$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json) Hash identifier: LhEehBbWEo/E5/ITcuqaJygjlmVvqHV0ySRf6Z79wN0= Subject key identifier: A3:5C:DA:9A:1E:6E:AA:57:62:5E:B8:48:3A:88:18:B2:98:B9:7E:F4 Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft Manifest number: 0787 Signing time: Sat 28 Jun 2025 21:03:57 +0000 Manifest this update: Sat 28 Jun 2025 21:03:56 +0000 Manifest next update: Sat 05 Jul 2025 21:03:56 +0000 Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: 22D3oMgseS8L38nl1xHfacHtCQiM77qPWQ+Jo7dY+QQ=) 2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: E7aUJSWkWctXuYXSTwS30+xAR7ERalIEla2LT/i5k8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Validity Not Before: Jun 28 21:03:56 2025 GMT Not After : Jul 5 21:03:56 2025 GMT Subject: CN=686058bd-ef2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:2c:6b:88:3d:d2:91:b6:44:38:fa:ac:1d: e5:c8:f6:d4:52:f0:3a:84:0b:66:57:62:5e:32:bb: 86:74:45:7c:9f:e8:15:de:e7:64:92:c5:08:16:0e: da:a0:3e:bc:82:d5:1f:7b:33:34:bd:ab:90:ab:77: 19:1d:a6:c8:0f:12:3c:b5:44:6e:a9:52:3d:b4:0e: 01:20:29:8e:9a:5b:f2:8b:54:26:06:33:e8:71:1b: e7:32:d0:f2:61:80:2c:fd:6c:f5:c7:0c:4a:f3:57: a6:83:31:58:d7:f3:bd:4e:3f:d6:09:02:60:6c:85: f9:b1:35:74:aa:e7:2b:e1:ab:ef:f7:14:2d:45:f6: 13:1c:0c:57:3b:45:0b:2f:6e:30:7d:ab:54:b4:71: e0:7c:8d:1c:f3:30:5f:ea:bf:99:39:7d:2d:5e:d8: cb:5a:da:09:3b:ce:a9:df:cf:79:c5:fa:02:a3:4d: d1:7c:96:16:f8:04:c2:29:9f:85:a7:29:bc:04:c2: 88:b7:94:1c:bf:d3:02:e1:d7:da:62:b3:70:d5:40: 4b:29:cb:d0:29:bc:e2:66:8e:c7:9d:b0:aa:d0:9f: 23:37:b8:dd:4c:88:7d:4a:bc:4f:a5:1a:c6:17:4f: 1a:53:83:20:36:23:49:ae:92:50:bf:a3:56:36:6d: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5C:DA:9A:1E:6E:AA:57:62:5E:B8:48:3A:88:18:B2:98:B9:7E:F4 X509v3 Authority Key Identifier: keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:82:0c:04:50:42:f4:01:19:29:1b:cd:ef:23:13:83:1d:a0: 90:13:55:7b:9e:38:f7:83:9e:f4:2b:47:5c:36:00:46:db:0a: 2b:4e:e5:c1:8f:29:e3:88:b1:83:49:f5:93:53:d0:93:1c:6d: 2b:86:29:08:15:60:c8:90:53:49:92:e7:f7:6f:5d:09:53:29: bc:b8:97:1e:56:6a:a0:4d:6d:c0:7b:60:d1:66:3c:ab:c7:73: f8:fc:6d:09:41:07:ae:3d:94:3b:d2:62:9d:fd:14:59:cf:eb: a3:75:db:ca:e9:27:db:77:f5:c1:ef:3f:b0:0f:3f:f3:38:45: a2:6f:f7:7e:25:fd:a1:83:6a:4e:c4:94:fd:b4:b5:64:da:38: 5c:a7:88:17:fe:d9:59:63:62:cf:e7:f6:65:50:b4:0e:3f:88: 66:48:63:27:dd:e8:81:75:f3:2d:7d:6c:fe:f6:36:7d:91:50: 5d:fc:12:70:54:79:b6:dd:23:84:6b:54:3b:8b:06:17:e9:8b: c6:02:f9:06:15:24:82:8f:a6:dc:6d:6a:8c:3a:f0:92:63:f8: 32:9a:d3:21:03:90:f4:55:e2:a1:ea:f0:fd:26:da:92:b5:59: f8:94:38:ec:82:ba:e6:74:e1:4d:06:36:4e:3c:01:b5:e5:7a: d5:da:6b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy MUM0OTcwQ0IwHhcNMjUwNjI4MjEwMzU2WhcNMjUwNzA1MjEwMzU2WjAYMRYwFAYD VQQDEw02ODYwNThiZC1lZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIEsa4g90pG2RDj6rB3lyPbUUvA6hAtmV2JeMruGdEV8n+gV3udkksUIFg7a oD68gtUfezM0vauQq3cZHabIDxI8tURuqVI9tA4BICmOmlvyi1QmBjPocRvnMtDy YYAs/Wz1xwxK81emgzFY1/O9Tj/WCQJgbIX5sTV0qucr4avv9xQtRfYTHAxXO0UL L24wfatUtHHgfI0c8zBf6r+ZOX0tXtjLWtoJO86p3895xfoCo03RfJYW+ATCKZ+F pym8BMKIt5Qcv9MC4dfaYrNw1UBLKcvQKbziZo7HnbCq0J8jN7jdTIh9SrxPpRrG F08aU4MgNiNJrpJQv6NWNm0vpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNc2poe bqpXYl64SDqIGLKYuX70MB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSggwEUEL0ARkpG83vIxODHaCQE1V7njj3g570K0dcNgBG2worTuXB jynjiLGDSfWTU9CTHG0rhikIFWDIkFNJkuf3b10JUym8uJceVmqgTW3Ae2DRZjyr x3P4/G0JQQeuPZQ70mKd/RRZz+ujddvK6Sfbd/XB7z+wDz/zOEWib/d+Jf2hg2pO xJT9tLVk2jhcp4gX/tlZY2LP5/ZlULQOP4hmSGMn3eiBdfMtfWz+9jZ9kVBd/BJw VHm23SOEa1Q7iwYX6YvGAvkGFSSCj6bcbWqMOvCSY/gymtMhA5D0VeKh6vD9JtqS tVn4lDjsgrrmdOFNBjZOPAG15XrV2ms0 -----END CERTIFICATE-----Generated at Sun Jun 29 07:54:18 2025 by rpki-client