$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: jmB8g3gRIsFR9mftIJS/TOJL3MuRplvjRT0MNR2o9oM= Subject key identifier: 86:B1:63:C0:D1:88:11:82:BF:56:50:FE:A2:4A:D7:AE:04:F9:05:7E Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 36 Signing time: Tue 01 Jul 2025 08:33:08 +0000 Manifest this update: Tue 01 Jul 2025 08:33:07 +0000 Manifest next update: Tue 08 Jul 2025 08:33:07 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: zy23DAMabDJcXNswq7jyafShLyYDmy6tm4U7blWFRY4=) 2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=) 3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=) 4: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=) 5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=) 6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=) 7: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=) 8: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=) 9: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=) 10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: Jul 1 08:33:07 2025 GMT Not After : Jul 8 08:33:07 2025 GMT Subject: CN=68639d43-cdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:ce:7c:a1:b0:e8:3f:6d:d0:ec:a1:d0:52: 59:0e:7c:fe:a7:2d:f9:3b:41:7e:8a:d5:62:0f:a0: 51:64:0f:c0:27:9b:5a:f6:45:ab:39:59:54:be:57: 60:91:1d:70:de:82:71:aa:38:9e:00:d5:a8:5d:61: cc:c8:33:19:9c:1f:20:12:db:62:45:45:1d:74:c9: 54:f3:1b:11:15:53:56:24:b9:5f:f7:99:53:ca:8a: fd:51:da:1c:c7:59:c7:b1:de:ca:17:e9:62:c6:6b: 64:35:8a:7c:16:85:9a:d9:a7:b0:cc:ed:0e:a7:21: cb:89:55:c5:89:69:56:2a:28:30:0b:bd:0b:0b:36: b3:c4:80:fe:26:75:5f:ac:52:52:40:95:e5:53:5f: 81:b4:5b:f4:68:0f:2b:6f:a7:a9:42:10:4d:97:15: 07:26:cf:65:68:c0:93:c8:78:bc:1b:c5:76:3c:96: d1:e7:d9:d8:0f:f2:44:d6:b0:5a:76:0b:87:d2:d3: 58:01:d2:97:a2:64:82:79:6e:70:16:0c:21:f6:31: 7d:6e:72:29:41:de:70:a9:9f:38:a3:0e:14:e3:57: 2b:f7:78:73:64:c4:16:56:df:c3:ad:38:4a:e1:8b: 52:f6:79:67:93:75:01:93:a3:9b:1a:4d:1a:c9:fa: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B1:63:C0:D1:88:11:82:BF:56:50:FE:A2:4A:D7:AE:04:F9:05:7E X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:83:7f:e6:2a:66:90:ff:5e:56:8a:41:22:16:87:69:9a:fa: 9b:b3:32:4c:b6:3d:53:27:c1:5f:75:12:eb:a8:e1:84:ef:88: fe:d1:69:e2:48:ee:e7:b2:46:a4:80:78:c8:eb:7d:67:c8:91: 7a:3e:17:84:86:fe:56:0a:1c:3c:8f:8c:4b:2d:f5:30:96:11: 64:8f:cc:54:06:9c:b9:0d:38:af:0a:2b:de:42:1d:85:07:88: 0d:cd:7a:85:86:ee:c9:00:89:f0:1e:90:41:37:5b:6a:df:9d: fa:b2:02:4b:69:90:d0:79:c0:7f:60:a8:21:62:04:7d:d3:8e: c5:f2:10:39:2a:5c:9c:7d:65:ad:d5:f8:50:61:0b:79:44:9a: 91:2c:6a:ef:e3:c8:2d:cb:d7:e4:ab:a1:13:fb:a8:19:98:1e: 22:13:1a:aa:05:60:25:55:a0:c3:ef:21:15:65:74:18:e9:96: c0:bd:a4:07:c5:49:5c:d9:04:58:06:2c:56:78:9e:68:39:07: c7:db:e7:13:a5:87:9a:34:b8:8c:8f:37:55:37:e8:ac:29:d4: be:e2:52:65:e4:f0:a4:76:f4:19:e4:dd:7f:b8:3e:47:9e:6f: 42:e5:43:eb:ee:a6:a1:4f:ed:ad:98:21:c6:3d:8e:c6:c7:04: df:f7:67:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzRjExMC8GA1UEBRMoMTg5NjdEQ0RCNzI0QTg0QTcxNzExRTY3OEFBQjFEMkU3 MjIxNUQ2QzAeFw0yNTA3MDEwODMzMDdaFw0yNTA3MDgwODMzMDdaMBgxFjAUBgNV BAMTDTY4NjM5ZDQzLWNkY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSoc58obDoP23Q7KHQUlkOfP6nLfk7QX6K1WIPoFFkD8Anm1r2Ras5WVS+V2CR HXDegnGqOJ4A1ahdYczIMxmcHyAS22JFRR10yVTzGxEVU1YkuV/3mVPKiv1R2hzH Wcex3soX6WLGa2Q1inwWhZrZp7DM7Q6nIcuJVcWJaVYqKDALvQsLNrPEgP4mdV+s UlJAleVTX4G0W/RoDytvp6lCEE2XFQcmz2VowJPIeLwbxXY8ltHn2dgP8kTWsFp2 C4fS01gB0peiZIJ5bnAWDCH2MX1ucilB3nCpnzijDhTjVyv3eHNkxBZW38OtOErh i1L2eWeTdQGTo5saTRrJ+o/9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhrFjwNGI EYK/VlD+okrXrgT5BX4wHwYDVR0jBBgwFoAUGJZ9zbckqEpxcR5niqsdLnIhXWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDNGL0Q2ODRGQzJFMUE4 QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0paOXpiY2txRXB4Y1I1bmlxc2RMbkloWFd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDNGL0Q2ODRGQzJFMUE4QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVw eGNSNW5pcXNkTG5JaFhXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuDf+YqZpD/XlaKQSIWh2ma+puzMky2PVMnwV91Euuo4YTviP7RaeJI 7ueyRqSAeMjrfWfIkXo+F4SG/lYKHDyPjEst9TCWEWSPzFQGnLkNOK8KK95CHYUH iA3NeoWG7skAifAekEE3W2rfnfqyAktpkNB5wH9gqCFiBH3TjsXyEDkqXJx9Za3V +FBhC3lEmpEsau/jyC3L1+SroRP7qBmYHiITGqoFYCVVoMPvIRVldBjplsC9pAfF SVzZBFgGLFZ4nmg5B8fb5xOlh5o0uIyPN1U36Kwp1L7iUmXk8KR29Bnk3X+4Pkee b0LlQ+vupqFP7a2YIcY9jsbHBN/3ZxI= -----END CERTIFICATE-----Generated at Thu Jul 3 06:27:10 2025 by rpki-client