$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json) Hash identifier: quGOviE9b3CyioZ+g1wtr1PgB86tFTFUtDfnSq+IM9M= Subject key identifier: 96:70:99:B6:04:F4:58:DD:40:AB:B2:E1:09:AA:61:57:21:E1:B3:45 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft Manifest number: F0 Signing time: Sun 29 Jun 2025 04:21:12 +0000 Manifest this update: Sun 29 Jun 2025 04:21:11 +0000 Manifest next update: Sun 06 Jul 2025 04:21:11 +0000 Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: ivJ2HehKZSVIpVSZ6J2+1ezhXnJgJ0yEZlC3j7mlXnk=) 2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: DySwA8C4czN5vHz0fLCB/xltzHfCwXmq3TdjlNfOwqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: Jun 29 04:21:11 2025 GMT Not After : Jul 6 04:21:11 2025 GMT Subject: CN=6860bf37-f579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:90:d2:52:2c:66:76:e8:fe:00:3c:40:0a: 71:51:33:d2:4e:81:9f:fa:04:9c:e2:62:90:f4:d3: 79:4a:97:14:5e:1a:b5:8d:72:e2:a5:6e:dc:a5:55: 2d:cf:a6:55:90:8c:5c:91:38:88:7a:95:eb:d4:92: 8c:74:c3:07:6e:c8:1f:e2:bb:54:be:69:dc:98:04: e2:13:56:27:26:41:30:61:ff:93:c3:00:e9:41:a5: df:4d:26:8f:61:08:b9:b7:e7:8a:01:91:38:11:63: a2:48:e5:91:c2:fc:4a:da:5e:ad:bc:f2:81:23:1d: f6:56:89:9a:3e:51:bb:0f:29:22:d1:95:25:9c:d0: 50:e5:04:cb:1f:0e:98:29:1f:1d:73:50:c3:b0:b7: 38:c0:12:b6:bd:9a:d8:6c:1b:16:42:1e:06:dd:79: f1:be:41:77:75:46:7c:6c:21:1c:26:f9:0b:f7:e2: 54:a8:fb:2d:8f:0b:fe:3c:31:fd:75:4d:ea:b4:d6: 20:b7:23:10:85:b3:f9:48:3f:7e:37:0d:81:fb:c0: f4:0f:6f:de:49:ff:1c:24:84:2d:9a:f5:f6:d6:b0: f1:b0:a3:b2:a5:a7:14:03:e3:20:25:36:51:79:e9: 44:ba:e7:34:a8:3d:6c:d8:02:fa:34:fc:bd:40:74: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:70:99:B6:04:F4:58:DD:40:AB:B2:E1:09:AA:61:57:21:E1:B3:45 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bf:9e:9c:38:43:5e:88:e9:2c:27:27:37:54:18:8d:0d:d8: b2:e8:77:7a:cd:1e:bf:14:92:9b:9a:c9:ba:a9:be:08:0f:ed: bf:81:b0:42:e6:c2:5b:40:bd:c4:3d:e3:f4:5f:1b:48:f9:d2: 27:ec:79:03:31:0b:d5:e1:3c:bc:4d:44:42:29:d6:7f:f2:d7: c3:c1:30:1b:19:60:0d:19:b7:b7:5d:80:fe:d9:7c:50:4c:fb: 70:79:ff:ae:74:a5:e2:4d:72:3e:70:16:32:3a:6c:be:18:06: 00:d9:95:e7:81:6d:04:5c:25:63:df:57:90:32:76:9c:2a:06: 34:50:79:72:f0:77:4b:db:b0:65:e9:40:f2:0b:be:a7:3d:24: 0a:80:47:83:69:32:13:0d:6f:f2:47:68:62:ee:68:3e:b5:c4: 85:e2:2a:d2:95:71:cc:5f:a2:a5:af:c3:30:45:5f:13:ed:04: d9:95:ac:cd:a0:5e:2a:3e:1c:10:a7:4f:55:38:d8:5b:b9:4d: 02:24:0f:ed:46:f1:7b:cd:74:5e:17:ee:dd:35:ee:05:9c:1a: 15:76:69:5a:5c:ff:ce:cd:fd:c2:d2:84:31:8d:0d:77:93:d5: a9:86:1f:14:7a:38:83:73:fb:87:0f:30:dd:ff:44:96:f5:2d: 36:9a:8c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUwNjI5MDQyMTExWhcNMjUwNzA2MDQyMTExWjAYMRYwFAYD VQQDEw02ODYwYmYzNy1mNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhuQ0lIsZnbo/gA8QApxUTPSToGf+gSc4mKQ9NN5SpcUXhq1jXLipW7cpVUt z6ZVkIxckTiIepXr1JKMdMMHbsgf4rtUvmncmATiE1YnJkEwYf+TwwDpQaXfTSaP YQi5t+eKAZE4EWOiSOWRwvxK2l6tvPKBIx32VomaPlG7Dyki0ZUlnNBQ5QTLHw6Y KR8dc1DDsLc4wBK2vZrYbBsWQh4G3XnxvkF3dUZ8bCEcJvkL9+JUqPstjwv+PDH9 dU3qtNYgtyMQhbP5SD9+Nw2B+8D0D2/eSf8cJIQtmvX21rDxsKOypacUA+MgJTZR eelEuuc0qD1s2AL6NPy9QHS+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZwmbYE 9FjdQKuy4QmqYVch4bNFMB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1T Nmkyc2hybUtPWXp3eGIxdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsv56cOENeiOksJyc3VBiNDdiy6Hd6zR6/FJKbmsm6qb4ID+2/gbBC 5sJbQL3EPeP0XxtI+dIn7HkDMQvV4Ty8TURCKdZ/8tfDwTAbGWANGbe3XYD+2XxQ TPtwef+udKXiTXI+cBYyOmy+GAYA2ZXngW0EXCVj31eQMnacKgY0UHly8HdL27Bl 6UDyC76nPSQKgEeDaTITDW/yR2hi7mg+tcSF4irSlXHMX6Klr8MwRV8T7QTZlazN oF4qPhwQp09VONhbuU0CJA/tRvF7zXReF+7dNe4FnBoVdmlaXP/Ozf3C0oQxjQ13 k9Wphh8UejiDc/uHDzDd/0SW9S02moyF -----END CERTIFICATE-----Generated at Sun Jun 29 17:10:29 2025 by rpki-client