$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: DHM9z4a+8Xr1HcNl/T9vAzFHJTwJlX3n/SlJHrvSLuI= Subject key identifier: E2:71:65:D2:CB:E1:CC:26:8D:DE:69:FB:F5:CB:09:BF:CD:24:DF:BD Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 07ED Signing time: Fri 04 Jul 2025 20:51:08 +0000 Manifest this update: Fri 04 Jul 2025 20:51:07 +0000 Manifest next update: Fri 11 Jul 2025 20:51:07 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: yhvoaLDm2g4xr/xwovqwYGY40n3Ll/kmaLng2TPAs1k=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Jul 4 20:51:07 2025 GMT Not After : Jul 11 20:51:07 2025 GMT Subject: CN=68683ebc-82ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:26:f6:f1:d0:f4:30:02:51:6e:42:56:2b: 8b:61:b3:08:8a:1c:65:8d:03:8d:5a:e1:f6:c7:08: 36:bd:5a:24:4e:fb:61:e8:3c:0a:9b:e6:e4:7c:a4: 7a:5e:35:42:1b:e5:28:9d:17:ad:9a:79:b5:b4:ba: 9d:e4:de:54:89:2a:f6:c2:7c:3e:81:20:8d:64:c3: a0:92:7b:00:4b:d7:57:ee:bf:62:73:dc:67:f7:44: 7e:73:fc:6b:a8:7a:f5:3c:d6:c8:6d:85:a3:ab:1e: 67:da:10:28:77:bd:f8:9d:c2:21:75:c6:dd:66:94: 8c:9d:86:8e:65:b9:4c:4b:39:dc:b3:e9:5c:8b:4c: a8:90:39:be:fb:b4:ec:b4:38:43:30:f4:42:7a:ee: 7a:b7:cd:39:4e:c7:d6:c5:ce:8c:ab:ea:db:45:eb: 6a:07:03:7e:3f:da:b1:73:2a:26:14:e1:10:bf:8d: 83:a6:92:fd:62:8d:71:4f:6d:85:6c:0e:34:62:61: c5:39:1f:dd:ef:5f:41:71:fb:ec:79:fa:63:a3:40: 22:70:b0:3e:4c:01:d8:43:4f:0a:53:3b:11:aa:a4: 25:44:82:19:b7:ec:03:f4:07:dd:8f:70:f0:76:0e: ab:da:c4:01:26:42:aa:c4:7b:c1:e5:26:bc:e7:78: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:71:65:D2:CB:E1:CC:26:8D:DE:69:FB:F5:CB:09:BF:CD:24:DF:BD X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:7a:27:17:11:62:52:de:18:5f:20:1c:73:7a:d7:d1:46:35: 67:69:fe:bc:87:ac:51:a5:90:ba:41:49:c0:88:23:d3:e8:03: 87:c4:98:de:fd:a8:84:89:71:0c:c7:2e:3c:79:2c:65:29:f0: 4b:1c:46:e2:81:69:0f:09:ed:0b:03:33:63:e4:10:08:00:1b: b2:49:5f:a5:31:dc:8d:f2:07:8e:e4:0c:f2:5c:5e:e1:70:b2: 06:c0:6e:b8:15:84:32:c3:33:6e:f5:97:3e:73:a3:7d:42:02: 80:0f:cb:bc:98:9e:7e:01:3e:7e:98:4e:e1:c5:d3:f8:2a:81: ff:f4:95:28:a1:fd:17:6d:95:4c:56:fa:89:e7:7d:80:e0:81: 5d:ac:21:ec:fc:ee:93:b6:06:49:16:56:58:95:0f:ba:dd:4c: 5d:4e:ab:da:78:2d:a4:b1:a1:cd:b4:70:36:01:94:69:3b:25: 75:94:93:d7:46:5b:50:29:85:46:67:fd:c6:78:93:7d:f2:1e: 17:75:6e:8e:01:97:37:e7:ff:ac:70:85:fe:b7:ad:ee:92:db: 64:8b:b3:ea:b0:af:86:a9:4c:62:5b:40:80:41:f1:ae:c5:fb: 2c:ff:31:6f:de:e4:3a:92:e4:f4:f6:09:d8:82:6b:90:11:db: 77:97:7d:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUwNzA0MjA1MTA3WhcNMjUwNzExMjA1MTA3WjAYMRYwFAYD VQQDEw02ODY4M2ViYy04MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4U8m9vHQ9DACUW5CViuLYbMIihxljQONWuH2xwg2vVokTvth6DwKm+bkfKR6 XjVCG+UonRetmnm1tLqd5N5UiSr2wnw+gSCNZMOgknsAS9dX7r9ic9xn90R+c/xr qHr1PNbIbYWjqx5n2hAod734ncIhdcbdZpSMnYaOZblMSzncs+lci0yokDm++7Ts tDhDMPRCeu56t805TsfWxc6Mq+rbRetqBwN+P9qxcyomFOEQv42DppL9Yo1xT22F bA40YmHFOR/d719Bcfvsefpjo0AicLA+TAHYQ08KUzsRqqQlRIIZt+wD9Afdj3Dw dg6r2sQBJkKqxHvB5Sa853jk/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJxZdLL 4cwmjd5p+/XLCb/NJN+9MB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyeicXEWJS3hhfIBxzetfRRjVnaf68h6xRpZC6QUnAiCPT6AOHxJje /aiEiXEMxy48eSxlKfBLHEbigWkPCe0LAzNj5BAIABuySV+lMdyN8geO5AzyXF7h cLIGwG64FYQywzNu9Zc+c6N9QgKAD8u8mJ5+AT5+mE7hxdP4KoH/9JUoof0XbZVM VvqJ532A4IFdrCHs/O6TtgZJFlZYlQ+63UxdTqvaeC2ksaHNtHA2AZRpOyV1lJPX RltQKYVGZ/3GeJN98h4XdW6OAZc35/+scIX+t63ukttki7PqsK+GqUxiW0CAQfGu xfss/zFv3uQ6kuT09gnYgmuQEdt3l32G -----END CERTIFICATE-----Generated at Sat Jul 5 08:01:02 2025 by rpki-client