$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: TJc7JS28tkCqrAMoS5V/DG77F27M9ZWiNtm7mYuNI1c= Subject key identifier: C1:5B:5D:EF:66:6C:8E:18:CC:7D:6F:14:46:5D:A1:44:99:2A:04:BD Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 0182 Signing time: Tue 01 Jul 2025 04:02:55 +0000 Manifest this update: Tue 01 Jul 2025 04:02:54 +0000 Manifest next update: Tue 08 Jul 2025 04:02:54 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: dIrsWe7D/n6Uz2cz/01H4WgrNn6aBUfEKNJi+ErfU7A=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: r69ry07FlZRyxMcGSskusquMKld1QByFguUcoWDQa3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Jul 1 04:02:54 2025 GMT Not After : Jul 8 04:02:54 2025 GMT Subject: CN=68635dee-f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:f3:4f:22:3b:92:ab:64:ca:d3:59:da:b9: 08:da:90:eb:3f:c6:da:20:f3:41:44:30:94:8d:e0: b3:6e:04:11:c6:a8:9b:7b:40:4a:f4:63:1d:9f:a4: 17:c4:eb:ae:f6:d4:3f:c8:82:28:7d:91:25:5e:3b: 4e:94:4d:08:c2:d4:25:c1:7e:26:03:41:94:ef:5a: b7:c6:df:61:58:2c:a1:79:77:5f:ba:1e:c9:bc:78: a1:e9:49:5f:a8:55:93:d2:63:c0:26:af:3c:84:ac: b0:f2:e0:5a:2a:b8:3f:4a:68:45:3b:95:f1:0f:e9: 09:e8:55:d0:c3:7c:27:3a:33:df:e7:61:52:35:7e: c2:d8:22:7f:c5:cd:b8:74:6e:76:d2:2d:84:65:c6: c7:9c:d2:dc:38:6a:a4:01:81:b0:47:a7:dc:3a:d8: 35:ff:25:44:e6:6c:5f:c3:2c:cb:25:42:61:26:31: 89:20:ed:ec:a4:02:6e:b8:f8:e1:40:a0:1e:19:a1: 2c:77:fc:b6:1c:85:03:26:e4:47:e0:eb:19:85:41: 39:e4:5d:86:c7:ba:69:80:bc:b5:6a:6a:d9:04:3b: de:e8:d1:77:4e:31:fb:2e:d2:a5:90:c6:79:61:42: c5:13:5c:a6:df:24:9d:e1:a3:55:4f:50:f3:2f:42: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5B:5D:EF:66:6C:8E:18:CC:7D:6F:14:46:5D:A1:44:99:2A:04:BD X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:68:72:3b:68:c4:9d:75:85:89:fc:84:f6:cf:5f:76:99:1b: 1e:80:6b:b2:12:51:6f:93:8e:df:bd:e9:d1:b0:03:94:28:b9: 7d:9d:25:07:73:c0:12:00:eb:35:8d:f5:3a:4a:d7:5f:0c:96: 09:fe:bd:78:d8:57:49:d4:45:43:e0:cd:1c:f9:27:7d:3e:bd: 7b:e7:42:04:a4:83:06:7a:00:3f:4a:05:5c:a8:f1:ab:e5:1c: 4a:f4:2c:7a:15:1e:a6:64:4a:02:5c:e4:1b:82:c0:38:1a:98: 39:95:e8:99:9f:20:67:b9:f0:a7:cb:9d:49:db:3b:56:c2:24: 1c:79:3a:cb:02:96:f9:c5:23:8d:92:e2:9e:f5:1e:06:c3:31: b8:ef:dc:d9:de:1e:6f:a4:55:f6:e5:c5:6f:4c:a0:cd:05:00: c7:fd:13:97:0d:b3:2e:c5:99:a9:58:b7:0c:44:38:97:7a:c2: f9:e5:a7:1b:19:b4:49:25:37:6d:65:50:9c:b5:a0:c5:84:2b: db:d9:89:14:4e:ce:60:05:bc:fd:8b:93:8a:87:29:3c:fe:77: 12:d5:5d:fa:1f:e9:95:88:ca:d8:e4:16:88:71:3a:82:89:63: 8c:05:71:66:ba:2a:79:45:00:0f:97:af:4c:6d:39:e5:b1:0b: 96:72:70:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjUwNzAxMDQwMjU0WhcNMjUwNzA4MDQwMjU0WjAYMRYwFAYD VQQDEw02ODYzNWRlZS1mMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz13zTyI7kqtkytNZ2rkI2pDrP8baIPNBRDCUjeCzbgQRxqibe0BK9GMdn6QX xOuu9tQ/yIIofZElXjtOlE0IwtQlwX4mA0GU71q3xt9hWCyheXdfuh7JvHih6Ulf qFWT0mPAJq88hKyw8uBaKrg/SmhFO5XxD+kJ6FXQw3wnOjPf52FSNX7C2CJ/xc24 dG520i2EZcbHnNLcOGqkAYGwR6fcOtg1/yVE5mxfwyzLJUJhJjGJIO3spAJuuPjh QKAeGaEsd/y2HIUDJuRH4OsZhUE55F2Gx7ppgLy1amrZBDve6NF3TjH7LtKlkMZ5 YULFE1ym3ySd4aNVT1DzL0KW/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFbXe9m bI4YzH1vFEZdoUSZKgS9MB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoaHI7aMSddYWJ/IT2z192mRsegGuyElFvk47fvenRsAOUKLl9nSUH c8ASAOs1jfU6StdfDJYJ/r142FdJ1EVD4M0c+Sd9Pr1750IEpIMGegA/SgVcqPGr 5RxK9Cx6FR6mZEoCXOQbgsA4Gpg5leiZnyBnufCny51J2ztWwiQceTrLApb5xSON kuKe9R4GwzG479zZ3h5vpFX25cVvTKDNBQDH/ROXDbMuxZmpWLcMRDiXesL55acb GbRJJTdtZVCctaDFhCvb2YkUTs5gBbz9i5OKhyk8/ncS1V36H+mViMrY5BaIcTqC iWOMBXFmuip5RQAPl69MbTnlsQuWcnAf -----END CERTIFICATE-----Generated at Tue Jul 1 14:02:26 2025 by rpki-client