$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: xLynYwBvZ796u6Gy7yoiUT+BLdXpl124g5n/gkZw538= Subject key identifier: FC:C4:A8:D7:65:63:E8:B2:44:3C:E8:12:6C:E7:4C:2B:61:98:8C:E9 Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 02B5 Signing time: Sat 23 Aug 2025 01:43:48 +0000 Manifest this update: Sat 23 Aug 2025 01:43:47 +0000 Manifest next update: Sat 30 Aug 2025 01:43:47 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: gF9wjWWoXftO5Yqpt7uQ1msTKfjK9l7tUrtXuTnunFc=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: kMCJJ8NAnniqHWPJmFXYj+p1oepcYEa7mi3n3n8XfS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Aug 23 01:43:47 2025 GMT Not After : Aug 30 01:43:47 2025 GMT Subject: CN=68a91cd4-e93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:88:6a:37:8b:5d:de:53:51:c0:56:d9:60: 8e:e2:88:88:9e:b0:4e:0d:d4:1e:fe:92:0a:08:cb: c0:dd:4a:6e:54:13:33:95:ad:e5:c9:5b:97:ba:d7: 61:f6:38:43:61:22:b8:01:85:6f:01:e6:d2:03:5e: 29:4c:78:e7:b5:80:e5:23:31:9a:22:92:49:cd:e4: 44:82:27:14:b0:df:e7:44:fc:dd:09:46:82:ad:ae: fa:af:1e:71:a3:1f:5e:09:eb:2b:c4:84:f4:6d:16: 39:ea:54:ca:1c:3e:57:18:2e:7b:40:9a:8f:e9:55: 1d:54:79:65:28:3c:16:ea:6b:c3:8d:28:fa:ae:f0: 38:e2:c9:2d:5d:83:dc:f6:09:f2:32:1f:d3:5a:be: cb:e7:10:9e:2c:22:38:9a:db:ad:ab:0d:28:c6:9d: 42:85:38:de:52:c1:b5:f0:cf:52:bb:2c:5d:c0:4a: 43:55:34:41:5f:89:75:85:e5:3d:b6:37:c3:81:c2: 84:55:e6:b6:28:22:3e:f3:d0:de:cc:8f:d1:d5:29: 60:c8:21:85:8e:9d:3b:36:9d:14:fe:b4:9f:d0:2f: 25:be:a8:cc:fa:f7:6e:75:74:e5:5d:ec:77:f1:ea: 4f:e2:3d:de:ea:4a:5d:f1:93:2c:7f:cb:6f:1c:de: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:A8:D7:65:63:E8:B2:44:3C:E8:12:6C:E7:4C:2B:61:98:8C:E9 X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e0:48:0e:a8:0a:f6:7d:fa:b3:b5:eb:bf:55:ed:70:9f:a7: 49:a5:5d:e6:88:8e:22:f7:ce:12:9d:33:0c:e0:df:f7:91:6e: 84:bc:3f:c9:57:36:00:f4:1b:70:da:bc:81:6e:41:f0:67:73: b6:90:f4:40:a4:d8:4a:6f:ac:17:7f:d7:c9:00:c0:3c:91:1f: 87:7b:b2:11:8c:ca:cf:af:5a:16:78:75:b2:c9:cf:97:a4:af: aa:33:81:61:ac:a6:97:55:7a:5d:ec:13:63:5d:8d:70:9b:ec: aa:1b:74:aa:17:72:3c:87:31:4c:90:76:72:f7:2a:93:a6:5e: 5a:e5:82:ee:85:12:63:4d:b9:13:46:9a:f5:4f:78:ae:d4:e6: c6:06:4c:da:08:02:1c:c5:48:fa:b9:6c:ab:58:de:12:5b:97: 5d:7e:81:f0:3d:cd:13:6a:7c:ae:d8:5f:a7:b4:37:33:06:fd: b5:ce:8f:82:65:71:ef:67:89:f3:75:4b:34:09:2a:33:ad:e1: f7:fd:ec:be:50:78:2b:0f:5f:1c:ec:72:76:e4:31:bb:62:2a: 96:66:d5:53:b3:fa:46:8e:1c:af:01:e7:4b:c5:2f:eb:20:b2: 7b:9f:06:12:0b:5b:c7:18:2c:32:69:b3:00:ea:f1:bd:fc:5c: 20:75:92:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUwODIzMDE0MzQ3WhcNMjUwODMwMDE0MzQ3WjAYMRYwFAYD VQQDEw02OGE5MWNkNC1lOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppqIajeLXd5TUcBW2WCO4oiInrBODdQe/pIKCMvA3UpuVBMzla3lyVuXutdh 9jhDYSK4AYVvAebSA14pTHjntYDlIzGaIpJJzeREgicUsN/nRPzdCUaCra76rx5x ox9eCesrxIT0bRY56lTKHD5XGC57QJqP6VUdVHllKDwW6mvDjSj6rvA44sktXYPc 9gnyMh/TWr7L5xCeLCI4mtutqw0oxp1ChTjeUsG18M9SuyxdwEpDVTRBX4l1heU9 tjfDgcKEVea2KCI+89DezI/R1SlgyCGFjp07Np0U/rSf0C8lvqjM+vdudXTlXex3 8epP4j3e6kpd8ZMsf8tvHN4jiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzEqNdl Y+iyRDzoEmznTCthmIzpMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB4EgOqAr2ffqzteu/Ve1wn6dJpV3miI4i984SnTMM4N/3kW6EvD/J VzYA9Btw2ryBbkHwZ3O2kPRApNhKb6wXf9fJAMA8kR+He7IRjMrPr1oWeHWyyc+X pK+qM4FhrKaXVXpd7BNjXY1wm+yqG3SqF3I8hzFMkHZy9yqTpl5a5YLuhRJjTbkT Rpr1T3iu1ObGBkzaCAIcxUj6uWyrWN4SW5ddfoHwPc0Tanyu2F+ntDczBv21zo+C ZXHvZ4nzdUs0CSozreH3/ey+UHgrD18c7HJ25DG7YiqWZtVTs/pGjhyvAedLxS/r ILJ7nwYSC1vHGCwyabMA6vG9/FwgdZLb -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:41 2025 by rpki-client