$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: f1kNqZAdbd0KFolki6eoGmcfzaodoD2YDN76KUm+HFo= Subject key identifier: 7C:43:5C:D2:AA:13:69:B3:59:53:92:EE:A9:99:99:17:FD:2F:8B:E7 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 59 Signing time: Sat 23 Aug 2025 07:26:29 +0000 Manifest this update: Sat 23 Aug 2025 07:26:28 +0000 Manifest next update: Sat 30 Aug 2025 07:26:28 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: ni8sx1o2nee7h87ihQ7ODWL6oXL12ghu5t9eZ6sxr70=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: Aug 23 07:26:28 2025 GMT Not After : Aug 30 07:26:28 2025 GMT Subject: CN=68a96d24-e2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:6f:2c:1f:bd:02:59:18:7b:fd:54:27:8f: b0:f4:20:fe:6b:ca:75:1c:cf:c3:91:33:6d:91:b7: 6e:1a:eb:4a:6a:20:11:e2:0b:5a:9a:a0:0b:d2:a3: c0:1f:44:80:df:e1:65:13:62:97:35:8c:7d:1d:96: ca:2b:94:f5:69:4a:05:65:f6:7b:15:9d:d9:bf:82: c9:29:80:d9:32:64:ba:d9:ef:9e:df:93:ac:c1:34: 6c:20:b2:fa:70:b4:37:d0:78:5c:ca:d2:a8:78:27: 3b:ba:28:6a:04:d0:d8:7d:ac:9e:b9:fd:0e:22:06: 1a:d7:70:0c:2f:54:90:74:ce:03:46:e5:ca:dc:40: 83:cf:49:d9:3b:f8:ba:be:3e:3c:d0:43:2e:a5:f2: 21:95:12:2b:0a:5b:dc:4e:8a:43:1b:93:a4:cb:6b: 03:14:cd:2f:3d:48:2b:e6:b7:6e:ff:b8:34:17:e2: bc:27:15:e1:da:3a:db:6c:00:7a:89:c8:96:54:45: 17:bf:92:9a:86:f1:f9:9d:14:db:6e:e6:eb:ef:b9: bd:2d:16:59:44:8d:66:9b:b4:f7:e0:94:d0:f5:9c: 8f:42:c5:4d:40:08:3d:1b:7a:9a:78:a0:8a:dc:62: b9:e6:6c:70:fb:98:f0:09:5c:40:2e:e3:d7:31:23: b1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:43:5C:D2:AA:13:69:B3:59:53:92:EE:A9:99:99:17:FD:2F:8B:E7 X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d1:85:41:52:e8:23:de:24:b8:95:e7:72:b0:ce:be:80:3d: 47:15:af:21:42:de:1f:bd:ff:71:c4:ba:97:25:3f:ad:ca:f8: 5b:a8:31:05:4c:72:45:03:03:01:ab:84:86:75:3c:c4:93:f5: 01:8c:6c:c7:bb:e5:cd:14:da:1f:a1:15:8b:23:c2:24:aa:3d: e9:d9:86:8c:cf:01:84:99:d2:31:27:cf:97:32:f7:a3:ac:37: 80:37:f4:95:46:2b:fc:20:31:26:9c:ee:0e:48:dd:94:84:da: 71:c9:9e:71:2e:9e:88:22:b8:bf:34:b6:2e:55:4f:e3:a1:a0: 3c:29:39:1c:ed:91:d9:30:7f:99:af:ef:56:cf:b3:29:bc:8a: 3d:32:db:bc:a1:52:41:5d:90:ad:71:d3:d7:72:b7:9e:c6:72: ae:ce:e7:ec:68:da:a7:c7:10:ee:6a:ed:7d:4c:ec:80:fc:45: 1f:0f:39:66:85:7b:55:f7:95:d1:fe:44:84:6b:12:47:37:fd: f0:8a:3a:ee:5e:d1:12:f1:0d:ed:bd:93:2c:b8:ed:ba:e4:c6: ec:33:34:0f:d0:b1:c5:b7:e2:bd:76:74:1f:cc:32:bf:da:3f: be:7e:c2:c0:25:f4:35:7a:bd:c3:6a:b0:0d:b5:af:bf:5c:73: 0a:20:00:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTA4MjMwNzI2MjhaFw0yNTA4MzAwNzI2MjhaMBgxFjAUBgNV BAMTDTY4YTk2ZDI0LWUyZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3KW8sH70CWRh7/VQnj7D0IP5rynUcz8ORM22Rt24a60pqIBHiC1qaoAvSo8Af RIDf4WUTYpc1jH0dlsorlPVpSgVl9nsVndm/gskpgNkyZLrZ757fk6zBNGwgsvpw tDfQeFzK0qh4Jzu6KGoE0Nh9rJ65/Q4iBhrXcAwvVJB0zgNG5crcQIPPSdk7+Lq+ PjzQQy6l8iGVEisKW9xOikMbk6TLawMUzS89SCvmt27/uDQX4rwnFeHaOttsAHqJ yJZURRe/kpqG8fmdFNtu5uvvub0tFllEjWabtPfglND1nI9CxU1ACD0bepp4oIrc YrnmbHD7mPAJXEAu49cxI7GfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfENc0qoT abNZU5LuqZmZF/0vi+cwHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RURFLzU5MDREOTcwRkI1QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1D SWFPWW5VZ29hRFlxSDhFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAvRhUFS6CPeJLiV53Kwzr6APUcVryFC3h+9/3HEupclP63K+FuoMQVM ckUDAwGrhIZ1PMST9QGMbMe75c0U2h+hFYsjwiSqPenZhozPAYSZ0jEnz5cy96Os N4A39JVGK/wgMSac7g5I3ZSE2nHJnnEunogiuL80ti5VT+OhoDwpORztkdkwf5mv 71bPsym8ij0y27yhUkFdkK1x09dyt57Gcq7O5+xo2qfHEO5q7X1M7ID8RR8POWaF e1X3ldH+RIRrEkc3/fCKOu5e0RLxDe29kyy47brkxuwzNA/QscW34r12dB/MMr/a P75+wsAl9DV6vcNqsA21r79ccwogAFY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:22 2025 by rpki-client