$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft File: gaOMiwlmciXuBPc67PoJWQ0fQUw.mft (raw, json) Hash identifier: bg+BBqcGc+Q/7Fnw1gE9Za/zjlUW96r0tY/D/o1HVVI= Subject key identifier: 91:E9:63:21:02:B3:65:F8:66:52:86:5E:E3:6A:1C:A6:E1:6D:C3:21 Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C Certificate issuer: /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft Manifest number: 02C8 Signing time: Thu 03 Jul 2025 01:48:58 +0000 Manifest this update: Thu 03 Jul 2025 01:48:58 +0000 Manifest next update: Thu 10 Jul 2025 01:48:58 +0000 Files and hashes: 1: gaOMiwlmciXuBPc67PoJWQ0fQUw.crl (hash: yfibsst1H3sfS+76/jcpwf8dq8IxfOSZMwJ2BG1PdMU=) 2: 3785A958EF4711EF906AD167C4F9AE02.roa (hash: Xop4pF7LmPiWj4qFmNK9jXxRuc+SVOdI5Rsywj/dhPQ=) 3: 464B4494F7D911EF8EA69265C4F9AE02.roa (hash: kw7ZHY1axLvj55a+YPxHpHPEy1diN3j6tF6SRdvVlY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE35F, serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Validity Not Before: Jul 3 01:48:58 2025 GMT Not After : Jul 10 01:48:58 2025 GMT Subject: CN=6865e18a-76f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:10:18:eb:35:58:50:a6:21:3c:1c:28:5f: ba:3b:54:0a:a0:f4:60:e5:e5:cb:e7:6e:d3:44:65: 8e:dc:b4:50:5a:d2:b7:9e:ac:37:fd:54:a8:a9:be: bd:b4:ba:e8:2b:5e:25:dc:b5:93:78:96:c2:6d:2c: 22:31:ca:ab:b0:2d:23:86:d5:9d:c5:c7:6d:61:fc: bc:83:15:dd:ad:08:d3:5b:63:e2:6e:e7:39:df:40: 02:f8:13:c7:d9:40:9d:e6:b2:ae:98:9d:be:53:67: 55:1f:2b:8a:67:cc:39:7e:4b:76:ec:96:76:c1:c4: 88:42:46:bc:79:c8:ea:e4:32:3d:e0:06:73:7e:88: 20:5c:18:97:97:78:25:b0:46:09:1f:49:43:88:d9: 27:f1:16:58:48:e4:af:78:71:66:7c:81:52:82:77: dc:32:2d:f6:38:ec:96:4f:77:11:62:6b:b9:f7:c3: e1:59:f9:ae:eb:6f:ae:40:9a:9a:dd:e2:b4:ff:43: b0:1a:ba:74:fc:5a:ce:e1:42:98:e4:79:20:1d:aa: d6:74:52:01:dc:f9:7b:6c:98:c5:9e:8b:27:e8:51: a9:51:83:6a:90:3e:2e:2c:cd:b0:0b:45:ba:ff:50: 23:57:9d:06:cf:ac:b2:81:a8:4b:62:e9:f4:5b:f2: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:63:21:02:B3:65:F8:66:52:86:5E:E3:6A:1C:A6:E1:6D:C3:21 X509v3 Authority Key Identifier: keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c8:df:eb:0c:f1:be:6c:03:ef:a0:02:98:be:3b:76:fd:cf: 08:19:d0:73:42:14:07:fc:f2:6e:dc:29:fc:96:b6:ff:13:fc: 6e:fc:c7:7b:0f:b7:16:79:91:cc:d4:c2:fc:28:fc:6d:cb:d9: eb:e9:30:2f:12:9c:29:70:f4:f1:cb:38:a3:7e:9e:22:93:87: b3:7e:fc:7d:b6:a0:49:c0:aa:87:d9:58:f0:d5:11:7a:2d:cb: e6:8d:d3:b5:27:29:73:e1:57:e2:51:2b:03:2f:c9:a6:c4:ab: e0:d1:8b:34:04:2d:15:5b:e0:e7:da:71:36:6d:b8:18:46:c5: 27:ab:f1:2f:5e:8e:d2:e8:39:97:70:14:bc:cb:67:e0:b9:22: b8:7f:4a:7e:a4:54:82:a2:20:3f:e0:f5:19:12:0e:27:9b:70: 51:36:0e:a5:86:aa:d8:08:37:a5:96:94:c5:ce:cb:2a:9d:17: 99:0c:97:f1:62:4f:cb:2e:f1:44:85:2f:4e:c9:74:9e:b1:bc: 55:7a:dd:15:41:82:4e:40:1e:dc:58:21:f4:42:a8:ad:43:19: 1b:f0:dd:97:e6:cb:08:c7:50:84:2f:56:3a:69:e9:32:59:1d: f9:36:33:24:f5:0c:d5:25:d5:60:8c:ba:a6:66:8c:7c:85:69: 1f:31:06:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzNUYxMTAvBgNVBAUTKDgxQTM4QzhCMDk2NjcyMjVFRTA0RjczQUVDRkEwOTU5 MEQxRjQxNEMwHhcNMjUwNzAzMDE0ODU4WhcNMjUwNzEwMDE0ODU4WjAYMRYwFAYD VQQDEw02ODY1ZTE4YS03NmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02EQGOs1WFCmITwcKF+6O1QKoPRg5eXL527TRGWO3LRQWtK3nqw3/VSoqb69 tLroK14l3LWTeJbCbSwiMcqrsC0jhtWdxcdtYfy8gxXdrQjTW2Pibuc530AC+BPH 2UCd5rKumJ2+U2dVHyuKZ8w5fkt27JZ2wcSIQka8ecjq5DI94AZzfoggXBiXl3gl sEYJH0lDiNkn8RZYSOSveHFmfIFSgnfcMi32OOyWT3cRYmu598PhWfmu62+uQJqa 3eK0/0OwGrp0/FrO4UKY5HkgHarWdFIB3Pl7bJjFnosn6FGpUYNqkD4uLM2wC0W6 /1AjV50Gz6yygahLYun0W/LVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHpYyEC s2X4ZlKGXuNqHKbhbcMhMB8GA1UdIwQYMBaAFIGjjIsJZnIl7gT3Ouz6CVkNH0FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM1Ri9FQzM0NzQyQ0Y5 MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNpWHVCUGM2N1BvSldRMGZR VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhT01pd2xtY2lYdUJQYzY3UG9KV1EwZlFVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM1Ri9FQzM0NzQyQ0Y5MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNp WHVCUGM2N1BvSldRMGZRVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7yN/rDPG+bAPvoAKYvjt2/c8IGdBzQhQH/PJu3Cn8lrb/E/xu/Md7 D7cWeZHM1ML8KPxty9nr6TAvEpwpcPTxyzijfp4ik4ezfvx9tqBJwKqH2Vjw1RF6 LcvmjdO1Jylz4VfiUSsDL8mmxKvg0Ys0BC0VW+Dn2nE2bbgYRsUnq/EvXo7S6DmX cBS8y2fguSK4f0p+pFSCoiA/4PUZEg4nm3BRNg6lhqrYCDellpTFzssqnReZDJfx Yk/LLvFEhS9OyXSesbxVet0VQYJOQB7cWCH0QqitQxkb8N2X5ssIx1CEL1Y6aeky WR35NjMk9QzVJdVgjLqmZox8hWkfMQb6 -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:54 2025 by rpki-client