$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: 5ZqcxD+3xquHgEUl1gsG1JR6VPzxvgHs5zsssaQY8I0= Subject key identifier: 8E:04:F9:BF:38:F5:24:7E:9A:27:4D:8F:71:62:66:D3:F1:95:47:5A Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A10 Signing time: Wed 02 Jul 2025 16:29:35 +0000 Manifest this update: Wed 02 Jul 2025 16:29:34 +0000 Manifest next update: Wed 09 Jul 2025 16:29:34 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: rnmxRX1MzM0Hg/svc5ZvyUIZh9zCiymJOHpPl2w30eY=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: zSKXyhNbfFoYNCqEVuHbtopb0K0RjSYVs5+6fMK45yM=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: TNm1D3H84N7whf8ekQ/vCF3rhsZGPVYvMkkPOGLONIM=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 8/w05fSu74dL03k0q9KVl8WrlCWTBNHjvuwvJNrIN8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6706 (0x1a32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Jul 2 16:29:34 2025 GMT Not After : Jul 9 16:29:34 2025 GMT Subject: CN=68655e6f-66bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:cd:a1:cb:8d:12:da:d8:17:e8:a7:db:7e: 80:b0:a8:b5:b8:15:c7:16:a4:c7:e8:7a:59:50:ca: c7:34:4c:4a:af:45:11:3c:ab:3b:8e:20:ae:ca:b7: d7:87:64:92:b8:f5:bd:99:ec:ed:81:ba:df:d4:5d: 1c:18:87:b5:99:8a:83:56:3e:01:b5:ad:b4:f3:f9: 10:2d:e1:db:4e:a6:42:cb:c3:75:ee:34:c6:2b:18: f3:45:0b:01:41:d2:4a:26:65:1d:66:0d:b8:bb:98: 26:4b:c3:30:d2:2e:61:3b:35:25:31:d5:b1:b5:07: 0e:15:62:79:58:d0:55:74:a0:3c:a0:b8:ad:23:d2: 74:05:f0:1c:ec:50:3a:4d:ee:82:15:8e:47:1d:77: 0f:75:e1:19:13:e0:c2:cb:6e:da:7a:ef:63:61:ac: e8:09:50:44:cc:e2:ed:6a:61:bc:d8:83:fc:29:07: 08:c1:df:1c:f7:76:ba:52:84:ef:53:ca:78:d6:75: 4d:69:c8:c5:ae:c4:1c:1b:45:3b:89:c7:ba:b4:ee: 01:6e:8d:1e:00:c3:bb:3b:28:41:ed:91:9f:e8:c5: 8b:89:7c:c0:2f:1b:ec:08:95:20:98:a9:51:61:46: 85:80:84:02:3c:44:e7:a9:d9:cf:3c:b8:40:35:95: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:F9:BF:38:F5:24:7E:9A:27:4D:8F:71:62:66:D3:F1:95:47:5A X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4a:89:1f:9d:7c:69:ac:af:1c:33:63:70:c3:78:d3:fc:cf: 0a:51:9f:77:78:db:ea:74:ed:06:6d:20:cd:f2:e6:1b:fe:18: 6d:8f:17:18:44:46:98:5d:5b:47:6b:45:07:c9:fc:f4:37:c0: bb:c9:a6:f3:d1:54:bd:c4:2a:d8:ab:12:2d:34:d2:68:44:5b: ee:bf:3c:0e:4d:15:0c:58:c1:8e:01:f2:a4:dd:4a:e2:18:b5: 49:2b:8a:cb:a0:bf:fc:b7:77:ed:48:a0:05:c6:b5:d8:18:8f: f8:2c:ca:3c:0a:4e:29:39:38:e7:4f:56:7f:fd:86:11:a9:4b: 5c:a6:57:a6:65:b2:26:11:f8:27:76:13:21:bf:37:7f:e0:c9: d5:c8:b9:ce:1c:4f:21:c2:af:30:5e:02:7a:f5:ba:24:76:98: f9:4b:bb:bf:8f:8c:a9:c8:0c:02:1b:28:ef:47:b6:7d:42:27: 6a:ce:b8:0e:68:8e:79:0b:d0:e2:59:06:32:6c:56:62:47:b6: 6e:16:bb:3c:8a:03:bf:37:65:67:f1:b9:a6:57:cf:8e:97:77: 06:29:ae:2f:d8:f9:98:0e:7a:4b:7f:a1:04:11:60:68:06:f1: b2:69:51:bb:0e:fd:d5:f4:dc:81:23:9d:0e:98:cf:d9:d1:66: 3e:d3:2c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUwNzAyMTYyOTM0WhcNMjUwNzA5MTYyOTM0WjAYMRYwFAYD VQQDEw02ODY1NWU2Zi02NmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRXNocuNEtrYF+in236AsKi1uBXHFqTH6HpZUMrHNExKr0URPKs7jiCuyrfX h2SSuPW9meztgbrf1F0cGIe1mYqDVj4Bta208/kQLeHbTqZCy8N17jTGKxjzRQsB QdJKJmUdZg24u5gmS8Mw0i5hOzUlMdWxtQcOFWJ5WNBVdKA8oLitI9J0BfAc7FA6 Te6CFY5HHXcPdeEZE+DCy27aeu9jYazoCVBEzOLtamG82IP8KQcIwd8c93a6UoTv U8p41nVNacjFrsQcG0U7ice6tO4Bbo0eAMO7OyhB7ZGf6MWLiXzALxvsCJUgmKlR YUaFgIQCPETnqdnPPLhANZWNRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4E+b84 9SR+midNj3FiZtPxlUdaMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+SokfnXxprK8cM2Nww3jT/M8KUZ93eNvqdO0GbSDN8uYb/hhtjxcY REaYXVtHa0UHyfz0N8C7yabz0VS9xCrYqxItNNJoRFvuvzwOTRUMWMGOAfKk3Uri GLVJK4rLoL/8t3ftSKAFxrXYGI/4LMo8Ck4pOTjnT1Z//YYRqUtcplemZbImEfgn dhMhvzd/4MnVyLnOHE8hwq8wXgJ69bokdpj5S7u/j4ypyAwCGyjvR7Z9QidqzrgO aI55C9DiWQYybFZiR7ZuFrs8igO/N2Vn8bmmV8+Ol3cGKa4v2PmYDnpLf6EEEWBo BvGyaVG7Dv3V9NyBI50OmM/Z0WY+0yw+ -----END CERTIFICATE-----Generated at Fri Jul 4 07:07:03 2025 by rpki-client