$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: N4QJbHfdkoO+sfasVAGvHDAU/UAAeCXCOShP9dmyYWs= Subject key identifier: 80:7E:EF:D8:AD:52:88:3C:9E:13:D4:0C:97:30:0C:C9:8B:9D:24:C9 Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 01FC Signing time: Thu 03 Jul 2025 02:27:50 +0000 Manifest this update: Thu 03 Jul 2025 02:27:49 +0000 Manifest next update: Thu 10 Jul 2025 02:27:49 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: TIP2SeiSEuuy2u20Ff5OvIhK+PjoADZx/hOEYYWTAFY=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: M5APD5jLzCTS+EqF5L/kaW7FUXSVgVVwOlYb/pQ9rq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Jul 3 02:27:49 2025 GMT Not After : Jul 10 02:27:49 2025 GMT Subject: CN=6865eaa6-61d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:75:19:e5:69:ae:20:e6:47:4d:5e:bc:a3: 10:c7:bb:2c:f8:be:72:68:08:96:9f:ab:01:84:67: 33:ed:35:86:cf:d2:18:0a:00:d8:b7:af:76:3d:ac: ed:5b:c1:66:1f:30:6f:8e:09:ab:4c:24:ff:2e:1d: 92:6a:89:e3:15:05:ed:59:a4:67:77:24:44:b0:e7: 87:00:0e:b4:71:2e:4b:50:23:e8:72:74:ed:70:95: 18:b6:44:42:83:c1:9b:a0:37:0c:ef:64:01:97:62: 69:c7:81:ba:16:7b:bc:1d:b6:33:8f:88:eb:d8:b6: b6:8b:d5:46:10:65:e1:a8:d5:8f:32:85:ec:f6:40: 9a:38:6e:f4:ce:64:2e:0c:10:db:99:24:4f:b2:c6: de:b3:7e:03:bb:91:53:99:93:83:b3:ea:39:43:07: 2c:41:e3:d7:99:8b:28:09:e6:0d:1b:7e:b2:e2:d5: 0f:91:5c:bd:5e:71:f2:78:91:d7:5e:a8:86:a0:0a: 3e:91:5c:b8:53:65:15:76:5e:1b:69:b7:60:6c:aa: 9c:4f:44:ed:bc:89:aa:0f:f6:3f:42:4d:40:4a:74: 24:4f:d3:8f:dd:da:4a:bb:e4:50:cd:78:3a:a8:54: 23:19:22:c6:38:90:9e:27:80:a6:02:cb:f1:88:07: 5c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:EF:D8:AD:52:88:3C:9E:13:D4:0C:97:30:0C:C9:8B:9D:24:C9 X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:08:5e:4d:de:5a:16:93:12:1f:a8:1b:cc:70:95:d7:2f:24: be:71:dc:96:f9:96:9c:bb:a8:ff:4f:4b:18:51:2c:1d:2c:5d: a8:3e:01:3d:c3:92:eb:ae:2a:4c:5b:8a:c2:75:89:73:27:2b: e1:ed:90:04:86:fd:38:41:46:14:33:64:9f:f2:ef:9d:54:3a: 80:d9:b6:68:e0:79:79:1d:e1:20:67:a4:ae:a4:04:af:6a:5a: 10:99:0d:14:28:a2:8b:5a:b7:48:be:89:6b:e4:7e:14:a8:fe: cd:98:35:7d:13:b0:1a:02:ec:38:7f:95:8f:15:28:b5:9b:6a: a5:29:34:3e:3a:aa:75:e0:47:77:14:43:4e:06:66:53:c8:c2: af:fb:ca:ec:62:5a:69:89:e4:f7:f6:4d:46:62:56:c9:16:3a: 37:41:00:ba:5d:0b:7e:42:9f:db:d4:a7:4e:12:28:e6:46:25: 1e:41:c6:35:02:48:d6:0d:21:50:b8:0a:67:09:95:67:c2:ac: c4:ff:e8:95:27:31:7f:b0:9c:a7:19:b3:f5:67:49:53:9f:ae: c4:53:3d:0d:47:3d:1d:43:67:e7:a0:65:1b:e2:d7:1b:9a:09: 0c:e9:ee:70:76:14:4e:60:2c:31:56:52:2e:58:77:71:ed:cf: b2:4d:0c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUwNzAzMDIyNzQ5WhcNMjUwNzEwMDIyNzQ5WjAYMRYwFAYD VQQDEw02ODY1ZWFhNi02MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc11GeVpriDmR01evKMQx7ss+L5yaAiWn6sBhGcz7TWGz9IYCgDYt692Pazt W8FmHzBvjgmrTCT/Lh2SaonjFQXtWaRndyREsOeHAA60cS5LUCPocnTtcJUYtkRC g8GboDcM72QBl2Jpx4G6Fnu8HbYzj4jr2La2i9VGEGXhqNWPMoXs9kCaOG70zmQu DBDbmSRPssbes34Du5FTmZODs+o5QwcsQePXmYsoCeYNG36y4tUPkVy9XnHyeJHX XqiGoAo+kVy4U2UVdl4babdgbKqcT0TtvImqD/Y/Qk1ASnQkT9OP3dpKu+RQzXg6 qFQjGSLGOJCeJ4CmAsvxiAdcdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB+79it Uog8nhPUDJcwDMmLnSTJMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATCF5N3loWkxIfqBvMcJXXLyS+cdyW+Zacu6j/T0sYUSwdLF2oPgE9 w5LrripMW4rCdYlzJyvh7ZAEhv04QUYUM2Sf8u+dVDqA2bZo4Hl5HeEgZ6SupASv aloQmQ0UKKKLWrdIvolr5H4UqP7NmDV9E7AaAuw4f5WPFSi1m2qlKTQ+Oqp14Ed3 FENOBmZTyMKv+8rsYlppieT39k1GYlbJFjo3QQC6XQt+Qp/b1KdOEijmRiUeQcY1 AkjWDSFQuApnCZVnwqzE/+iVJzF/sJynGbP1Z0lTn67EUz0NRz0dQ2fnoGUb4tcb mgkM6e5wdhROYCwxVlIuWHdx7c+yTQxF -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:04 2025 by rpki-client