$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json) Hash identifier: /m3EWCgUUBoOcxPS/JvX2gATG1sXjLAE3p/gT2kgUZw= Subject key identifier: 6C:37:0F:D5:DB:20:6E:F8:C9:28:39:A1:6E:F8:67:1F:1C:BE:CD:C9 Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Certificate serial: 1E6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft Manifest number: 1E69 Signing time: Wed 02 Jul 2025 16:11:00 +0000 Manifest this update: Wed 02 Jul 2025 16:11:00 +0000 Manifest next update: Wed 09 Jul 2025 16:11:00 +0000 Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: rPheZk68mA3APf9O5FuztstYGMCFl2DmF9WDcterjiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7786 (0x1e6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Validity Not Before: Jul 2 16:11:00 2025 GMT Not After : Jul 9 16:11:00 2025 GMT Subject: CN=68655a14-510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:7f:13:13:20:80:68:d0:e2:d3:ce:2a:d2: 9d:a2:7e:ee:6a:a3:03:d0:fb:b2:31:88:14:8a:a3: 9c:31:9d:e4:f9:c4:ce:f3:06:0d:40:f7:ae:91:90: 39:b3:82:f7:3f:05:d8:4b:df:65:7e:7f:90:85:4f: ce:0f:13:91:56:0d:9a:d4:94:a9:bd:d3:70:2f:c6: 1a:67:b5:dc:9d:f6:77:00:1e:22:d0:cd:b9:e7:aa: 1f:8f:f3:c1:da:7f:f9:7d:ad:fb:a3:59:30:47:72: dd:a4:f9:62:94:20:8e:77:7c:b5:50:e8:61:25:dc: 82:ad:27:11:5d:63:c5:66:64:5b:6a:46:8e:51:3d: d0:0c:2d:13:a8:64:b8:29:ec:ff:e5:6d:e9:dc:d8: 4d:2e:6f:05:13:07:f8:90:db:11:28:50:50:e5:25: ea:9f:8a:46:b5:36:d5:bd:5b:c5:2c:58:c0:60:42: 79:63:49:e6:74:f6:bd:ac:94:ec:7e:19:c9:e8:52: 6f:27:98:ea:97:f2:37:11:2e:4a:c2:1d:58:7e:e6: 13:d6:2f:16:0d:c3:34:cf:22:16:50:1f:73:ce:50: 9e:5c:57:aa:3b:72:61:ad:ab:1c:cd:50:fc:ad:4e: 93:bc:70:f9:91:50:a7:be:ef:a5:35:c1:18:cc:e7: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:37:0F:D5:DB:20:6E:F8:C9:28:39:A1:6E:F8:67:1F:1C:BE:CD:C9 X509v3 Authority Key Identifier: keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:42:58:b8:1a:55:59:bb:a2:b3:ed:b4:83:ce:e7:cb:d8:b3: fb:09:8c:09:a7:a1:df:dd:c5:5b:99:9a:05:fe:c0:9b:86:34: 8b:8b:d2:01:97:c0:6d:e9:ee:43:04:9d:ee:4a:e4:64:bc:af: c0:76:4c:40:7f:ec:12:a3:be:bc:1a:7c:d3:88:0a:34:de:1e: 2f:0a:23:6b:66:44:79:af:5b:c0:bb:9b:98:f5:25:49:bf:9f: b9:b7:5c:ed:37:ce:df:5f:37:1d:4a:76:3b:2b:06:a8:0d:df: 80:04:c5:4b:7e:6e:3d:47:4d:f5:ae:c6:43:3d:ea:a6:61:ce: 96:a5:d7:f9:bf:cb:7c:6b:1b:c4:73:b5:52:fb:5c:ce:f6:aa: 37:30:f5:66:0e:c4:ba:2a:ea:40:0f:ed:a4:30:05:8f:7e:6d: 26:f8:34:c4:a0:0a:7a:a3:63:8f:48:8d:15:97:da:a3:f4:ed: f1:ce:b1:a4:fb:37:b5:d2:45:83:1b:48:bc:da:33:61:fd:8b: ab:b6:1c:0e:55:a3:3a:d8:1e:9c:44:65:c7:e8:75:01:b3:14: 51:ad:21:c4:5b:ae:d5:2f:65:0c:fa:58:61:f2:0c:ae:e5:4c: 49:a7:d3:2c:19:03:dd:41:17:27:7d:d6:76:17:86:05:a0:62: af:41:6c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2 Rjc2MjVFNjcwHhcNMjUwNzAyMTYxMTAwWhcNMjUwNzA5MTYxMTAwWjAYMRYwFAYD VQQDEw02ODY1NWExNC01MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszJ/ExMggGjQ4tPOKtKdon7uaqMD0PuyMYgUiqOcMZ3k+cTO8wYNQPeukZA5 s4L3PwXYS99lfn+QhU/ODxORVg2a1JSpvdNwL8YaZ7XcnfZ3AB4i0M2556ofj/PB 2n/5fa37o1kwR3LdpPlilCCOd3y1UOhhJdyCrScRXWPFZmRbakaOUT3QDC0TqGS4 Kez/5W3p3NhNLm8FEwf4kNsRKFBQ5SXqn4pGtTbVvVvFLFjAYEJ5Y0nmdPa9rJTs fhnJ6FJvJ5jql/I3ES5Kwh1YfuYT1i8WDcM0zyIWUB9zzlCeXFeqO3JhrasczVD8 rU6TvHD5kVCnvu+lNcEYzOeubQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw3D9Xb IG74ySg5oW74Zx8cvs3JMB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2 M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABQli4GlVZu6Kz7bSDzufL2LP7CYwJp6Hf3cVbmZoF/sCbhjSLi9IB l8Bt6e5DBJ3uSuRkvK/AdkxAf+wSo768GnzTiAo03h4vCiNrZkR5r1vAu5uY9SVJ v5+5t1ztN87fXzcdSnY7KwaoDd+ABMVLfm49R031rsZDPeqmYc6Wpdf5v8t8axvE c7VS+1zO9qo3MPVmDsS6KupAD+2kMAWPfm0m+DTEoAp6o2OPSI0Vl9qj9O3xzrGk +ze10kWDG0i82jNh/YurthwOVaM62B6cRGXH6HUBsxRRrSHEW67VL2UM+lhh8gyu 5UxJp9MsGQPdQRcnfdZ2F4YFoGKvQWy9 -----END CERTIFICATE-----Generated at Wed Jul 2 19:30:32 2025 by rpki-client