$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft File: gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json) Hash identifier: xfMJ4CBoGTHy6IYV349KqOceezMHGj8tPaQfxfSz7sQ= Subject key identifier: 56:27:D7:44:5F:E4:98:85:93:8F:32:0D:5C:94:70:18:54:83:05:72 Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 Certificate issuer: /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft Manifest number: C2 Signing time: Tue 01 Jul 2025 06:29:17 +0000 Manifest this update: Tue 01 Jul 2025 06:29:16 +0000 Manifest next update: Tue 08 Jul 2025 06:29:16 +0000 Files and hashes: 1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: XcF4sFIYqWRXZthuJ2brjPUBJp7ufvPhTIzgCQFiENQ=) 2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: KhqMoTs+Qi/II5aRP9wPpcsu1xRmCyMAj25hDB2Fy0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Validity Not Before: Jul 1 06:29:16 2025 GMT Not After : Jul 8 06:29:16 2025 GMT Subject: CN=6863803c-de9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e0:cd:78:51:a1:80:71:01:44:98:a4:d2:f7: 4d:47:05:8c:50:36:97:6f:69:00:7d:0f:a9:8e:76: f9:75:e2:e1:70:4c:14:c1:6b:a6:ec:02:f5:f4:fc: fb:92:fc:31:32:05:a6:33:91:03:02:84:5f:e4:6c: 84:c0:be:f5:32:77:a5:11:ad:e8:d7:37:c5:ae:d3: d4:71:8c:cf:26:f3:63:3d:b2:bc:8c:61:be:3b:c8: 69:54:5e:d4:5f:75:83:72:5d:ca:72:77:e0:79:61: dd:38:27:d0:ee:ee:9a:c3:f4:92:41:ee:f6:9b:ec: 10:7d:0b:e8:06:5f:65:e7:cf:88:45:da:1d:9f:e7: bf:10:59:0a:a9:72:85:00:99:4b:64:34:44:d6:be: dc:c2:32:d2:1d:81:70:c1:59:5b:09:fd:18:54:46: bb:fa:16:66:b4:12:b8:2e:c4:c0:a3:24:44:89:ca: 4d:ef:44:e2:d5:a2:0c:07:ce:e9:7a:1c:be:b1:45: 88:08:ec:a4:6c:13:07:e7:c2:38:5f:8a:61:f2:25: 54:7c:fb:ad:35:f5:4c:4b:99:5d:6b:c7:bc:f2:45: 86:db:60:24:05:67:a4:c5:fc:11:5e:9b:9f:f3:5c: b7:eb:d8:a4:0f:72:ac:95:5c:7c:47:ce:23:60:8f: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:27:D7:44:5F:E4:98:85:93:8F:32:0D:5C:94:70:18:54:83:05:72 X509v3 Authority Key Identifier: keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:03:81:57:f0:a7:dd:f4:10:6a:09:b0:6c:32:3a:d1:45:52: 41:52:a8:5d:cc:b1:4b:2d:d9:ea:3b:d8:d3:0b:8b:ac:33:2e: 6e:67:fc:06:a2:2f:79:47:6b:f7:1f:b0:42:47:b3:bc:67:58: ea:eb:07:db:31:e9:7e:6f:91:f1:7b:5a:5d:78:77:6c:43:36: 30:01:45:4c:83:c6:e3:61:7c:d6:83:14:87:f2:7e:49:75:9f: dc:39:e5:7e:94:68:72:31:d3:ab:1d:78:5e:7e:7c:36:9d:be: a3:6e:0f:55:bd:2d:db:89:8b:44:f8:6a:24:d4:09:fc:73:29: fb:fd:68:4a:9a:d3:b4:f9:2e:2d:13:56:25:35:a0:14:ee:fb: a4:7f:d8:17:b0:ac:fe:12:9b:1b:f5:55:30:52:0c:f8:aa:23: b1:9c:9e:0b:9a:d6:00:af:e8:76:c0:cb:eb:e4:fd:59:35:52: 02:db:f7:9c:24:66:c5:59:32:f8:69:6b:af:5a:61:be:16:e2: 0e:2b:76:1e:e5:e0:66:2e:8d:ad:c1:7e:44:0f:52:0c:bc:e9: ca:27:73:60:b7:94:a1:e0:57:cb:56:20:6a:81:f0:e6:fe:8a: ee:34:02:00:60:5b:c3:c0:38:fa:75:f0:e6:0d:2c:41:56:7e: a4:88:95:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJFNkExMTAvBgNVBAUTKDgyMzEwMEI3NUU1REQ0MUExRTdDMzI4MUMzNTcxM0Y0 NEJFODZDOTgwHhcNMjUwNzAxMDYyOTE2WhcNMjUwNzA4MDYyOTE2WjAYMRYwFAYD VQQDEw02ODYzODAzYy1kZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzODNeFGhgHEBRJik0vdNRwWMUDaXb2kAfQ+pjnb5deLhcEwUwWum7AL19Pz7 kvwxMgWmM5EDAoRf5GyEwL71MnelEa3o1zfFrtPUcYzPJvNjPbK8jGG+O8hpVF7U X3WDcl3KcnfgeWHdOCfQ7u6aw/SSQe72m+wQfQvoBl9l58+IRdodn+e/EFkKqXKF AJlLZDRE1r7cwjLSHYFwwVlbCf0YVEa7+hZmtBK4LsTAoyREicpN70Ti1aIMB87p ehy+sUWICOykbBMH58I4X4ph8iVUfPutNfVMS5lda8e88kWG22AkBWekxfwRXpuf 81y369ikD3KslVx8R84jYI/cgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYn10Rf 5JiFk48yDVyUcBhUgwVyMB8GA1UdIwQYMBaAFIIxALdeXdQaHnwygcNXE/RL6GyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkU2QS9BRTM3M0Q4NDMy MzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFCb2VmREtCdzFjVDlFdm9i SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqRUF0MTVkMUJvZWZES0J3MWNUOUV2b2JKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkU2QS9BRTM3M0Q4NDMyMzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFC b2VmREtCdzFjVDlFdm9iSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyA4FX8Kfd9BBqCbBsMjrRRVJBUqhdzLFLLdnqO9jTC4usMy5uZ/wG oi95R2v3H7BCR7O8Z1jq6wfbMel+b5Hxe1pdeHdsQzYwAUVMg8bjYXzWgxSH8n5J dZ/cOeV+lGhyMdOrHXhefnw2nb6jbg9VvS3biYtE+Gok1An8cyn7/WhKmtO0+S4t E1YlNaAU7vukf9gXsKz+Epsb9VUwUgz4qiOxnJ4LmtYAr+h2wMvr5P1ZNVIC2/ec JGbFWTL4aWuvWmG+FuIOK3Ye5eBmLo2twX5ED1IMvOnKJ3Ngt5Sh4FfLViBqgfDm /oruNAIAYFvDwDj6dfDmDSxBVn6kiJXU -----END CERTIFICATE-----Generated at Wed Jul 2 07:13:54 2025 by rpki-client