$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json) Hash identifier: KStY8IqN5G095iGn6kTpgOVIit0Qyz4IJOr0DDhAGzI= Subject key identifier: 6C:0C:82:52:EE:BC:0E:26:27:7B:CD:BC:B4:50:10:6E:DC:36:C1:09 Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft Manifest number: 1C25 Signing time: Fri 22 Aug 2025 16:16:45 +0000 Manifest this update: Fri 22 Aug 2025 16:16:45 +0000 Manifest next update: Fri 29 Aug 2025 16:16:45 +0000 Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: xpsHaOmJUa0CHm2FpprPyOTv2O2xtkVkE/BbujsA7m0=) 2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: 87Eagj9nbEvxROvw6iIl3FH0KdIVxp+aZzvllNFI0J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7216 (0x1c30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Aug 22 16:16:45 2025 GMT Not After : Aug 29 16:16:45 2025 GMT Subject: CN=68a897ed-5c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:ca:50:5b:6b:8d:ec:c2:85:6d:ee:4f:94: dd:12:e3:a4:f7:f2:c4:9e:e9:41:85:ef:9d:65:48: ed:c9:4b:9e:92:eb:c2:59:af:53:9e:e3:f3:76:e4: 26:8c:bf:6a:ec:37:05:ef:23:13:d7:c0:27:c6:49: 8f:cf:76:ae:b1:1a:7d:2f:5c:59:2f:c4:09:d6:a1: a9:95:86:4f:25:a8:ca:30:28:f1:86:eb:45:1f:ac: be:e6:8b:a0:d2:ae:a7:f8:6a:1a:30:cd:06:88:3f: d1:87:61:d8:56:1f:97:00:e7:11:6a:dd:25:60:e4: 44:b3:3d:95:1b:2a:ec:f1:97:b0:99:21:e2:f0:60: 0c:e2:98:7e:48:16:7d:31:46:20:d0:24:18:a3:91: 8f:c1:c6:35:5f:6a:6b:9f:f1:cb:2e:c7:21:62:ba: 9b:a6:4f:1a:ff:4f:b0:80:72:80:fc:11:39:c3:47: 25:02:1b:58:07:e2:75:1f:2f:e8:f6:3a:24:28:54: 2c:ea:20:7d:00:fd:cc:87:48:e8:b6:2a:3b:22:8e: a3:90:8d:08:d3:92:79:a4:ce:ba:e4:5d:ff:65:a8: 3c:27:72:51:f3:8e:6b:a9:a7:ec:85:90:0b:57:dd: 7e:7a:3f:0c:09:b5:a7:c5:92:c2:61:73:bf:e8:7e: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0C:82:52:EE:BC:0E:26:27:7B:CD:BC:B4:50:10:6E:DC:36:C1:09 X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:70:d4:21:0f:fa:3a:f6:a0:c9:ae:6a:c8:cf:da:79:33:17: c7:d6:79:9b:9e:1a:dc:4a:c6:75:71:87:5b:1f:83:d8:65:15: 85:9a:78:1b:f9:ad:42:9f:e3:d8:62:d0:2b:b9:a3:6a:e4:b4: b8:bd:69:38:05:0e:56:3b:4a:f5:69:96:90:7e:db:de:e0:c9: 6f:62:40:db:72:08:3f:c2:6c:e8:6e:67:e5:19:67:2b:e4:41: ab:6d:ec:c2:f4:2d:6e:9d:cb:bd:e8:f9:8b:fd:e2:90:cc:52: fe:0b:9a:62:12:ee:06:9c:87:89:40:7c:12:75:e6:a5:72:29: be:d2:bf:35:27:7b:06:a7:06:14:1b:2f:2e:8d:80:3c:38:b2: 12:3e:a0:ff:0d:19:dc:c5:7d:80:a5:4d:13:42:48:b9:68:56: cb:9a:b6:a2:76:a7:1c:05:42:43:95:2b:6e:8c:c2:7d:8a:b0: aa:42:e6:3f:33:bf:9e:54:ac:57:6e:02:46:94:ad:9e:dc:d8: 55:54:76:66:83:ee:8e:f4:6c:85:66:83:36:a7:6f:d6:bd:ab: c1:48:c2:b3:2e:f2:00:32:34:6a:67:6f:35:85:9f:4c:61:ca: cc:fa:fd:1c:a8:af:33:17:f5:c7:a0:ba:57:19:c1:36:a8:62: a1:21:09:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjUwODIyMTYxNjQ1WhcNMjUwODI5MTYxNjQ1WjAYMRYwFAYD VQQDEw02OGE4OTdlZC01YzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOvKUFtrjezChW3uT5TdEuOk9/LEnulBhe+dZUjtyUuekuvCWa9TnuPzduQm jL9q7DcF7yMT18AnxkmPz3ausRp9L1xZL8QJ1qGplYZPJajKMCjxhutFH6y+5oug 0q6n+GoaMM0GiD/Rh2HYVh+XAOcRat0lYOREsz2VGyrs8ZewmSHi8GAM4ph+SBZ9 MUYg0CQYo5GPwcY1X2prn/HLLschYrqbpk8a/0+wgHKA/BE5w0clAhtYB+J1Hy/o 9jokKFQs6iB9AP3Mh0jotio7Io6jkI0I05J5pM665F3/Zag8J3JR845rqafshZAL V91+ej8MCbWnxZLCYXO/6H5ncwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwMglLu vA4mJ3vNvLRQEG7cNsEJMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq d2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7cNQhD/o69qDJrmrIz9p5MxfH1nmbnhrcSsZ1cYdbH4PYZRWFmngb +a1Cn+PYYtAruaNq5LS4vWk4BQ5WO0r1aZaQftve4MlvYkDbcgg/wmzobmflGWcr 5EGrbezC9C1uncu96PmL/eKQzFL+C5piEu4GnIeJQHwSdealcim+0r81J3sGpwYU Gy8ujYA8OLISPqD/DRncxX2ApU0TQki5aFbLmraidqccBUJDlStujMJ9irCqQuY/ M7+eVKxXbgJGlK2e3NhVVHZmg+6O9GyFZoM2p2/WvavBSMKzLvIAMjRqZ281hZ9M YcrM+v0cqK8zF/XHoLpXGcE2qGKhIQmx -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:58 2025 by rpki-client