYYpZRbuEF/XJwVNLYK5AqEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlosVpl nJmgEHwgE3NxsvUtdnsAMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsbNDWFfW10RLxJWUleOyQ7rBBxi52lGoPg2KIuCuKTL0j2d10fWeU BNqQxi1uNTnkMr1vtqf/BltXEfpOnuW8W+rNz31N9YzOe7QkEyVdRj6CDa37ecE+ o1TSQFEBJXS7l5V57RStJU2CH0hAVMZyArXSZG9GxqCDD84OEqhWs86QVoYc3gIV V3NfLRUh2H84YZhVONVnNyPU+fgTqaDrFkeEwQgw0upYG1iUlpe+YTjy/Y67cg03 vNQApc4aKSuuxesd9kzE4STcDV3m1Hhf2W6d4Sjnx8ME73kYOgKxi51+Y9ImlZz1 A9V/p/cuKG68fS1yUsBg5SAF7qhy1GtX -----END CERTIFICATE-----Generated at Wed Jul 2 16:07:08 2025 by rpki-client