$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: 21m6WbN1gvQIMX96R6uZXTc9BBN610MZAR2UqbLA5uk= Subject key identifier: D6:92:7D:FA:E4:31:DF:0E:9A:12:7A:B0:1B:81:FB:78:EA:F2:AF:BD Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0BF2 Signing time: Wed 02 Jul 2025 19:01:27 +0000 Manifest this update: Wed 02 Jul 2025 19:01:26 +0000 Manifest next update: Wed 09 Jul 2025 19:01:26 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: XDHBk+EvLG6VygtpyEGvMNeqDoUVWaiagAxmc7d0y+0=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=) 3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: KHc6hdMetfcu7UM69svB42s0SGaTeAMb8i+TaWZ7DWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Jul 2 19:01:26 2025 GMT Not After : Jul 9 19:01:26 2025 GMT Subject: CN=68658207-d057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:d4:90:3a:29:85:1a:b3:ce:95:1b:2d:b3: e0:71:89:fd:6d:51:f8:f3:af:81:88:6f:43:c6:b5: 68:2f:41:2c:95:b7:cf:ac:5e:5e:5d:b7:f5:3a:a7: 94:39:d2:e2:dd:1d:45:0d:b8:0b:31:5a:8e:b0:3c: f0:0e:3a:29:8b:77:ac:72:fb:07:58:f5:06:6b:78: 9f:79:22:c0:ef:53:56:ec:a6:60:bb:f9:51:89:f7: aa:4e:82:e3:b6:ff:1c:d1:92:de:48:1a:49:f0:7b: 84:8b:09:c7:a4:ad:e3:9b:c3:0c:8f:e6:42:d8:e4: c3:e4:5a:cb:a5:f3:85:49:8f:fe:d2:2c:9b:ad:32: ae:ce:f2:fe:67:cc:a9:ea:25:e7:f3:40:54:6e:3f: 75:b1:04:a5:f5:4f:a9:e8:84:4c:0a:0a:5f:0a:68: 80:04:50:95:a8:cc:15:da:65:f8:78:09:90:90:09: 78:de:ad:53:60:12:76:9a:16:eb:3c:56:20:4b:af: b2:02:44:17:68:a0:ca:8f:5c:0c:c1:24:f5:67:39: f1:e8:91:61:a6:4a:05:00:a0:f2:61:44:31:22:5d: c5:91:05:d4:51:18:ac:a4:e8:8b:00:cc:0f:58:21: bc:c8:d9:52:bf:a0:0e:79:73:f7:6b:fb:54:10:9e: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:7D:FA:E4:31:DF:0E:9A:12:7A:B0:1B:81:FB:78:EA:F2:AF:BD X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:76:6f:10:96:dc:c8:87:13:f6:e9:79:11:04:ce:82:a2:82: f3:8a:08:e8:a1:e1:68:6d:1f:fc:8a:bf:3c:5d:ea:21:d3:22: 6b:73:e3:63:dd:1b:4a:ff:70:25:88:1f:f0:c6:0d:36:24:08: 02:8a:76:cb:e2:66:8f:29:02:da:4d:62:1e:99:e3:45:2a:73: 05:80:8d:5c:9c:0e:5b:1d:8b:46:48:3a:fa:fa:b1:c3:76:ab: 80:95:5f:9e:d4:a1:db:e7:f2:c9:a0:75:58:90:f4:d6:47:a3: 3e:1b:df:b5:0c:1d:6f:40:78:55:17:62:76:52:2c:65:0f:fe: aa:91:79:0c:09:cf:16:1e:eb:5a:89:16:63:2b:99:f7:0e:f8: 03:d2:fd:87:80:b6:38:97:7b:9a:6a:cd:fd:43:63:16:e6:68: c9:cb:22:92:df:ad:0c:6d:d8:59:a9:51:ee:80:9f:5a:0c:69: 6a:60:6e:c3:12:f2:5a:f6:a4:80:87:aa:9e:ca:ff:57:20:d7: 74:8a:09:b5:08:57:8a:65:9f:2e:9e:a9:a1:be:df:90:5d:37: 35:c6:a9:91:19:f9:96:4f:18:78:ec:13:c0:f9:a6:f5:e1:a1: c0:9a:57:02:0c:ed:7b:6b:79:42:50:39:ed:75:e2:0d:96:f8: 7a:e9:de:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwNzAyMTkwMTI2WhcNMjUwNzA5MTkwMTI2WjAYMRYwFAYD VQQDEw02ODY1ODIwNy1kMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxvUkDophRqzzpUbLbPgcYn9bVH486+BiG9DxrVoL0EslbfPrF5eXbf1OqeU OdLi3R1FDbgLMVqOsDzwDjopi3escvsHWPUGa3ifeSLA71NW7KZgu/lRifeqToLj tv8c0ZLeSBpJ8HuEiwnHpK3jm8MMj+ZC2OTD5FrLpfOFSY/+0iybrTKuzvL+Z8yp 6iXn80BUbj91sQSl9U+p6IRMCgpfCmiABFCVqMwV2mX4eAmQkAl43q1TYBJ2mhbr PFYgS6+yAkQXaKDKj1wMwST1Zznx6JFhpkoFAKDyYUQxIl3FkQXUURispOiLAMwP WCG8yNlSv6AOeXP3a/tUEJ4KzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaSffrk Md8OmhJ6sBuB+3jq8q+9MB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHdm8QltzIhxP26XkRBM6CooLzigjooeFobR/8ir88Xeoh0yJrc+Nj 3RtK/3AliB/wxg02JAgCinbL4maPKQLaTWIemeNFKnMFgI1cnA5bHYtGSDr6+rHD dquAlV+e1KHb5/LJoHVYkPTWR6M+G9+1DB1vQHhVF2J2UixlD/6qkXkMCc8WHuta iRZjK5n3DvgD0v2HgLY4l3uaas39Q2MW5mjJyyKS360MbdhZqVHugJ9aDGlqYG7D EvJa9qSAh6qeyv9XINd0igm1CFeKZZ8unqmhvt+QXTc1xqmRGfmWTxh47BPA+ab1 4aHAmlcCDO17a3lCUDntdeINlvh66d7i -----END CERTIFICATE-----Generated at Thu Jul 3 06:08:59 2025 by rpki-client