$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: b8Fq1Sn8g4330uoK5k3yUE+xDAMFCvDFJ2ZydfwW4LY= Subject key identifier: E5:76:07:52:FE:F8:90:6D:C0:29:B8:7D:80:35:EB:E5:C0:39:A9:BA Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 0472 Signing time: Thu 03 Jul 2025 00:26:19 +0000 Manifest this update: Thu 03 Jul 2025 00:26:18 +0000 Manifest next update: Thu 10 Jul 2025 00:26:18 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: 23MbxmQgHWIVAw1GDArjA8L+Pq+u+WCaEYMXp/y4560=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: +fO5Boo5Ka6tNlBReSpJLtITheTtisuQT78+GLLRRv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Jul 3 00:26:18 2025 GMT Not After : Jul 10 00:26:18 2025 GMT Subject: CN=6865ce2a-ea2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:d5:f3:4d:fa:2f:23:b5:d9:a4:fa:d5:43: d9:aa:f5:4b:f9:e3:c6:6d:44:b1:5a:32:21:72:d5: 67:f3:83:49:55:b8:85:d8:3a:29:0e:b6:1a:7c:c9: 4b:e0:1f:1c:3a:c9:b9:01:60:4c:e3:ec:62:5d:a3: fa:73:3f:0f:1e:93:7b:cb:30:20:ff:c7:2f:48:33: e3:47:9d:42:d5:56:dc:91:b7:48:a9:59:a6:fb:1a: 50:e2:2a:7d:e7:be:2f:57:cb:e5:8c:f0:36:6f:f7: 81:1f:2d:62:76:bf:c3:de:2b:57:50:12:ac:60:0b: 5d:e9:c5:ce:75:e3:98:f8:66:d7:dd:68:7f:4e:c0: 5a:f7:10:81:33:4e:e4:fc:1c:d9:c0:2e:33:0b:b1: 15:95:84:43:60:21:bd:17:1b:97:dc:a6:50:27:f5: fd:01:8e:b6:d3:72:88:f8:07:62:24:23:13:e5:8e: 13:79:8e:4a:6a:dc:89:f6:be:b9:c2:44:f9:a6:82: 1d:07:d3:d6:07:88:98:3e:97:4e:04:ac:92:67:4a: 3f:d5:e5:6f:6b:33:d9:3d:54:1e:e7:c0:c2:05:76: bd:06:2b:8a:df:02:62:3c:97:8d:dd:d4:0f:ee:51: fd:1b:6a:4b:e7:c6:63:a8:ab:19:27:f2:b1:59:3b: 7a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:76:07:52:FE:F8:90:6D:C0:29:B8:7D:80:35:EB:E5:C0:39:A9:BA X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e5:89:8c:57:e1:a9:6c:71:e2:02:6d:12:41:24:ca:10:05: d1:83:c8:13:4e:39:23:b7:85:0a:98:81:4d:df:9a:9a:bb:78: 3e:dc:71:74:cd:12:d8:aa:7f:29:03:4d:ab:b9:ee:8d:8d:cd: 72:05:22:ff:83:d0:33:92:ab:80:52:05:f8:f8:fc:78:81:07: 12:04:f6:63:20:ba:35:60:0f:60:07:f5:f4:3a:ca:16:cb:a7: cf:29:b8:1b:41:8a:db:60:dc:e5:24:a4:ef:09:46:e2:e8:56: be:e7:3f:d3:5b:d7:26:2e:a0:9d:10:73:64:c2:61:f1:d1:0e: c2:16:2c:68:95:d6:f9:ab:63:c2:5b:d4:73:0f:a0:78:3f:30: 8b:52:be:65:d9:11:04:40:19:74:7a:f5:16:8e:b3:2b:87:12: c3:fb:e0:0e:4f:4a:ab:f6:b7:94:e1:d2:ea:ca:6c:20:a6:25: a4:13:b6:f8:5c:7f:17:39:94:5d:aa:be:29:d4:22:da:b6:de: 06:04:9d:e7:40:be:72:e6:df:c3:e7:63:f0:76:4e:20:6d:2c: 8c:f4:1f:3f:db:8b:80:ff:53:4a:73:66:69:07:8e:3e:a9:7a: 80:e7:ec:f2:13:05:70:ef:4e:b0:9a:48:a6:49:4b:ba:9c:68: 91:c5:40:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUwNzAzMDAyNjE4WhcNMjUwNzEwMDAyNjE4WjAYMRYwFAYD VQQDEw02ODY1Y2UyYS1lYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt/V8036LyO12aT61UPZqvVL+ePGbUSxWjIhctVn84NJVbiF2DopDrYafMlL 4B8cOsm5AWBM4+xiXaP6cz8PHpN7yzAg/8cvSDPjR51C1VbckbdIqVmm+xpQ4ip9 574vV8vljPA2b/eBHy1idr/D3itXUBKsYAtd6cXOdeOY+GbX3Wh/TsBa9xCBM07k /BzZwC4zC7EVlYRDYCG9FxuX3KZQJ/X9AY6203KI+AdiJCMT5Y4TeY5KatyJ9r65 wkT5poIdB9PWB4iYPpdOBKySZ0o/1eVvazPZPVQe58DCBXa9BiuK3wJiPJeN3dQP 7lH9G2pL58ZjqKsZJ/KxWTt6hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV2B1L+ +JBtwCm4fYA16+XAOam6MB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF5YmMV+GpbHHiAm0SQSTKEAXRg8gTTjkjt4UKmIFN35qau3g+3HF0 zRLYqn8pA02rue6Njc1yBSL/g9AzkquAUgX4+Px4gQcSBPZjILo1YA9gB/X0OsoW y6fPKbgbQYrbYNzlJKTvCUbi6Fa+5z/TW9cmLqCdEHNkwmHx0Q7CFixoldb5q2PC W9RzD6B4PzCLUr5l2REEQBl0evUWjrMrhxLD++AOT0qr9reU4dLqymwgpiWkE7b4 XH8XOZRdqr4p1CLatt4GBJ3nQL5y5t/D52Pwdk4gbSyM9B8/24uA/1NKc2ZpB44+ qXqA5+zyEwVw706wmkimSUu6nGiRxUBi -----END CERTIFICATE-----Generated at Thu Jul 3 21:48:16 2025 by rpki-client