$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: FIdamu9kKo44t51AbxVXr1UYktAcG3EFowWdnxXH1Q8= Subject key identifier: C0:38:B7:07:40:B4:86:FD:98:61:10:C5:4D:9C:F6:59:1C:14:60:BF Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 01B6 Signing time: Wed 02 Jul 2025 17:49:17 +0000 Manifest this update: Wed 02 Jul 2025 17:49:16 +0000 Manifest next update: Wed 09 Jul 2025 17:49:16 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: ZWnj6r55epDRxOlgYdSAlzvR9I2J93OljtNDuxOe8wI=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Jul 2 17:49:16 2025 GMT Not After : Jul 9 17:49:16 2025 GMT Subject: CN=6865711c-29a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:1e:66:06:dc:93:6d:7f:bd:c4:54:43:8c: 37:5d:97:39:a0:fc:99:2c:b1:40:94:c3:15:8d:20: 8b:17:14:f1:66:ba:9c:72:79:e8:ba:d0:92:88:f7: 00:88:da:25:e1:2a:67:83:5c:ed:ff:dc:58:80:ca: 49:9f:af:50:e7:16:6f:1b:7f:65:30:8c:7d:1b:8e: 0c:d0:f0:0b:a3:ba:37:cb:36:31:7a:07:64:99:5e: 78:07:82:40:41:25:58:0e:3e:d8:53:2f:90:94:ae: 5c:4a:4e:c4:af:93:67:9a:4f:da:45:0a:de:fe:89: 76:7c:bb:b1:86:7a:79:52:3a:60:48:d3:bb:19:9f: 6b:0c:fe:fa:5e:a2:37:69:ac:1d:34:09:ee:f2:b8: f2:ff:ab:e2:a8:1d:8e:fa:f7:77:0c:a7:eb:48:a7: 8b:7f:bd:8a:1e:ab:a2:8e:a0:0d:31:7d:0d:45:6f: 1f:47:a0:18:c2:32:a8:0b:31:66:ff:6f:9b:10:b2: 34:b8:35:4a:82:aa:20:9e:1b:ef:e8:7a:df:a3:88: ec:1a:b3:e6:2a:eb:bf:b5:73:d1:f9:6e:38:7b:83: 3b:36:fc:df:26:2e:5e:c7:11:22:36:98:60:9d:84: c8:6c:5f:ff:79:14:ae:7a:30:e6:94:24:db:30:4a: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:38:B7:07:40:B4:86:FD:98:61:10:C5:4D:9C:F6:59:1C:14:60:BF X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ee:09:09:26:3d:47:29:94:0d:aa:78:8a:ae:7e:f2:a9:8a: a3:53:ac:de:b3:62:b3:c4:05:29:e9:d0:b4:67:30:7a:62:02: 03:f7:8c:1d:80:7f:48:6a:a1:40:34:61:98:bf:a4:37:2a:f5: 9f:76:d4:5f:18:e0:a3:33:32:bb:d8:db:8d:73:54:02:2a:a3: 5a:12:c8:ca:07:d4:da:c8:5e:0d:c5:4e:24:fc:a1:8d:00:8d: 3c:02:9e:eb:87:d6:49:61:59:52:80:0c:c3:9b:6f:bf:6b:46: 02:4d:8b:8a:77:ad:ff:12:f4:ea:34:90:9b:f8:72:2c:d6:2a: 8f:08:31:67:4f:cd:ae:fb:65:74:f8:17:e9:bc:20:dc:98:c8: d9:9e:9b:a5:61:1a:28:e8:a7:ec:bd:d5:da:0a:de:9e:74:c5: 27:67:6c:9e:21:96:79:44:bc:46:f6:04:5b:53:1c:b7:9d:07: 9f:1b:f8:43:2b:0a:b3:41:0d:22:04:69:87:bb:cb:fe:f8:63: 01:8c:3a:9b:14:35:e9:9a:73:29:fe:a1:04:c5:2a:00:93:44: ef:85:09:48:41:23:1b:35:87:7e:a8:80:e1:9b:71:02:d4:44: bd:ef:be:d7:fd:a2:44:bc:44:dc:a6:2d:76:50:8f:ed:23:45: 0f:fc:1c:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUwNzAyMTc0OTE2WhcNMjUwNzA5MTc0OTE2WjAYMRYwFAYD VQQDEw02ODY1NzExYy0yOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqIeZgbck21/vcRUQ4w3XZc5oPyZLLFAlMMVjSCLFxTxZrqccnnoutCSiPcA iNol4Spng1zt/9xYgMpJn69Q5xZvG39lMIx9G44M0PALo7o3yzYxegdkmV54B4JA QSVYDj7YUy+QlK5cSk7Er5Nnmk/aRQre/ol2fLuxhnp5UjpgSNO7GZ9rDP76XqI3 aawdNAnu8rjy/6viqB2O+vd3DKfrSKeLf72KHquijqANMX0NRW8fR6AYwjKoCzFm /2+bELI0uDVKgqognhvv6Hrfo4jsGrPmKuu/tXPR+W44e4M7NvzfJi5exxEiNphg nYTIbF//eRSuejDmlCTbMEpNyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA4twdA tIb9mGEQxU2c9lkcFGC/MB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR7gkJJj1HKZQNqniKrn7yqYqjU6zes2KzxAUp6dC0ZzB6YgID94wd gH9IaqFANGGYv6Q3KvWfdtRfGOCjMzK72NuNc1QCKqNaEsjKB9TayF4NxU4k/KGN AI08Ap7rh9ZJYVlSgAzDm2+/a0YCTYuKd63/EvTqNJCb+HIs1iqPCDFnT82u+2V0 +BfpvCDcmMjZnpulYRoo6KfsvdXaCt6edMUnZ2yeIZZ5RLxG9gRbUxy3nQefG/hD KwqzQQ0iBGmHu8v++GMBjDqbFDXpmnMp/qEExSoAk0TvhQlIQSMbNYd+qIDhm3EC 1ES9777X/aJEvETcpi12UI/tI0UP/Bx4 -----END CERTIFICATE-----Generated at Thu Jul 3 23:31:04 2025 by rpki-client