$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: xTbY0+hANc2mCdh/zsNwJJI2GXRd9bXRJajr7j3jr/w= Subject key identifier: FE:7D:7B:6A:2A:67:D9:E8:65:D5:9D:21:0D:B4:7A:20:52:64:A0:17 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 03DE Signing time: Thu 03 Jul 2025 00:55:02 +0000 Manifest this update: Thu 03 Jul 2025 00:55:01 +0000 Manifest next update: Thu 10 Jul 2025 00:55:01 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: MsyR4XuhYvqOGbx0BqeVD/TXj3PenMCzNO5M/qwBP7A=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: r+2gczfolioxdOOu1jOVrEWd+Ns5v4HYtipze2KFuFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: Jul 3 00:55:01 2025 GMT Not After : Jul 10 00:55:01 2025 GMT Subject: CN=6865d4e6-1589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:07:2e:ba:e2:36:1f:d7:39:7b:02:9b:f4: 20:9a:a4:7f:2a:5a:84:be:e1:ef:92:b4:93:17:a0: 3f:c0:88:4b:29:ff:c2:1c:4a:db:44:13:56:c1:76: 8a:43:53:96:80:09:50:b2:7c:5a:b0:f2:0a:af:2c: 4e:eb:71:25:63:b2:57:21:b8:ed:08:15:a1:5a:b7: 36:b6:60:ee:b9:be:55:12:1c:51:03:5a:13:73:96: 7d:9a:d4:08:22:09:62:ff:ab:73:0d:6f:ac:3e:4a: 37:c5:67:2a:98:b9:5d:8e:af:04:89:31:a0:50:49: 73:b5:78:fe:21:c7:3e:d7:00:db:30:9d:fe:09:f9: 92:6d:4e:c1:ab:2c:99:d5:ba:35:0d:74:63:eb:56: 96:79:84:32:83:d4:3d:6a:96:b5:c6:8c:df:91:5e: ff:54:e3:f0:c9:9c:2f:b2:a1:a2:e9:ad:a2:1d:a0: ac:0f:19:d7:86:fe:4a:71:c2:64:4f:9a:36:05:04: 70:0c:17:63:ed:5c:c9:1c:f4:2e:05:86:6e:2f:c9: 5a:b0:b7:5c:7b:49:52:bf:fc:46:f4:10:15:ac:32: 4f:7c:2b:b5:73:65:4f:38:65:0d:12:fd:dd:6e:4a: f2:26:fb:51:c5:58:a9:f0:0d:b1:4a:79:16:45:bf: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7D:7B:6A:2A:67:D9:E8:65:D5:9D:21:0D:B4:7A:20:52:64:A0:17 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:7c:3d:c6:32:71:6f:d3:52:68:71:8e:d4:be:28:01:a6:17: 5b:fd:e1:a1:43:12:14:11:7e:8c:de:09:9e:88:a8:12:20:af: 19:3d:c1:62:e6:65:e8:f3:35:37:bd:a7:81:d0:71:ce:6e:07: f6:ae:62:37:b6:90:9a:87:26:82:56:e0:3a:b2:83:db:dd:43: b5:be:1c:30:89:4e:dd:7d:db:b0:b4:3c:e9:12:db:e4:6c:c8: f8:dc:9b:ab:a0:b7:9d:ad:0e:da:68:3f:d9:0d:68:b8:2e:95: c2:f9:18:61:90:da:e6:2e:47:fa:b4:44:c3:a9:9c:26:c5:fb: 61:ed:a9:65:91:15:39:73:0a:f2:a6:99:aa:d2:08:3a:ca:2d: 45:4e:f2:e9:e0:11:70:be:92:68:60:41:19:27:5d:97:a2:f8: 4e:20:84:26:ab:0e:76:9b:3c:f4:69:f8:32:e1:94:f2:10:ba: da:c0:09:05:3e:0b:bf:13:99:7a:18:45:be:11:46:d6:f8:bb: ef:ae:5b:f9:3a:85:b1:49:fd:9f:82:2f:b6:60:9a:a0:60:a2: f3:48:69:68:38:62:7d:97:19:f6:db:97:42:2d:e8:c3:38:30: 88:3c:47:d7:52:03:17:9c:24:51:b2:13:23:c7:89:e3:aa:7f: 44:bf:3d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjUwNzAzMDA1NTAxWhcNMjUwNzEwMDA1NTAxWjAYMRYwFAYD VQQDEw02ODY1ZDRlNi0xNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RIHLrriNh/XOXsCm/QgmqR/KlqEvuHvkrSTF6A/wIhLKf/CHErbRBNWwXaK Q1OWgAlQsnxasPIKryxO63ElY7JXIbjtCBWhWrc2tmDuub5VEhxRA1oTc5Z9mtQI Igli/6tzDW+sPko3xWcqmLldjq8EiTGgUElztXj+Icc+1wDbMJ3+CfmSbU7BqyyZ 1bo1DXRj61aWeYQyg9Q9apa1xozfkV7/VOPwyZwvsqGi6a2iHaCsDxnXhv5KccJk T5o2BQRwDBdj7VzJHPQuBYZuL8lasLdce0lSv/xG9BAVrDJPfCu1c2VPOGUNEv3d bkryJvtRxVip8A2xSnkWRb9etQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP59e2oq Z9noZdWdIQ20eiBSZKAXMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClfD3GMnFv01JocY7UvigBphdb/eGhQxIUEX6M3gmeiKgSIK8ZPcFi 5mXo8zU3vaeB0HHObgf2rmI3tpCahyaCVuA6soPb3UO1vhwwiU7dfduwtDzpEtvk bMj43JuroLedrQ7aaD/ZDWi4LpXC+RhhkNrmLkf6tETDqZwmxfth7allkRU5cwry ppmq0gg6yi1FTvLp4BFwvpJoYEEZJ12XovhOIIQmqw52mzz0afgy4ZTyELrawAkF Pgu/E5l6GEW+EUbW+Lvvrlv5OoWxSf2fgi+2YJqgYKLzSGloOGJ9lxn225dCLejD ODCIPEfXUgMXnCRRshMjx4njqn9Evz06 -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:33 2025 by rpki-client