$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json) Hash identifier: h9fsjMnqcxP48TV0kKJyFrPksF2OdOOkIjjUj3jRwJ4= Subject key identifier: E7:58:30:2E:58:68:AE:DD:29:4E:68:8D:3C:1F:15:02:11:55:BE:14 Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1C17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft Manifest number: 1C0C Signing time: Fri 04 Jul 2025 16:26:57 +0000 Manifest this update: Fri 04 Jul 2025 16:26:56 +0000 Manifest next update: Fri 11 Jul 2025 16:26:56 +0000 Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: eUe8qHU66VxUtm7dBCl2KAE8SNP93/9HCM8icHWacDg=) 2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: 87Eagj9nbEvxROvw6iIl3FH0KdIVxp+aZzvllNFI0J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7191 (0x1c17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Jul 4 16:26:56 2025 GMT Not After : Jul 11 16:26:56 2025 GMT Subject: CN=686800d0-1536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:89:34:3d:28:a1:3f:23:a2:45:f0:42:95: c3:a6:16:8b:ca:22:4f:dc:2c:3c:bb:c8:80:fd:99: 57:7a:f3:99:c3:67:94:5f:3e:f7:0b:7b:d6:63:97: 85:6f:fe:3a:02:2a:a8:bc:47:b6:4c:66:4e:af:09: ba:4e:22:f3:1d:e1:32:42:d4:7c:9e:b9:00:10:75: b8:70:2e:4f:6a:92:23:f7:9b:94:a6:6b:bf:97:4e: 94:9f:d9:c5:97:ad:bb:29:48:3c:25:a5:79:a2:70: d5:6b:1d:2d:4c:b6:5e:09:0b:b0:1d:81:bb:60:af: 5b:7c:c7:7d:b4:84:78:26:77:31:61:d5:42:75:e4: 71:ff:ab:79:50:e2:46:b7:02:f5:06:55:74:2a:13: 11:25:95:d7:9f:ef:39:43:83:d1:c9:dd:20:7f:ed: 8d:b9:09:e9:ca:b0:ab:94:80:49:1c:e7:fc:23:12: 87:9d:77:b5:46:f6:d7:d6:53:9f:5f:87:74:88:9f: 1d:d7:21:f2:43:e9:3e:4b:1c:99:55:58:c7:2c:21: 72:d5:9c:8b:11:15:31:c1:37:5c:0c:b3:7b:cb:37: d3:ea:03:00:0f:b8:63:95:8e:26:10:7b:8b:f2:0f: 9d:eb:b5:86:3b:92:57:8e:12:17:7a:84:59:5c:47: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:58:30:2E:58:68:AE:DD:29:4E:68:8D:3C:1F:15:02:11:55:BE:14 X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:45:0d:20:6f:36:58:c0:1c:94:bd:c5:f9:fd:74:8c:9c:7b: 05:75:f7:17:8b:5e:f0:c9:90:e2:2d:cd:43:21:ec:0c:45:4a: 41:69:00:94:0e:29:4e:56:db:5c:4b:e5:5e:66:e1:1a:90:43: 47:08:d0:26:c9:31:a0:dd:c5:8e:23:1d:d6:bf:cd:00:d1:93: ce:97:52:1c:64:1e:a1:34:d6:ba:e6:5e:9d:ac:2b:9f:cc:4a: f8:8e:07:c7:e5:ac:a1:a8:77:c7:87:20:3b:1c:37:b1:79:7b: bd:22:70:e2:a4:46:c5:4a:84:26:51:79:4f:95:a2:f5:ed:a8: 61:b1:a1:5c:d6:9f:94:b8:80:5e:66:21:1c:fe:26:19:9f:31: c6:74:88:fb:55:bc:00:7d:d2:14:55:fb:d6:f4:5f:2b:80:18: 69:c5:36:0b:ff:d7:cc:83:55:4a:fa:aa:58:da:cd:3b:b6:ce: 98:18:6f:2d:e6:77:58:7f:39:f1:1e:43:da:38:9b:83:57:b2: 3e:f6:29:f1:1d:72:4f:65:a8:2d:04:14:e0:59:bd:aa:9e:e2: 3a:a5:fb:f7:9e:e0:11:ea:10:e0:bd:6a:a1:b4:9e:a9:0d:38: ca:d8:00:3c:9c:cc:1d:13:42:af:bd:88:a2:d8:4b:ab:ce:67: 8d:3d:88:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjUwNzA0MTYyNjU2WhcNMjUwNzExMTYyNjU2WjAYMRYwFAYD VQQDEw02ODY4MDBkMC0xNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YKJND0ooT8jokXwQpXDphaLyiJP3Cw8u8iA/ZlXevOZw2eUXz73C3vWY5eF b/46AiqovEe2TGZOrwm6TiLzHeEyQtR8nrkAEHW4cC5PapIj95uUpmu/l06Un9nF l627KUg8JaV5onDVax0tTLZeCQuwHYG7YK9bfMd9tIR4JncxYdVCdeRx/6t5UOJG twL1BlV0KhMRJZXXn+85Q4PRyd0gf+2NuQnpyrCrlIBJHOf8IxKHnXe1RvbX1lOf X4d0iJ8d1yHyQ+k+SxyZVVjHLCFy1ZyLERUxwTdcDLN7yzfT6gMAD7hjlY4mEHuL 8g+d67WGO5JXjhIXeoRZXEdinwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdYMC5Y aK7dKU5ojTwfFQIRVb4UMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq d2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwRQ0gbzZYwByUvcX5/XSMnHsFdfcXi17wyZDiLc1DIewMRUpBaQCU DilOVttcS+VeZuEakENHCNAmyTGg3cWOIx3Wv80A0ZPOl1IcZB6hNNa65l6drCuf zEr4jgfH5ayhqHfHhyA7HDexeXu9InDipEbFSoQmUXlPlaL17ahhsaFc1p+UuIBe ZiEc/iYZnzHGdIj7VbwAfdIUVfvW9F8rgBhpxTYL/9fMg1VK+qpY2s07ts6YGG8t 5ndYfznxHkPaOJuDV7I+9inxHXJPZagtBBTgWb2qnuI6pfv3nuAR6hDgvWqhtJ6p DTjK2AA8nMwdE0KvvYii2EurzmeNPYgh -----END CERTIFICATE-----Generated at Sat Jul 5 21:32:42 2025 by rpki-client