$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: gPUp7gXSI41dOVrSvACrBaYKyOIBtGkv82uRdLPDL0E= Subject key identifier: 78:0B:F0:B4:9B:8F:06:39:DC:FA:59:58:48:6F:F1:F7:20:1F:BF:23 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A3F Signing time: Wed 02 Jul 2025 19:58:25 +0000 Manifest this update: Wed 02 Jul 2025 19:58:24 +0000 Manifest next update: Wed 09 Jul 2025 19:58:24 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: ZMobsSOzuooVRk8DzD8vdFC4bu+geNXM615DcHuZJ54=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Jul 2 19:58:24 2025 GMT Not After : Jul 9 19:58:24 2025 GMT Subject: CN=68658f61-459a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:f5:a4:bf:01:c8:a5:e0:4f:41:a7:cc:f5: a1:48:fe:15:00:9d:76:0a:4c:80:8d:22:31:08:2e: 72:4d:ef:ba:be:84:2d:46:05:05:3c:50:6c:99:fd: 4d:b3:66:90:af:42:88:99:53:93:3e:bc:c3:24:c5: 6d:db:ca:98:61:26:cc:0c:f3:06:73:13:ae:32:d7: ad:a2:99:50:db:9d:e3:5c:a4:53:7c:73:53:3b:c5: 60:96:7c:51:32:1d:5c:4c:ab:58:47:3c:c2:01:b0: 01:0a:6a:6e:44:6d:bc:60:ad:61:02:6a:87:d4:e4: 9d:48:9d:f7:4b:5e:1e:06:cc:8d:d2:03:9f:d5:8c: bd:48:53:df:1a:1d:ba:25:19:64:0f:2a:93:82:57: c6:2c:16:fc:cd:7a:ed:d0:3b:d7:84:ce:1a:4f:85: 30:79:99:df:ba:fe:b3:54:ae:74:dd:78:8b:02:3e: 82:d8:93:a3:22:91:d4:1b:be:f1:2d:cf:79:5b:7c: da:40:38:67:6b:83:76:8b:c3:c6:e2:b8:fd:d8:af: 4a:8a:58:65:c1:25:d5:02:13:b3:a7:08:a4:8c:48: 43:e8:f8:94:df:08:74:c1:9c:9d:05:3e:38:45:74: b2:10:17:18:6f:0c:43:ac:22:59:b8:6e:9f:7a:92: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:F0:B4:9B:8F:06:39:DC:FA:59:58:48:6F:F1:F7:20:1F:BF:23 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b3:bd:bf:7d:54:5b:73:e8:46:42:18:72:18:b1:b8:a3:72: 0d:f4:11:b0:20:26:cc:26:bb:04:97:e1:5d:76:69:20:fc:a0: 22:4f:3a:0e:c1:5b:c0:46:ce:55:ba:bb:ff:6f:88:af:a7:f4: f9:7b:13:55:62:56:56:cc:4a:1d:99:85:e8:74:d1:ba:54:8f: 32:5c:22:05:cd:b2:d5:fc:c7:19:65:f2:68:9a:42:0d:ae:8e: f6:15:f6:16:e8:f8:56:8b:a4:e4:11:be:af:8f:f7:ca:43:f2: bd:2a:96:03:83:bd:d1:64:f8:e1:6a:0b:7e:01:73:15:f7:6f: ce:9c:a2:05:1b:4e:d5:87:0a:15:8b:d6:6c:01:31:6c:de:71: 69:66:81:75:df:37:81:0f:4a:07:92:aa:c1:0c:82:53:24:48: 70:28:8a:3c:e9:02:c5:f1:9a:6b:b8:9c:bc:04:e8:54:2b:0b: 9f:b2:85:97:43:c3:9c:56:d6:28:dc:02:f7:73:e0:b8:63:12: 8f:f6:fd:0d:03:9b:ce:ce:31:95:68:48:51:94:33:62:fc:10: 3f:7d:21:95:ea:7e:a1:2d:50:76:7f:35:d9:06:c7:4f:50:32: 60:27:2e:ef:56:7d:e9:14:5b:70:ed:d5:88:af:9e:31:21:dc: 3b:d1:2a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUwNzAyMTk1ODI0WhcNMjUwNzA5MTk1ODI0WjAYMRYwFAYD VQQDEw02ODY1OGY2MS00NTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgD1pL8ByKXgT0GnzPWhSP4VAJ12CkyAjSIxCC5yTe+6voQtRgUFPFBsmf1N s2aQr0KImVOTPrzDJMVt28qYYSbMDPMGcxOuMtetoplQ253jXKRTfHNTO8VglnxR Mh1cTKtYRzzCAbABCmpuRG28YK1hAmqH1OSdSJ33S14eBsyN0gOf1Yy9SFPfGh26 JRlkDyqTglfGLBb8zXrt0DvXhM4aT4UweZnfuv6zVK503XiLAj6C2JOjIpHUG77x Lc95W3zaQDhna4N2i8PG4rj92K9KilhlwSXVAhOzpwikjEhD6PiU3wh0wZydBT44 RXSyEBcYbwxDrCJZuG6fepJ4EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgL8LSb jwY53PpZWEhv8fcgH78jMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHs72/fVRbc+hGQhhyGLG4o3IN9BGwICbMJrsEl+Fddmkg/KAiTzoO wVvARs5Vurv/b4ivp/T5exNVYlZWzEodmYXodNG6VI8yXCIFzbLV/McZZfJomkIN ro72FfYW6PhWi6TkEb6vj/fKQ/K9KpYDg73RZPjhagt+AXMV92/OnKIFG07VhwoV i9ZsATFs3nFpZoF13zeBD0oHkqrBDIJTJEhwKIo86QLF8ZpruJy8BOhUKwufsoWX Q8OcVtYo3AL3c+C4YxKP9v0NA5vOzjGVaEhRlDNi/BA/fSGV6n6hLVB2fzXZBsdP UDJgJy7vVn3pFFtw7dWIr54xIdw70Sr5 -----END CERTIFICATE-----Generated at Thu Jul 3 08:05:16 2025 by rpki-client