$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: b57toY1H+FHwbL5RVUmGdaZZaDNlhm/WqBgRObisTqU= Subject key identifier: 19:8D:68:30:5B:EE:CB:08:57:04:E7:C2:3E:F8:F1:43:66:EF:E6:69 Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 34CF Signing time: Fri 22 Aug 2025 14:36:08 +0000 Manifest this update: Fri 22 Aug 2025 14:36:07 +0000 Manifest next update: Fri 29 Aug 2025 14:36:07 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: uGkWCIwOsaZKEwHeDGT08xzmabsP4w8O81fPdx5JgYs=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: 24BjWAqe2qRsQURE8DMBPNk7l6vHhbx1QB6qiJta7cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Aug 22 14:36:07 2025 GMT Not After : Aug 29 14:36:07 2025 GMT Subject: CN=68a88057-8c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:51:27:c5:6f:fd:c1:91:27:f3:41:0d:2b:2b: bd:f6:5e:26:9d:9d:2f:e5:8c:c9:1a:a5:cf:dc:cb: 28:ea:e5:fd:a9:b4:7b:60:69:ab:58:f8:57:f4:1a: 8c:f9:d9:7d:fe:16:a2:67:55:b9:27:b6:f3:bb:62: 41:ea:d6:69:61:2d:9c:09:75:07:65:e2:4e:5d:4c: d1:b3:8e:aa:1f:13:49:2b:b2:48:7c:c9:f6:82:83: 5a:d7:69:39:74:34:32:43:32:ef:a1:a7:c1:9d:d8: 23:f5:22:da:c2:9b:d2:96:29:7f:7f:53:12:70:b0: 5a:2f:2f:a7:d4:95:f4:1b:35:ec:53:00:35:52:64: 74:75:27:fd:31:56:c2:58:2e:4a:20:18:f2:84:14: d9:23:ce:d5:e8:24:8c:8a:fe:a5:2e:e8:22:5c:37: de:7e:05:19:2b:9d:b4:cc:c6:1a:b1:9e:cf:66:34: 0f:ec:16:9d:5e:d6:8c:b3:20:a5:90:f3:97:8a:c4: 2d:91:e3:db:84:6f:e6:85:b0:0a:50:7e:9c:09:16: 3e:d4:41:37:85:de:25:41:5b:f2:ea:c7:17:de:d0: c1:81:e8:73:05:c7:2a:4b:ba:89:8c:cd:c6:da:b2: 30:dc:c4:64:b9:b0:c4:d5:8a:39:16:78:cd:e4:25: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8D:68:30:5B:EE:CB:08:57:04:E7:C2:3E:F8:F1:43:66:EF:E6:69 X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:dd:99:84:d6:8e:b8:f8:85:87:b2:9d:ea:74:c7:bc:f4:cc: 46:7b:1b:37:a8:c2:ef:aa:6c:7e:2f:d4:6c:a0:d6:82:05:7c: 9f:b4:04:2c:49:b2:2a:cf:2f:c1:1e:9e:24:b2:54:a5:5d:59: 30:f4:c1:71:5f:e6:57:2d:a8:e8:05:13:46:5f:35:ce:63:50: eb:3d:04:62:b2:7c:8d:38:48:82:ea:37:68:8c:ec:2d:19:05: 28:59:1e:3b:61:33:ac:04:52:ac:e2:65:8b:0e:ef:7e:c9:85: aa:ff:0d:1c:f8:05:00:27:a9:f5:3d:75:ee:72:0c:6c:49:37: 49:fa:d1:2f:93:e6:7b:f9:81:f6:60:91:d7:d6:87:e0:a8:42: 92:2e:cc:be:9f:8c:e7:75:0a:60:e8:49:17:ae:61:1d:b9:30: 66:93:70:b0:52:41:0e:2d:46:aa:20:f1:15:de:79:8d:72:87: 4e:b3:69:b2:6b:49:d6:8e:81:c7:59:6d:cf:9f:78:54:f2:02: 28:07:d6:72:7b:69:fa:f8:83:ed:db:1a:ed:48:97:3e:75:b6: b1:05:30:cc:86:b1:9d:11:b4:15:ab:35:5b:42:6d:00:54:f3: f8:35:37:e5:42:15:a7:7e:38:c7:09:c5:63:0b:14:35:f6:40: f3:4e:5e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUwODIyMTQzNjA3WhcNMjUwODI5MTQzNjA3WjAYMRYwFAYD VQQDEw02OGE4ODA1Ny04Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VEnxW/9wZEn80ENKyu99l4mnZ0v5YzJGqXP3Mso6uX9qbR7YGmrWPhX9BqM +dl9/haiZ1W5J7bzu2JB6tZpYS2cCXUHZeJOXUzRs46qHxNJK7JIfMn2goNa12k5 dDQyQzLvoafBndgj9SLawpvSlil/f1MScLBaLy+n1JX0GzXsUwA1UmR0dSf9MVbC WC5KIBjyhBTZI87V6CSMiv6lLugiXDfefgUZK520zMYasZ7PZjQP7BadXtaMsyCl kPOXisQtkePbhG/mhbAKUH6cCRY+1EE3hd4lQVvy6scX3tDBgehzBccqS7qJjM3G 2rIw3MRkubDE1Yo5FnjN5CV7fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmNaDBb 7ssIVwTnwj748UNm7+ZpMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ3ZmE1o64+IWHsp3qdMe89MxGexs3qMLvqmx+L9RsoNaCBXyftAQs SbIqzy/BHp4kslSlXVkw9MFxX+ZXLajoBRNGXzXOY1DrPQRisnyNOEiC6jdojOwt GQUoWR47YTOsBFKs4mWLDu9+yYWq/w0c+AUAJ6n1PXXucgxsSTdJ+tEvk+Z7+YH2 YJHX1ofgqEKSLsy+n4zndQpg6EkXrmEduTBmk3CwUkEOLUaqIPEV3nmNcodOs2my a0nWjoHHWW3Pn3hU8gIoB9Zye2n6+IPt2xrtSJc+dbaxBTDMhrGdEbQVqzVbQm0A VPP4NTflQhWnfjjHCcVjCxQ19kDzTl7c -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:45 2025 by rpki-client