$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json) Hash identifier: mfnMNH/HuEHRQqYKjkkirZHZbbYta9drgOnuSC1wdPU= Subject key identifier: 5C:00:0B:3D:EF:31:71:36:FC:16:3D:FE:22:AD:66:21:28:F5:17:9C Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft Manifest number: 19 Signing time: Thu 03 Jul 2025 08:12:08 +0000 Manifest this update: Thu 03 Jul 2025 08:12:08 +0000 Manifest next update: Thu 10 Jul 2025 08:12:08 +0000 Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: ktJrzORZfy31hmjB+jhv8VXQlXQOSJ+IorQm6Ci5QCw=) 2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Validity Not Before: Jul 3 08:12:08 2025 GMT Not After : Jul 10 08:12:08 2025 GMT Subject: CN=68663b58-14ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:6a:8d:d3:0a:9b:a0:67:16:0b:85:47:1c: 19:61:aa:d2:c2:d3:6e:3c:68:ce:6a:2c:05:fd:d8: 3d:6e:fe:db:b2:10:49:08:d1:92:8c:df:ef:f3:a6: 0d:17:eb:b0:76:29:ed:a2:26:18:63:d3:04:a3:e8: c1:6a:5b:a0:c6:54:4b:24:55:83:13:06:50:da:fa: a2:b8:28:7c:7e:87:0a:3c:67:46:bc:5d:c4:c0:35: 50:b4:82:25:15:4c:74:95:97:13:dd:92:09:5b:02: 91:f4:4b:6c:d3:d0:eb:96:d0:c4:f0:2c:e5:c8:cd: 8c:f7:1d:1c:f0:53:03:77:34:0b:87:44:13:3f:c2: 28:e9:67:60:56:19:e2:16:38:f3:b5:3e:64:c7:97: fe:39:99:43:6e:4d:8c:20:de:94:e3:a5:9d:23:0e: c7:f7:e2:13:df:78:40:ef:32:e9:5a:6d:53:40:05: d2:24:e7:82:dd:fb:92:84:f2:33:42:88:63:6f:31: 61:3e:38:a2:c4:af:18:86:7f:fc:87:c7:2e:0b:e9: a0:6c:b7:7d:15:56:4c:c7:1b:75:05:cd:d9:26:e9: 23:cc:de:01:9a:da:9f:f0:a5:a2:c5:1c:9d:e6:64: ba:7f:0e:96:d4:16:cc:e9:35:9b:7b:cd:f6:7e:a1: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:00:0B:3D:EF:31:71:36:FC:16:3D:FE:22:AD:66:21:28:F5:17:9C X509v3 Authority Key Identifier: keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2d:e3:12:ff:ff:c5:04:07:14:f0:f3:6a:b5:37:98:3b:79: 25:34:60:8e:6b:fe:c2:32:71:61:55:4b:f0:aa:a5:02:8a:b2: 59:72:e0:5a:c9:d0:ac:3b:4e:47:ef:5c:2a:59:fc:62:b9:41: d8:8d:ef:98:91:68:aa:1a:15:ef:97:03:f7:5f:8b:ef:71:c9: c2:65:19:d5:55:29:ab:7c:07:8e:75:c5:c8:59:c8:17:4d:b6: 6e:41:05:84:dc:9e:a3:5e:87:77:be:8c:a9:c0:bc:ff:7e:6f: f7:d7:ec:d6:65:ee:39:21:09:bc:95:c6:e7:29:01:70:8c:46: db:c6:a0:03:f3:73:19:6c:6f:06:f6:75:ff:04:9a:ac:24:03: 18:88:6c:a2:57:10:a4:82:56:9e:07:33:fe:5f:b0:62:6e:a8: 64:6f:ff:88:6c:3f:c3:68:ee:60:ae:0e:56:0c:53:e2:83:04: ec:f0:36:a9:0d:b5:cc:f2:07:44:2a:97:f1:2a:a5:8c:af:32: a6:71:79:2a:0d:df:48:4c:ae:b2:3d:7b:8e:28:39:34:03:fc: df:b0:76:2c:53:5c:3d:f5:60:30:2a:21:9c:89:25:dc:f5:32: e8:ee:be:82:f8:52:e0:81:bc:09:8c:68:3a:d9:9b:30:00:49: a2:83:2c:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3 MzVDRUY0MDAeFw0yNTA3MDMwODEyMDhaFw0yNTA3MTAwODEyMDhaMBgxFjAUBgNV BAMTDTY4NjYzYjU4LTE0Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp7WqN0wqboGcWC4VHHBlhqtLC0248aM5qLAX92D1u/tuyEEkI0ZKM3+/zpg0X 67B2Ke2iJhhj0wSj6MFqW6DGVEskVYMTBlDa+qK4KHx+hwo8Z0a8XcTANVC0giUV THSVlxPdkglbApH0S2zT0OuW0MTwLOXIzYz3HRzwUwN3NAuHRBM/wijpZ2BWGeIW OPO1PmTHl/45mUNuTYwg3pTjpZ0jDsf34hPfeEDvMulabVNABdIk54Ld+5KE8jNC iGNvMWE+OKLErxiGf/yHxy4L6aBst30VVkzHG3UFzdkm6SPM3gGa2p/wpaLFHJ3m ZLp/DpbUFszpNZt7zfZ+oRunAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXAALPe8x cTb8Fj3+Iq1mISj1F5wwHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1 NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MzUyLzgyOTM4MDQ2MzE1NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVx N2JsUVVaVEw5RTNOYzcwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACct4xL//8UEBxTw82q1N5g7eSU0YI5r/sIycWFVS/CqpQKKslly4FrJ 0Kw7TkfvXCpZ/GK5QdiN75iRaKoaFe+XA/dfi+9xycJlGdVVKat8B451xchZyBdN tm5BBYTcnqNeh3e+jKnAvP9+b/fX7NZl7jkhCbyVxucpAXCMRtvGoAPzcxlsbwb2 df8EmqwkAxiIbKJXEKSCVp4HM/5fsGJuqGRv/4hsP8No7mCuDlYMU+KDBOzwNqkN tczyB0Qql/EqpYyvMqZxeSoN30hMrrI9e44oOTQD/N+wdixTXD31YDAqIZyJJdz1 MujuvoL4UuCBvAmMaDrZmzAASaKDLOk= -----END CERTIFICATE-----Generated at Fri Jul 4 18:00:09 2025 by rpki-client