$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: BGBx8edqqrtXCwHuhjhgvPuck0r+LPjZ3RUt6HrkZOc= Subject key identifier: D1:CD:21:49:07:A8:E8:9F:E9:13:79:BE:6B:2A:BB:04:93:78:8C:4A Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0E41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0E37 Signing time: Wed 02 Jul 2025 18:00:10 +0000 Manifest this update: Wed 02 Jul 2025 18:00:10 +0000 Manifest next update: Wed 09 Jul 2025 18:00:10 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: gcv2Qu/px2qyyNN521DsPXiUsHuR7YZdFo7W+/dcEAI=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: XB0QLbbknxQIRTO38MXkPwNFVVbVpdhvXqbqZxANpFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3649 (0xe41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Jul 2 18:00:10 2025 GMT Not After : Jul 9 18:00:10 2025 GMT Subject: CN=686573aa-0851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:bf:59:31:d9:49:a8:71:f8:05:7e:51:0d: f6:62:fc:df:0d:bf:5c:df:f0:b5:22:52:8e:75:ef: 45:b8:4c:2f:75:e0:0a:9d:58:fe:ba:84:74:5a:49: f9:82:bf:e7:ae:f1:e3:01:a7:39:aa:59:95:88:3c: 8b:f3:3b:c9:88:27:2b:51:1a:34:59:79:4e:fc:6e: b5:27:9d:51:56:02:48:2f:3a:ba:f3:d4:f2:ca:71: f3:5b:be:f2:bb:02:a6:85:22:3f:19:c6:ae:3b:80: 7b:e3:4f:2f:db:95:b1:a2:a9:cc:96:a1:f6:0e:03: 65:f9:c3:56:91:4a:ec:55:7b:04:bf:3f:e5:73:17: 0e:00:67:02:64:7e:85:30:82:75:98:53:e4:39:7a: dd:76:e0:8a:fd:80:c0:c5:c3:7b:05:3c:af:f7:5b: c1:1f:7b:4d:1f:02:82:b8:3c:b5:ad:fc:e6:9d:c1: 49:e4:5f:52:26:c5:f3:2e:7e:50:00:5a:6f:c3:6d: e9:a8:3a:76:d3:72:fb:b3:ae:c4:2d:38:7a:38:ba: b1:82:f4:22:0c:e1:0c:57:66:d1:3e:4e:54:71:82: 3d:a9:9d:23:87:55:29:d8:31:65:a0:2d:6b:b5:c5: e2:d1:3b:a8:7e:68:87:3f:9f:b0:08:4d:fa:4a:0c: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CD:21:49:07:A8:E8:9F:E9:13:79:BE:6B:2A:BB:04:93:78:8C:4A X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:13:c3:da:26:bb:d6:05:08:7c:d8:37:7f:87:03:9b:43: 62:25:6b:6e:9d:ce:8c:fd:0c:e8:8b:e7:78:32:fe:fe:13:8a: 90:bb:29:ad:1b:4e:70:f3:89:60:6c:ed:fa:b0:1a:cb:db:45: b1:b4:d8:60:41:ee:b1:df:26:0d:41:49:6b:c7:7f:0b:cb:96: 52:03:2f:10:da:80:dc:8a:aa:5a:3e:c4:e8:5a:9d:4f:69:5a: c3:f1:1a:22:e5:48:e5:d5:f5:e4:cd:29:ff:b7:f3:a6:97:ca: 68:d7:1e:18:05:75:d3:96:06:b3:16:9a:15:89:66:d0:42:61: d5:96:fa:95:aa:8f:74:21:0b:f4:af:33:e4:13:5d:00:0c:34: 51:93:1a:86:f1:3b:fe:b0:dc:6c:31:0b:a9:51:03:98:76:5a: b3:60:8b:4b:c7:b8:fe:45:c3:a1:cf:44:cd:b4:cf:77:af:b5: d5:6c:94:81:b0:76:fe:a7:60:cb:8a:9d:7c:9e:ac:ee:8e:45: b9:7c:ce:87:70:01:31:29:4b:93:13:78:f3:57:a7:ab:a3:a0: 6c:2d:d2:ea:f9:d5:2c:6c:54:e8:52:3c:20:ae:dd:72:b8:8f: 88:3d:08:e0:13:ba:b8:bc:7d:4c:4c:db:27:15:5f:1c:ec:b4: ff:37:6d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjUwNzAyMTgwMDEwWhcNMjUwNzA5MTgwMDEwWjAYMRYwFAYD VQQDEw02ODY1NzNhYS0wODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7O/WTHZSahx+AV+UQ32YvzfDb9c3/C1IlKOde9FuEwvdeAKnVj+uoR0Wkn5 gr/nrvHjAac5qlmViDyL8zvJiCcrURo0WXlO/G61J51RVgJILzq689TyynHzW77y uwKmhSI/GcauO4B7408v25WxoqnMlqH2DgNl+cNWkUrsVXsEvz/lcxcOAGcCZH6F MIJ1mFPkOXrdduCK/YDAxcN7BTyv91vBH3tNHwKCuDy1rfzmncFJ5F9SJsXzLn5Q AFpvw23pqDp203L7s67ELTh6OLqxgvQiDOEMV2bRPk5UcYI9qZ0jh1Up2DFloC1r tcXi0TuofmiHP5+wCE36SgzmTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHNIUkH qOif6RN5vmsquwSTeIxKMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByuhPD2ia71gUIfNg3f4cDm0NiJWtunc6M/Qzoi+d4Mv7+E4qQuymt G05w84lgbO36sBrL20WxtNhgQe6x3yYNQUlrx38Ly5ZSAy8Q2oDciqpaPsToWp1P aVrD8Roi5Ujl1fXkzSn/t/Oml8po1x4YBXXTlgazFpoViWbQQmHVlvqVqo90IQv0 rzPkE10ADDRRkxqG8Tv+sNxsMQupUQOYdlqzYItLx7j+RcOhz0TNtM93r7XVbJSB sHb+p2DLip18nqzujkW5fM6HcAExKUuTE3jzV6ero6BsLdLq+dUsbFToUjwgrt1y uI+IPQjgE7q4vH1MTNsnFV8c7LT/N22A -----END CERTIFICATE-----Generated at Fri Jul 4 00:29:55 2025 by rpki-client