$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json) Hash identifier: cRpk314MVhB3/V4WyNSsIxbgpWdTTqbFJAkutEmDvug= Subject key identifier: 69:A8:37:49:22:D3:6F:DE:9A:67:A3:67:2A:2C:E1:D3:F2:30:FC:21 Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Certificate serial: 1585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft Manifest number: 157B Signing time: Sat 28 Jun 2025 16:39:00 +0000 Manifest this update: Sat 28 Jun 2025 16:38:59 +0000 Manifest next update: Sat 05 Jul 2025 16:38:59 +0000 Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: SBEi5rqOB/O1wWSxB+MIXs6Nk073TPOeLzsIIsCtcLQ=) 2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: xdBFNPkazDP5YP2MUntpZBwPWV+oy0u7bSlxk8ZVSa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5509 (0x1585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Validity Not Before: Jun 28 16:38:59 2025 GMT Not After : Jul 5 16:38:59 2025 GMT Subject: CN=68601aa3-30bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:f2:90:f0:5b:ca:5c:7f:4f:c5:25:9f:3f: cc:49:37:ca:41:b5:7d:ee:b8:58:93:0d:74:9b:0f: 63:84:48:79:9e:39:1e:e9:46:54:80:f1:14:31:50: 11:66:3e:c3:69:84:68:44:d1:b0:ff:81:84:6b:88: c0:f0:0a:49:e4:ec:ce:e0:6f:9c:a0:fe:b0:e2:6a: 91:85:6a:b9:91:00:45:05:98:3d:20:37:20:27:49: c4:07:46:6b:3f:63:33:4b:76:29:48:8a:c4:78:5a: 65:8d:05:36:27:5f:b6:b1:50:84:cf:74:64:f6:65: aa:2b:3d:fe:7d:ac:04:f8:79:78:e9:03:85:76:ab: e9:89:ad:6e:f4:b5:ed:09:bb:2e:07:ad:76:9a:ef: dd:28:af:12:d1:47:49:95:ff:bc:e9:2e:d0:04:1f: 1a:bd:6c:50:7f:36:7b:25:8b:0f:19:a1:d1:f2:a0: c5:be:b0:35:81:48:11:dc:d4:52:12:11:18:fc:54: bf:09:56:b0:2c:5a:51:eb:18:6c:de:dd:3e:d6:52: 3b:70:0d:0b:4f:6e:15:29:a2:dd:e9:fc:8e:c9:dd: cc:b9:2c:3f:6d:43:da:a5:76:a3:dd:e4:63:54:b7: 53:c2:b5:87:9d:71:61:25:86:3e:5b:70:45:7d:16: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:37:49:22:D3:6F:DE:9A:67:A3:67:2A:2C:E1:D3:F2:30:FC:21 X509v3 Authority Key Identifier: keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9e:3f:c5:70:79:4b:b8:38:b8:ec:b0:81:62:49:11:29:b3: ec:a2:e0:05:b4:5f:6f:4c:50:bd:18:ed:4d:de:dd:a3:8f:de: 24:6a:fc:fc:8a:13:bb:02:1f:98:83:14:7e:af:f3:84:d1:35: 80:a8:bb:01:69:ae:39:0c:b4:ed:a8:ad:16:4f:eb:c2:cb:74: 66:67:95:bf:55:15:7c:c7:6c:9b:80:cd:8f:b0:bc:81:03:f4: 38:e0:c2:0f:5d:0a:75:b9:4f:59:a6:b9:95:7c:b7:2d:3e:b2: 08:13:03:b8:b3:d4:1d:64:d4:b1:1e:0e:90:0d:1b:2f:cf:71: 79:11:fc:a9:86:c8:5f:d5:8a:fd:f9:ae:cc:1c:53:da:be:e1: 7a:fd:c0:3e:a7:9f:ba:85:26:80:da:1a:44:f1:ff:4c:e9:b2: ac:eb:fc:a1:3e:57:d7:b3:3e:f6:ca:08:04:13:60:04:a9:54: 75:27:50:21:40:55:19:f1:98:9d:19:55:d7:f4:8e:82:f4:63: a3:56:4b:c0:8e:85:56:26:5b:5b:29:2d:c5:eb:67:4a:0f:0a: b6:9d:cc:49:78:68:67:0f:59:a6:78:b8:86:fa:72:03:b0:bf: 32:33:0d:3c:6d:8a:a4:63:63:b4:9d:27:df:30:90:67:14:20: a0:34:6c:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5 NjNDM0Y2MzgwHhcNMjUwNjI4MTYzODU5WhcNMjUwNzA1MTYzODU5WjAYMRYwFAYD VQQDEw02ODYwMWFhMy0zMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq3ykPBbylx/T8Ulnz/MSTfKQbV97rhYkw10mw9jhEh5njke6UZUgPEUMVAR Zj7DaYRoRNGw/4GEa4jA8ApJ5OzO4G+coP6w4mqRhWq5kQBFBZg9IDcgJ0nEB0Zr P2MzS3YpSIrEeFpljQU2J1+2sVCEz3Rk9mWqKz3+fawE+Hl46QOFdqvpia1u9LXt CbsuB612mu/dKK8S0UdJlf+86S7QBB8avWxQfzZ7JYsPGaHR8qDFvrA1gUgR3NRS EhEY/FS/CVawLFpR6xhs3t0+1lI7cA0LT24VKaLd6fyOyd3MuSw/bUPapXaj3eRj VLdTwrWHnXFhJYY+W3BFfRZuxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmoN0ki 02/emmejZyos4dPyMPwhMB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4 RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDAwRS84MDBFM0Y3MjM4RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85 a2Qya1hEZW1JbE9XUEQ5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfnj/FcHlLuDi47LCBYkkRKbPsouAFtF9vTFC9GO1N3t2jj94kavz8 ihO7Ah+YgxR+r/OE0TWAqLsBaa45DLTtqK0WT+vCy3RmZ5W/VRV8x2ybgM2PsLyB A/Q44MIPXQp1uU9ZprmVfLctPrIIEwO4s9QdZNSxHg6QDRsvz3F5Efyphshf1Yr9 +a7MHFPavuF6/cA+p5+6hSaA2hpE8f9M6bKs6/yhPlfXsz72yggEE2AEqVR1J1Ah QFUZ8ZidGVXX9I6C9GOjVkvAjoVWJltbKS3F62dKDwq2ncxJeGhnD1mmeLiG+nID sL8yMw08bYqkY2O0nSffMJBnFCCgNGwH -----END CERTIFICATE-----Generated at Sun Jun 29 17:03:30 2025 by rpki-client