$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json) Hash identifier: cc0HutXJhK9q2qKtkG6pSInf4K72UXtnCwK5BWpgoEQ= Subject key identifier: DD:A0:2A:A5:4B:23:19:55:34:39:07:20:C9:CA:8C:5C:68:14:7F:03 Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft Manifest number: 0443 Signing time: Thu 03 Jul 2025 01:04:37 +0000 Manifest this update: Thu 03 Jul 2025 01:04:36 +0000 Manifest next update: Thu 10 Jul 2025 01:04:36 +0000 Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: BIdwj0u7UJVgxBO+LudSnRw1v9bMl9DXr92oirXm+4M=) 2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: O1MkwGdKDfVHdsOhHQrlU/aFTqc21EnEwMBW12Asebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Validity Not Before: Jul 3 01:04:36 2025 GMT Not After : Jul 10 01:04:36 2025 GMT Subject: CN=6865d725-798e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:18:72:93:3e:d4:49:66:70:de:15:6a:7b:6f: 44:4f:23:b9:94:ba:33:b5:dc:03:0f:a1:2c:5b:48: e3:7d:50:41:6c:19:d9:54:0e:c2:ce:d5:31:63:be: 73:1f:db:70:c8:e9:ca:79:89:29:e0:bb:f2:33:c8: 65:54:8e:73:ad:2b:1c:08:f3:27:59:d7:26:a2:c9: f5:03:81:c9:81:0b:6d:d8:ff:e1:86:23:d5:3d:94: 34:64:0f:83:7f:ef:b9:06:80:f9:56:1f:45:32:0b: 8d:29:40:6a:7a:32:e7:c5:bc:b8:cb:2d:97:14:ad: b0:a4:74:fe:ef:5c:29:e7:f3:74:d4:69:87:f6:00: ad:96:18:62:a6:2d:aa:41:55:9a:89:73:1c:0d:68: 66:7f:14:bd:27:66:d3:ed:f2:1d:9e:1f:01:1b:52: 19:2d:f0:4f:ea:f2:47:7e:e5:70:48:ff:6c:90:5b: 94:2c:d2:dd:7f:e3:fa:12:ae:34:df:91:07:38:a7: 8b:57:bd:9b:d6:43:8e:ec:a9:85:b2:74:29:fb:d2: 9a:95:b9:ff:ed:24:81:01:23:08:3a:7a:04:9b:b4: 64:ff:1e:6b:24:82:10:b0:ed:9f:f3:34:18:e3:83: b8:37:19:f5:95:5f:f2:83:5e:ac:84:f7:8f:2b:7f: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A0:2A:A5:4B:23:19:55:34:39:07:20:C9:CA:8C:5C:68:14:7F:03 X509v3 Authority Key Identifier: keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:21:f4:dd:4b:94:8d:c5:47:22:4d:d7:6f:a0:ac:28:3d:10: ea:ff:8d:c4:a2:ae:4c:bb:9a:ca:28:b9:0b:50:99:b4:91:a4: 35:fe:7c:d6:82:62:0e:58:ff:9d:84:90:1d:9e:4a:b0:9c:86: df:7c:7b:ea:e8:94:b9:10:5a:da:8e:fc:0c:49:10:c3:85:3a: c4:5f:d4:e0:61:0a:34:47:d8:ab:c0:97:8a:dd:d3:df:0d:1b: 77:dc:52:9e:d6:17:26:46:ac:d4:16:d8:d7:e1:fe:df:68:d9: a8:af:53:03:34:21:54:54:78:2e:9f:10:ba:02:ae:28:5f:08: b0:ad:85:69:2c:36:d1:ec:e5:e8:33:9b:d7:68:bb:96:b4:37: f6:82:94:36:a6:ff:1a:ee:6b:39:2d:7b:d1:38:4d:ee:66:a9: c4:6d:7a:a5:ad:11:67:79:00:a3:c8:12:55:6b:35:4c:fe:6d: 46:1e:1f:cd:ed:73:62:60:1e:c2:07:00:50:d8:4a:7f:b3:7d: 4b:e6:0f:bc:0e:02:02:17:f5:91:1c:5f:42:f9:77:d8:58:12: 08:7c:df:d5:c6:36:f4:e5:3b:1d:8f:65:f2:8c:e3:ad:40:64: b6:37:12:a4:2c:e0:e5:1e:c7:20:f8:bb:dd:64:37:1d:b8:75: 19:47:b5:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUE4RDExMC8GA1UEBRMoODJEODE4ODYxREQ0QTcwRjc3MDhEMjA1RTRCODlFODUx NENBMUY2QzAeFw0yNTA3MDMwMTA0MzZaFw0yNTA3MTAwMTA0MzZaMBgxFjAUBgNV BAMTDTY4NjVkNzI1LTc5OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwGHKTPtRJZnDeFWp7b0RPI7mUujO13AMPoSxbSON9UEFsGdlUDsLO1TFjvnMf 23DI6cp5iSngu/IzyGVUjnOtKxwI8ydZ1yaiyfUDgcmBC23Y/+GGI9U9lDRkD4N/ 77kGgPlWH0UyC40pQGp6MufFvLjLLZcUrbCkdP7vXCnn83TUaYf2AK2WGGKmLapB VZqJcxwNaGZ/FL0nZtPt8h2eHwEbUhkt8E/q8kd+5XBI/2yQW5Qs0t1/4/oSrjTf kQc4p4tXvZvWQ47sqYWydCn70pqVuf/tJIEBIwg6egSbtGT/HmskghCw7Z/zNBjj g7g3GfWVX/KDXqyE948rf9mzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3aAqpUsj GVU0OQcgycqMXGgUfwMwHwYDVR0jBBgwFoAUgtgYhh3Upw93CNIF5LiehRTKH2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QThELzMyRjFGNEMyODNF OTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3RnWWhoM1VwdzkzQ05JRjVMaWVoUlRLSDJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5 M0NOSUY1TGllaFJUS0gydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ0h9N1LlI3FRyJN12+grCg9EOr/jcSirky7msoouQtQmbSRpDX+fNaC Yg5Y/52EkB2eSrCcht98e+rolLkQWtqO/AxJEMOFOsRf1OBhCjRH2KvAl4rd098N G3fcUp7WFyZGrNQW2Nfh/t9o2aivUwM0IVRUeC6fELoCrihfCLCthWksNtHs5egz m9dou5a0N/aClDam/xruazkte9E4Te5mqcRteqWtEWd5AKPIElVrNUz+bUYeH83t c2JgHsIHAFDYSn+zfUvmD7wOAgIX9ZEcX0L5d9hYEgh839XGNvTlOx2PZfKM461A ZLY3EqQs4OUexyD4u91kNx24dRlHtfQ= -----END CERTIFICATE-----Generated at Sat Jul 5 01:18:31 2025 by rpki-client