$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: 8Lendit2qNNCx2NNYoP7i7Ga4IskEsDhsNSclcvq9XA= Subject key identifier: 3E:48:D5:4A:3E:E9:B8:59:2B:B1:9A:0E:D0:85:A4:89:7D:91:DF:89 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 22EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 22AD Signing time: Wed 02 Jul 2025 15:58:18 +0000 Manifest this update: Wed 02 Jul 2025 15:58:18 +0000 Manifest next update: Wed 09 Jul 2025 15:58:18 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: x9QDS4fW5HwELCtjaIITjVySa0R7LrvITIuImXUh61E=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: 2SAdCKQcIWqABPUcECk5L/zG6WToDQOSztNZtA6yviw=) 3: A163C5C869A111ECA4837D28C4F9AE02.roa (hash: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8=) 4: E57A64AA165C11EABB13924AC4F9AE02.roa (hash: Kp1L9OUEsepRZk0KKmtB6S8OnLO2gE492T0DeYXHR/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8943 (0x22ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Jul 2 15:58:18 2025 GMT Not After : Jul 9 15:58:18 2025 GMT Subject: CN=6865571a-4e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:6d:25:9f:90:3e:45:52:61:ba:50:9d:59: 98:ec:23:96:a8:e0:af:79:ea:21:ee:00:f8:28:4b: 9f:a3:3f:f9:08:bf:90:19:dd:b7:59:a1:5d:22:9d: e0:34:8d:7c:d1:eb:82:7e:e9:68:38:9f:58:0c:23: 31:fb:07:45:81:0b:48:f0:5d:ff:da:12:86:9e:ac: 34:df:f5:c9:38:6a:c1:bd:57:a5:48:8f:30:43:75: ff:68:08:d1:cd:aa:32:f3:64:a7:68:86:af:4d:69: 56:2e:0d:bc:3a:e3:4e:87:a6:58:77:ff:55:4a:ec: b1:99:9c:d1:e8:f8:55:2d:96:8a:8f:a4:78:06:da: 8b:5f:5e:ac:39:cf:3d:e9:08:06:65:29:f6:54:f7: 77:93:01:5b:52:a6:a0:61:0b:e9:98:32:da:c4:19: a1:8d:be:4e:f1:47:21:9d:15:61:0f:3a:8c:20:7b: ea:19:24:f2:f0:c2:87:a3:3c:b9:c6:e1:4e:38:7e: e9:4d:e2:b2:b5:b2:37:f5:e3:8e:f2:9a:da:d2:c3: e4:e3:e7:8d:cf:9f:b0:02:0c:c6:b0:b7:71:64:43: 5f:76:64:ba:c3:46:9d:87:0f:61:6e:b0:c8:43:92: ba:df:8b:ba:8c:9a:fd:77:f1:8b:7f:4c:e9:39:09: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:48:D5:4A:3E:E9:B8:59:2B:B1:9A:0E:D0:85:A4:89:7D:91:DF:89 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fe:f1:d4:3a:ea:a7:c9:28:25:67:a2:9b:10:93:f5:4f:1c: 3a:4b:b0:16:77:c6:16:5f:d5:b6:88:64:a4:24:ea:00:64:18: 9e:aa:a0:76:9e:2a:33:b4:77:8a:c3:14:24:9b:8b:84:e0:c8: 98:ff:dc:60:56:f0:c4:6e:42:e8:bb:ce:4a:9b:4e:93:9e:cf: 1d:09:d7:62:4c:23:30:89:10:46:5d:6e:d1:c1:3a:bc:2d:b1: 26:df:0d:1b:6f:71:a8:de:23:fa:ca:08:4f:58:b2:8a:5d:b1: db:5b:8f:04:56:b9:3f:fa:46:a7:e3:c4:ed:9e:62:11:92:05: 85:0f:86:07:31:e8:ac:30:79:3e:f6:0d:a3:2d:be:91:2d:60: 82:f7:a3:74:92:69:17:0c:8f:ab:46:79:b3:fd:f4:59:31:63: 10:50:f4:d2:2d:37:9e:58:bb:ea:91:2a:01:12:59:73:9d:12: d6:a8:36:79:72:fa:3e:91:4e:1b:ab:df:f1:16:54:e0:7a:bb: 50:24:c0:08:ab:65:1d:36:7f:92:e7:52:b8:f0:51:37:db:17: 27:c1:0f:52:ac:27:6d:29:ba:41:c8:f0:f0:58:7f:06:34:a9: a8:08:7c:ea:aa:94:88:30:49:60:99:2b:01:84:2c:df:20:2f: 9e:fd:8c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUwNzAyMTU1ODE4WhcNMjUwNzA5MTU1ODE4WjAYMRYwFAYD VQQDEw02ODY1NTcxYS00ZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hxtJZ+QPkVSYbpQnVmY7COWqOCveeoh7gD4KEufoz/5CL+QGd23WaFdIp3g NI180euCfuloOJ9YDCMx+wdFgQtI8F3/2hKGnqw03/XJOGrBvVelSI8wQ3X/aAjR zaoy82SnaIavTWlWLg28OuNOh6ZYd/9VSuyxmZzR6PhVLZaKj6R4BtqLX16sOc89 6QgGZSn2VPd3kwFbUqagYQvpmDLaxBmhjb5O8UchnRVhDzqMIHvqGSTy8MKHozy5 xuFOOH7pTeKytbI39eOO8pra0sPk4+eNz5+wAgzGsLdxZENfdmS6w0adhw9hbrDI Q5K634u6jJr9d/GLf0zpOQmZ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5I1Uo+ 6bhZK7GaDtCFpIl9kd+JMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe/vHUOuqnySglZ6KbEJP1Txw6S7AWd8YWX9W2iGSkJOoAZBieqqB2 nioztHeKwxQkm4uE4MiY/9xgVvDEbkLou85Km06Tns8dCddiTCMwiRBGXW7RwTq8 LbEm3w0bb3Go3iP6yghPWLKKXbHbW48EVrk/+kan48TtnmIRkgWFD4YHMeisMHk+ 9g2jLb6RLWCC96N0kmkXDI+rRnmz/fRZMWMQUPTSLTeeWLvqkSoBEllznRLWqDZ5 cvo+kU4bq9/xFlTgertQJMAIq2UdNn+S51K48FE32xcnwQ9SrCdtKbpByPDwWH8G NKmoCHzqqpSIMElgmSsBhCzfIC+e/Yxc -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:53 2025 by rpki-client