$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json) Hash identifier: hBSrUcx6Vh6JFfaTtSDqIv1w49XuTISC1FXC8zZFRlo= Subject key identifier: 9B:B3:BE:26:A9:60:80:3C:CC:C5:6F:F6:97:70:5D:94:B1:AF:A0:C1 Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft Manifest number: 0323 Signing time: Sat 23 Aug 2025 01:24:34 +0000 Manifest this update: Sat 23 Aug 2025 01:24:34 +0000 Manifest next update: Sat 30 Aug 2025 01:24:34 +0000 Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: VB2Aggt2/XekdgUfO2XmrWpXzwhR35Atq4D5azwZeOs=) 2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: 4Q9eSoyybwKkbe+OvPprVAkVlq22srO6Z2iGnnSJ3hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Validity Not Before: Aug 23 01:24:34 2025 GMT Not After : Aug 30 01:24:34 2025 GMT Subject: CN=68a91852-c1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:c2:76:63:9e:dd:71:fd:96:cc:43:a3:ea: 6e:95:6c:97:6a:41:c8:80:d6:f1:b6:93:d9:49:53: ae:39:f3:36:ac:f5:b2:b2:2f:46:64:ed:b4:b3:de: 0d:7f:81:53:d7:74:04:ed:6b:12:1c:e7:3f:8f:af: 63:dd:6e:8d:85:5d:8c:03:33:08:7e:f4:a6:61:9c: 28:0f:73:3c:56:38:72:c4:13:c7:0a:d8:f0:a4:0d: b9:eb:4b:bf:82:48:56:d6:d2:59:d5:1c:a1:1e:8c: 06:b3:7d:26:f1:7b:d7:d1:24:84:59:32:02:f5:4b: da:6e:91:e1:6b:b2:8b:ad:e2:03:40:aa:49:77:5b: 9d:1a:fb:e8:cb:48:eb:76:97:0b:60:38:56:9f:96: f3:84:56:7d:d3:84:b4:ba:6e:2f:9e:1a:37:0a:49: 28:db:d7:88:5e:b5:4e:dc:d0:b1:c2:7f:4a:21:a1: 09:9c:fa:6d:58:54:16:8f:2d:fa:71:1c:86:57:b3: 87:97:b9:65:b8:a4:15:f7:d2:3a:84:8f:96:b4:9d: 09:a8:c8:82:4d:8c:14:cc:51:e6:d1:01:06:e4:c2: a0:14:c2:ff:79:c6:f1:cf:4b:61:e5:7d:73:e4:08: fc:8f:03:c7:d2:d2:c3:0d:bc:76:3f:af:49:ca:eb: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:BE:26:A9:60:80:3C:CC:C5:6F:F6:97:70:5D:94:B1:AF:A0:C1 X509v3 Authority Key Identifier: keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4f:58:0b:e2:3a:d9:ee:6b:2b:d9:96:65:11:60:1a:85:c7: eb:a4:1c:0d:a4:a9:8d:07:f6:cb:06:c6:c3:19:54:ae:05:75: 9a:d7:39:27:c1:be:39:e3:5c:1b:77:f8:98:1e:97:02:a3:5d: b1:c0:4b:29:f5:34:37:48:9b:af:3c:29:59:4d:89:d9:5d:d8: 79:80:b6:f7:ed:79:8c:ff:e2:0e:38:8f:bb:3c:bd:8d:d9:0e: 58:58:f6:a2:46:3b:03:3c:04:d7:79:55:fe:fa:73:8b:1f:1e: 98:e5:89:9e:16:ca:8d:a9:d8:86:40:73:a7:94:86:a3:5c:1c: fc:a1:11:1a:7f:a9:68:88:6d:1e:ab:0c:75:de:0a:32:c1:8d: 21:9b:93:15:bf:b1:05:bc:83:2b:4e:61:4e:9c:75:94:1e:3c: fb:3e:f0:c6:56:ff:a7:42:5e:ba:67:82:bf:a0:b9:4e:3d:bf: a3:74:75:ea:5c:65:fe:a6:a5:1e:22:5c:54:a5:c8:e7:ae:5a: 1f:36:b0:10:0d:73:2a:93:13:32:73:bc:0b:9c:9f:aa:d8:d8: b1:3c:f3:89:73:37:6f:a6:78:a5:53:a8:20:b7:18:89:f7:d4: ad:79:9d:66:ac:6f:bb:1c:74:3f:8b:83:c2:c4:89:5b:a6:cc: b3:4f:c7:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE NDk1QUIzMzIwHhcNMjUwODIzMDEyNDM0WhcNMjUwODMwMDEyNDM0WjAYMRYwFAYD VQQDEw02OGE5MTg1Mi1jMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1/CdmOe3XH9lsxDo+pulWyXakHIgNbxtpPZSVOuOfM2rPWysi9GZO20s94N f4FT13QE7WsSHOc/j69j3W6NhV2MAzMIfvSmYZwoD3M8VjhyxBPHCtjwpA2560u/ gkhW1tJZ1RyhHowGs30m8XvX0SSEWTIC9UvabpHha7KLreIDQKpJd1udGvvoy0jr dpcLYDhWn5bzhFZ904S0um4vnho3Ckko29eIXrVO3NCxwn9KIaEJnPptWFQWjy36 cRyGV7OHl7lluKQV99I6hI+WtJ0JqMiCTYwUzFHm0QEG5MKgFML/ecbxz0th5X1z 5Aj8jwPH0tLDDbx2P69JyuuTPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuzviap YIA8zMVv9pdwXZSxr6DBMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG NEQ1d3BnWEpsTVhVbGFzekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtT1gL4jrZ7msr2ZZlEWAahcfrpBwNpKmNB/bLBsbDGVSuBXWa1zkn wb4541wbd/iYHpcCo12xwEsp9TQ3SJuvPClZTYnZXdh5gLb37XmM/+IOOI+7PL2N 2Q5YWPaiRjsDPATXeVX++nOLHx6Y5YmeFsqNqdiGQHOnlIajXBz8oREaf6loiG0e qwx13goywY0hm5MVv7EFvIMrTmFOnHWUHjz7PvDGVv+nQl66Z4K/oLlOPb+jdHXq XGX+pqUeIlxUpcjnrlofNrAQDXMqkxMyc7wLnJ+q2NixPPOJczdvpnilU6ggtxiJ 99SteZ1mrG+7HHQ/i4PCxIlbpsyzT8db -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:15 2025 by rpki-client