$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: 0AOHJvsk2P+H0KOUDSDG7T1jd06J7p11X4+tEXTudxs= Subject key identifier: E8:7B:EA:16:C1:69:7D:35:EB:FE:A3:D6:BF:A2:D4:AF:89:E3:9F:91 Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 029A Signing time: Tue 01 Jul 2025 02:14:38 +0000 Manifest this update: Tue 01 Jul 2025 02:14:37 +0000 Manifest next update: Tue 08 Jul 2025 02:14:37 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: PL8yQLxAgyjtQW3nsA6Pr2hBfsh3j/P7fs22kkQ790g=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: kMCJJ8NAnniqHWPJmFXYj+p1oepcYEa7mi3n3n8XfS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Jul 1 02:14:37 2025 GMT Not After : Jul 8 02:14:37 2025 GMT Subject: CN=6863448d-1d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d4:3f:4f:6f:d3:85:85:ed:d7:2a:b9:96:2f: c5:5a:a7:3c:5a:00:10:b6:4d:ce:3f:e9:1e:62:e4: f6:2f:03:f1:81:00:17:28:3e:2a:89:5e:02:36:45: 33:bb:f9:88:73:4c:7c:62:58:77:dc:cc:02:25:b8: 0f:1a:e3:25:1d:89:3d:c1:93:6c:98:47:d1:fb:69: b1:b2:2a:bf:ca:7e:38:68:29:ea:0d:4c:83:99:b0: bd:48:23:bd:3e:80:19:2a:3f:c8:90:e1:c1:da:93: 10:e6:44:aa:ea:ea:58:39:74:31:8f:c6:86:82:f8: 2c:44:22:83:c1:7f:1e:ee:ed:2f:4c:26:17:bc:bd: 81:f9:7c:d9:2f:ef:be:84:c1:06:56:1a:51:d4:dd: 6d:5e:45:7e:10:ad:46:19:14:3a:d8:c5:66:09:69: 79:b8:6f:0c:b1:2d:18:13:05:11:96:76:0a:4b:04: 98:fb:c7:5d:3c:38:f9:01:c7:b7:c5:36:af:db:cf: ff:f5:42:22:b5:8e:ca:37:e8:83:5e:b7:84:6e:fe: c8:24:0f:5e:07:4f:15:7e:ce:39:8b:04:bc:28:43: a6:3b:7f:38:71:bb:04:d2:2b:89:1c:27:cc:3a:62: 45:01:ea:6b:d2:47:5d:44:5f:68:29:b1:06:21:83: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7B:EA:16:C1:69:7D:35:EB:FE:A3:D6:BF:A2:D4:AF:89:E3:9F:91 X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c2:14:60:6b:14:87:3b:cf:8c:e0:2c:99:aa:67:9c:70:66: f2:76:5d:30:52:f4:c2:ad:bd:86:ce:9c:1c:d1:17:5e:72:72: 09:a7:5d:08:06:6c:db:cd:fc:aa:a8:fb:c9:45:c8:16:b1:e0: f4:cd:fa:a2:38:a9:13:b9:97:1c:fb:1e:2d:24:a2:5a:b1:d8: 4c:c0:7b:2c:e5:ef:37:d5:03:4a:f2:57:f5:74:a3:5b:4c:72: 02:05:72:fc:74:d7:6c:62:e6:e9:70:0b:03:75:ea:d6:4c:ed: 5c:c5:d3:d7:47:55:61:88:0c:4f:c6:46:ac:37:ff:c3:ee:87: bd:85:46:b2:e8:62:07:38:e8:27:db:89:90:c8:c4:f0:65:92: 9e:01:51:f2:6d:89:12:66:1e:99:8f:5c:9a:00:31:51:7f:c8: a7:6f:af:ef:24:c6:db:a2:8a:a6:5f:91:f7:56:81:e1:f5:f2: cb:75:1f:54:02:59:14:52:64:86:50:d0:db:71:65:e1:ae:4d: 82:5e:a8:ee:0c:44:60:11:84:e9:d9:bc:7a:aa:a2:7b:69:cf: f6:a3:d1:77:89:45:15:f1:4f:6b:91:c7:29:37:0a:d8:18:84: 3f:1b:bf:7e:5a:11:20:4a:f8:de:89:b8:9a:2d:4d:f0:e7:ff: c2:c1:3d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUwNzAxMDIxNDM3WhcNMjUwNzA4MDIxNDM3WjAYMRYwFAYD VQQDEw02ODYzNDQ4ZC0xZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NQ/T2/ThYXt1yq5li/FWqc8WgAQtk3OP+keYuT2LwPxgQAXKD4qiV4CNkUz u/mIc0x8Ylh33MwCJbgPGuMlHYk9wZNsmEfR+2mxsiq/yn44aCnqDUyDmbC9SCO9 PoAZKj/IkOHB2pMQ5kSq6upYOXQxj8aGgvgsRCKDwX8e7u0vTCYXvL2B+XzZL+++ hMEGVhpR1N1tXkV+EK1GGRQ62MVmCWl5uG8MsS0YEwURlnYKSwSY+8ddPDj5Ace3 xTav28//9UIitY7KN+iDXreEbv7IJA9eB08Vfs45iwS8KEOmO384cbsE0iuJHCfM OmJFAepr0kddRF9oKbEGIYPTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh76hbB aX016/6j1r+i1K+J45+RMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/whRgaxSHO8+M4CyZqmeccGbydl0wUvTCrb2Gzpwc0RdecnIJp10I BmzbzfyqqPvJRcgWseD0zfqiOKkTuZcc+x4tJKJasdhMwHss5e831QNK8lf1dKNb THICBXL8dNdsYubpcAsDderWTO1cxdPXR1VhiAxPxkasN//D7oe9hUay6GIHOOgn 24mQyMTwZZKeAVHybYkSZh6Zj1yaADFRf8inb6/vJMbbooqmX5H3VoHh9fLLdR9U AlkUUmSGUNDbcWXhrk2CXqjuDERgEYTp2bx6qqJ7ac/2o9F3iUUV8U9rkccpNwrY GIQ/G79+WhEgSvjeibiaLU3w5//CwT1w -----END CERTIFICATE-----Generated at Tue Jul 1 22:50:18 2025 by rpki-client