$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft File: gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json) Hash identifier: tWmcmhi1pHlViazwrpqL9Z4lO/bBiMIRRAK5xvawu3U= Subject key identifier: A9:C0:E2:35:B7:14:E9:1C:75:57:48:4D:B3:D8:84:31:E3:6D:63:60 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft Manifest number: 0538 Signing time: Mon 30 Jun 2025 23:54:41 +0000 Manifest this update: Mon 30 Jun 2025 23:54:41 +0000 Manifest next update: Mon 07 Jul 2025 23:54:41 +0000 Files and hashes: 1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: Q0MkV0N33wEI/vKT1fE6KGjnVuuV9/IIENbV4Vdcyzo=) 2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DeWvXrtTOlNASLEtVwCRq5xJVs2BWXsb8zrs6Aq/kZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Jun 30 23:54:41 2025 GMT Not After : Jul 7 23:54:41 2025 GMT Subject: CN=686323c1-8e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:5f:21:ad:c2:16:a2:3b:a0:d7:5f:ac:fc: fc:f8:87:96:dd:1d:da:cd:50:20:5f:8c:a7:c6:d5: fb:b7:96:c6:ae:cf:bb:92:4a:ee:6f:4e:6c:85:de: f2:e2:f1:f8:0b:b1:5a:af:c4:3e:f9:6d:7c:aa:81: 42:50:9a:ea:09:b5:25:a8:4d:c2:52:3e:9d:a6:ea: 55:39:6b:82:e4:8b:f8:9d:88:3e:28:61:4d:1a:22: 53:98:1c:9c:46:40:1e:9f:4c:e4:1b:f7:6a:22:79: 32:e6:35:f7:b0:56:c0:a8:60:f6:e2:53:ec:8c:2b: 97:08:de:06:dc:bd:b8:91:09:63:c1:c6:af:27:c7: 8d:93:24:32:f4:f9:09:43:69:2c:9b:d6:6b:92:73: a2:ab:20:aa:27:6d:eb:fc:50:04:d5:14:1c:64:37: 9e:52:9b:3d:bf:87:04:e1:9d:f2:ae:c1:08:ac:e9: 22:12:fb:01:14:5a:fb:26:9b:7d:ec:aa:d2:c3:8d: 9a:23:e5:0b:9b:0a:b4:62:10:5d:e7:67:20:59:81: a0:d5:4c:5e:b5:00:63:e2:69:6b:b7:fe:c8:05:64: 0d:44:6a:ff:a1:2f:f3:be:a1:7b:3f:bc:80:4b:92: 05:06:9d:a8:84:c1:9a:6c:fc:f8:c6:09:fd:a3:1d: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:E2:35:B7:14:E9:1C:75:57:48:4D:B3:D8:84:31:E3:6D:63:60 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:04:a0:79:6d:ad:63:4f:f9:c6:92:16:4d:8e:a3:2e:00:17: 8c:7b:43:1d:95:3f:3f:d3:01:c6:0a:ed:6b:cf:5b:f1:80:47: fc:27:5d:56:a1:51:14:d6:f9:c2:57:a5:a0:f9:3e:6b:d3:d9: e9:12:bb:f5:1a:65:02:b1:f9:bb:12:d1:71:4a:59:e4:47:cf: 70:b1:9d:cb:be:00:a3:ba:c0:57:b5:11:09:82:3c:8a:b0:af: 9a:9f:24:b9:b4:b8:4f:24:b6:15:9e:2a:1f:7d:ed:6d:88:30: 01:84:a8:56:f5:ef:26:86:59:e7:80:ce:8c:2d:69:44:58:0e: d9:69:7d:75:47:aa:df:70:76:25:49:c0:06:8c:52:ef:b5:e7: 84:9d:7e:62:52:2a:16:15:f6:42:a0:c2:9c:ac:df:33:64:9d: 7a:09:fb:41:d9:b3:8b:e6:d8:d7:a9:4e:2d:1a:4d:19:ba:f2: 54:0a:78:e0:8b:c7:d2:10:6f:7a:10:1f:ee:ee:91:30:51:24: a1:49:4e:77:99:57:5f:38:2d:62:e0:89:73:44:ba:54:a0:e7: e3:96:ee:8c:ec:93:e1:2e:6d:6a:9a:91:51:67:50:5d:c6:0c: cd:ba:43:aa:ab:88:11:19:45:7d:af:d0:54:0d:11:74:2e:af: 8b:0c:1f:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUwNjMwMjM1NDQxWhcNMjUwNzA3MjM1NDQxWjAYMRYwFAYD VQQDEw02ODYzMjNjMS04ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE1fIa3CFqI7oNdfrPz8+IeW3R3azVAgX4ynxtX7t5bGrs+7kkrub05shd7y 4vH4C7Far8Q++W18qoFCUJrqCbUlqE3CUj6dpupVOWuC5Iv4nYg+KGFNGiJTmByc RkAen0zkG/dqInky5jX3sFbAqGD24lPsjCuXCN4G3L24kQljwcavJ8eNkyQy9PkJ Q2ksm9ZrknOiqyCqJ23r/FAE1RQcZDeeUps9v4cE4Z3yrsEIrOkiEvsBFFr7Jpt9 7KrSw42aI+ULmwq0YhBd52cgWYGg1UxetQBj4mlrt/7IBWQNRGr/oS/zvqF7P7yA S5IFBp2ohMGabPz4xgn9ox2HiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnA4jW3 FOkcdVdITbPYhDHjbWNgMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNDNy83QjJGNTM4QUZFNjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNC SzM1OEp6RGRCZ2ZoRGJnUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3BKB5ba1jT/nGkhZNjqMuABeMe0MdlT8/0wHGCu1rz1vxgEf8J11W oVEU1vnCV6Wg+T5r09npErv1GmUCsfm7EtFxSlnkR89wsZ3LvgCjusBXtREJgjyK sK+anyS5tLhPJLYVnioffe1tiDABhKhW9e8mhlnngM6MLWlEWA7ZaX11R6rfcHYl ScAGjFLvteeEnX5iUioWFfZCoMKcrN8zZJ16CftB2bOL5tjXqU4tGk0ZuvJUCnjg i8fSEG96EB/u7pEwUSShSU53mVdfOC1i4IlzRLpUoOfjlu6M7JPhLm1qmpFRZ1Bd xgzNukOqq4gRGUV9r9BUDRF0Lq+LDB+s -----END CERTIFICATE-----Generated at Wed Jul 2 04:22:51 2025 by rpki-client