$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json) Hash identifier: OCRteswcCgkUaaFeGoydb7EsMHc6pcSok4c7QSVvL08= Subject key identifier: 3D:F2:C8:30:FF:A3:FE:C1:CB:78:63:58:1B:FD:B1:0C:05:0F:CE:82 Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft Manifest number: 0598 Signing time: Mon 30 Jun 2025 23:35:16 +0000 Manifest this update: Mon 30 Jun 2025 23:35:15 +0000 Manifest next update: Mon 07 Jul 2025 23:35:15 +0000 Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: kkOUZh5gb1E5pd9dFeTXGR1o12aRRa3OqUVA2/0EFJ4=) 2: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: F+eusEd7GL0ODjW6lYLQdd8QnZrTI3K+yhDDHvuA9Zk=) 3: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: j1jidqxJCotjIETFLxyNEiGFOvwt1GdIG0ZptBesQUc=) 4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: ZuWliTIGvlhIvvjXehnw9RrKZY3Tr7AfPlrqcRHIwUM=) 5: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: i+5d2nxoXTBSkmi7U0mLeacCYMyYuYpYdzVQzCXwi0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF Validity Not Before: Jun 30 23:35:15 2025 GMT Not After : Jul 7 23:35:15 2025 GMT Subject: CN=68631f33-8406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:c9:9e:c3:5f:66:ee:d0:86:85:88:b6:9e: 0f:28:32:c8:54:6f:2c:03:51:8f:da:34:e6:61:0b: 19:63:fe:31:e7:40:db:fb:b9:fb:fd:55:6c:3f:66: 40:a7:f8:90:7c:3c:4c:3f:22:c4:3d:d1:9d:3f:1c: d1:33:ba:29:27:f3:e6:7e:c3:a3:0d:b7:19:34:19: f3:8c:b8:89:6b:b4:9b:1a:52:69:14:5a:e4:32:a9: a5:f0:74:8c:b7:83:e9:a8:f6:a3:bd:9c:ba:75:5f: e5:3c:b4:ff:bb:cb:a3:7d:25:b6:1c:25:a0:ef:61: 66:00:bc:17:54:fd:1c:6a:64:be:59:14:dd:18:9c: bc:a8:59:73:65:c3:03:25:67:0d:25:99:43:af:f9: e5:6e:48:8a:2d:21:bf:33:33:aa:84:fe:db:8b:5d: 09:4d:27:13:b8:46:dc:d6:22:39:9f:a2:45:e4:05: 8f:53:e7:e6:26:95:fa:5b:47:07:b3:eb:0a:7b:bb: 49:02:d2:18:ce:0d:2e:f7:c6:94:e6:c3:50:c8:3c: 9e:76:c3:c0:41:2b:7a:02:4d:e3:f4:55:09:c7:d1: 8a:85:c0:80:be:5e:5b:98:fd:ae:75:65:ed:5a:b3: e6:fa:4b:19:88:27:d0:90:3e:9f:14:0d:91:ac:e3: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F2:C8:30:FF:A3:FE:C1:CB:78:63:58:1B:FD:B1:0C:05:0F:CE:82 X509v3 Authority Key Identifier: keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c5:47:66:f5:dc:9b:a2:53:1c:e2:97:bc:17:67:64:d8:99: 19:3b:a1:35:22:51:32:cd:77:aa:23:47:2d:45:92:72:ae:e7: 0f:9b:14:b6:ee:bb:92:51:0b:91:b8:bf:b4:a3:68:2d:c5:a0: a9:91:f9:63:8d:02:d5:d5:3e:00:ae:54:08:86:7e:a7:6f:a9: a4:af:3e:b1:6b:48:50:d2:06:47:f4:a4:f4:e6:8f:c2:42:18: 2e:07:76:e3:57:bb:ff:09:93:08:ad:c0:d4:42:81:8a:53:d6: f3:2a:c6:b8:aa:8e:5b:15:45:36:07:28:4f:54:4b:6b:85:12: b4:bc:80:20:c6:06:06:c4:7a:69:81:fe:ae:86:c4:80:64:a0: f4:1c:d0:3c:a3:94:d2:ab:ed:e6:86:46:77:c8:d1:81:cc:8a: 3b:34:8b:77:f7:a2:e4:fe:1f:7b:01:46:4b:fb:6d:87:0e:a8: 2a:a3:95:4c:dc:72:ba:bd:0b:92:cc:3a:90:f5:9a:35:bc:67: b1:43:e4:82:68:a2:42:14:5e:13:81:5f:5e:cb:33:53:0a:cd: 61:51:37:99:22:26:d8:0c:38:ba:90:14:34:6d:f3:c0:be:22: 52:60:a8:d0:a9:6f:ac:75:fa:88:0b:77:cd:07:64:37:c6:d0: e0:10:42:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF RTVBMDFDQkYwHhcNMjUwNjMwMjMzNTE1WhcNMjUwNzA3MjMzNTE1WjAYMRYwFAYD VQQDEw02ODYzMWYzMy04NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF7JnsNfZu7QhoWItp4PKDLIVG8sA1GP2jTmYQsZY/4x50Db+7n7/VVsP2ZA p/iQfDxMPyLEPdGdPxzRM7opJ/PmfsOjDbcZNBnzjLiJa7SbGlJpFFrkMqml8HSM t4PpqPajvZy6dV/lPLT/u8ujfSW2HCWg72FmALwXVP0camS+WRTdGJy8qFlzZcMD JWcNJZlDr/nlbkiKLSG/MzOqhP7bi10JTScTuEbc1iI5n6JF5AWPU+fmJpX6W0cH s+sKe7tJAtIYzg0u98aU5sNQyDyedsPAQSt6Ak3j9FUJx9GKhcCAvl5bmP2udWXt WrPm+ksZiCfQkD6fFA2RrONM2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3yyDD/ o/7By3hjWBv9sQwFD86CMB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3 RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0U1NC9CRjlGQ0FGMEQ3RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tF Q3JVbW9VSzExNzN1V2dITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAixUdm9dybolMc4pe8F2dk2JkZO6E1IlEyzXeqI0ctRZJyrucPmxS2 7ruSUQuRuL+0o2gtxaCpkfljjQLV1T4ArlQIhn6nb6mkrz6xa0hQ0gZH9KT05o/C QhguB3bjV7v/CZMIrcDUQoGKU9bzKsa4qo5bFUU2ByhPVEtrhRK0vIAgxgYGxHpp gf6uhsSAZKD0HNA8o5TSq+3mhkZ3yNGBzIo7NIt396Lk/h97AUZL+22HDqgqo5VM 3HK6vQuSzDqQ9Zo1vGexQ+SCaKJCFF4TgV9eyzNTCs1hUTeZIibYDDi6kBQ0bfPA viJSYKjQqW+sdfqIC3fNB2Q3xtDgEEJJ -----END CERTIFICATE-----Generated at Tue Jul 1 21:06:27 2025 by rpki-client