$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json) Hash identifier: pCRWlEvWZHya9OpQxL4CHd2//azc29zAqZrBhF/Crps= Subject key identifier: DE:01:77:DB:A0:5B:7F:D2:F0:26:8E:FE:2D:55:A5:62:4B:DE:98:CF Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft Manifest number: 011D Signing time: Tue 01 Jul 2025 05:14:59 +0000 Manifest this update: Tue 01 Jul 2025 05:14:59 +0000 Manifest next update: Tue 08 Jul 2025 05:14:59 +0000 Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: Vw0lk+OLbzhtHtTDP8ulhRH/IyoSeE5dLK7vFCD6YCo=) 2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: Czi7PWRQ87B1nKXSiQO2Heb4QoSzR8e/1K23JvG3RhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Validity Not Before: Jul 1 05:14:59 2025 GMT Not After : Jul 8 05:14:59 2025 GMT Subject: CN=68636ed3-fd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:dc:ba:29:c3:d8:46:d7:e2:59:de:3f:83: be:8c:31:34:66:8b:7d:a9:5c:b5:2c:3d:c3:f7:54: a4:73:85:7d:c5:ba:f9:a7:1b:03:8f:e8:29:57:90: cc:57:fc:5d:49:eb:d7:2f:3f:f3:b1:fb:ca:36:b7: cd:e5:c9:d0:2f:de:0c:d9:dc:f7:8b:f0:c6:83:c6: 67:86:e0:29:43:ec:49:cf:5a:3d:12:36:83:58:02: 7d:de:e0:98:a3:fe:bd:71:d0:72:61:9c:4f:21:f2: e6:0b:04:1f:3d:58:a1:15:1a:ad:f2:39:ad:bb:fb: c0:80:8b:55:46:90:14:b7:83:3e:03:fa:76:71:de: be:29:4f:53:f5:f5:38:c8:29:09:1e:59:fe:f2:ae: ae:65:39:fd:65:73:20:7a:93:9f:9c:65:fa:e7:1f: ea:cd:d8:8c:a7:cf:f3:66:fc:f7:d7:65:ce:12:09: d6:dd:96:d2:db:7c:43:8c:4e:5c:00:d2:93:3d:a7: e4:34:83:8c:17:63:53:c1:d7:9b:de:18:71:a6:f4: 17:b4:1e:d1:11:b8:85:4a:e0:c7:60:a4:93:39:04: 73:ce:22:bf:6d:42:27:dd:0c:7e:c0:3e:5d:28:c0: c3:d6:50:45:f2:50:71:ab:03:5f:f5:ff:ca:30:da: 35:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:77:DB:A0:5B:7F:D2:F0:26:8E:FE:2D:55:A5:62:4B:DE:98:CF X509v3 Authority Key Identifier: keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b8:ae:81:2a:73:51:c3:d2:d7:62:b0:07:92:1d:63:46:fb: 9a:e1:73:aa:b0:9e:7b:74:80:27:45:13:39:78:09:d8:02:0c: c2:f6:55:bb:0c:6e:b0:28:5b:9c:72:99:b6:b3:b0:47:44:44: 18:8e:3a:6e:54:b1:d4:f8:67:97:76:95:d0:2a:9d:1a:f1:c3: 35:d2:a3:5c:5c:f7:a0:5a:9c:1b:a9:d5:0f:5a:5a:89:ae:f9: ae:de:a9:8d:71:d7:41:f7:3e:60:31:bd:fc:79:94:ea:d8:77: cb:c0:7c:4b:e3:46:53:89:69:fe:12:c7:e2:9e:af:8e:72:b2: 1a:d4:6c:63:a8:4c:d7:db:63:56:8a:ef:61:de:1c:e5:35:ae: 60:80:13:fb:51:73:1f:53:93:c2:9f:59:ec:26:30:40:ef:f1: 62:2f:96:d2:f5:00:fb:af:b3:7b:23:8c:e4:d2:76:26:e6:ed: 0d:a0:38:e7:a0:77:5e:a7:7f:4f:7a:b7:4c:68:e8:f6:f6:ac: b6:70:7b:26:cb:18:31:55:4d:2e:9f:1f:78:81:27:5b:47:23: 8e:79:40:c7:fd:51:99:f3:81:af:04:a3:90:b3:db:4e:56:1a: 71:ad:23:ab:0e:da:2e:25:21:a8:f1:a7:66:7e:d8:34:d7:f8: 8c:a7:9a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0 RTY1RkRGMjIwHhcNMjUwNzAxMDUxNDU5WhcNMjUwNzA4MDUxNDU5WjAYMRYwFAYD VQQDEw02ODYzNmVkMy1mZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW/cuinD2EbX4lneP4O+jDE0Zot9qVy1LD3D91Skc4V9xbr5pxsDj+gpV5DM V/xdSevXLz/zsfvKNrfN5cnQL94M2dz3i/DGg8ZnhuApQ+xJz1o9EjaDWAJ93uCY o/69cdByYZxPIfLmCwQfPVihFRqt8jmtu/vAgItVRpAUt4M+A/p2cd6+KU9T9fU4 yCkJHln+8q6uZTn9ZXMgepOfnGX65x/qzdiMp8/zZvz312XOEgnW3ZbS23xDjE5c ANKTPafkNIOMF2NTwdeb3hhxpvQXtB7REbiFSuDHYKSTOQRzziK/bUIn3Qx+wD5d KMDD1lBF8lBxqwNf9f/KMNo1cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4Bd9ug W3/S8CaO/i1VpWJL3pjPMB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr d3BsRlBNdEkxM3RPWmYzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZuK6BKnNRw9LXYrAHkh1jRvua4XOqsJ57dIAnRRM5eAnYAgzC9lW7 DG6wKFuccpm2s7BHREQYjjpuVLHU+GeXdpXQKp0a8cM10qNcXPegWpwbqdUPWlqJ rvmu3qmNcddB9z5gMb38eZTq2HfLwHxL40ZTiWn+Esfinq+OcrIa1GxjqEzX22NW iu9h3hzlNa5ggBP7UXMfU5PCn1nsJjBA7/FiL5bS9QD7r7N7I4zk0nYm5u0NoDjn oHdep39PerdMaOj29qy2cHsmyxgxVU0unx94gSdbRyOOeUDH/VGZ84GvBKOQs9tO VhpxrSOrDtouJSGo8admftg01/iMp5p4 -----END CERTIFICATE-----Generated at Thu Jul 3 01:04:35 2025 by rpki-client