$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: aqqZNc19aMueCgSuwntSHrXKqq/YWPTPL2c0IhNkuqI= Subject key identifier: 7B:43:93:B1:B4:01:EE:6A:07:E6:49:6A:3B:92:BC:6C:56:5D:2D:BD Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 019F Signing time: Sat 23 Aug 2025 03:27:15 +0000 Manifest this update: Sat 23 Aug 2025 03:27:15 +0000 Manifest next update: Sat 30 Aug 2025 03:27:15 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: 6Hh6F82hxHBNnUAvZeqKpcGsFPdArOlSb6HqTPTJPGI=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: Lzx8SaSOAIfiTkCTBDT8JHgh91LBGq5txlqMqiUIMMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Aug 23 03:27:15 2025 GMT Not After : Aug 30 03:27:15 2025 GMT Subject: CN=68a93513-8b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:0d:f8:ea:b3:60:6b:b9:48:30:d9:a8:06: d0:84:d9:ec:94:bd:a7:6e:34:4b:f0:91:e7:99:32: 23:f2:75:10:19:d6:58:4d:97:5c:1d:2e:c4:c7:2e: 7f:c2:aa:cf:38:4c:9f:e1:5b:23:d0:1d:99:07:a0: 1d:d2:49:3c:c6:80:80:6a:99:d2:52:58:5e:63:60: b0:c5:7b:6a:58:e8:6d:da:87:07:3e:d8:3b:5c:48: b2:2f:ff:ec:d4:69:6c:13:0e:24:12:59:ca:fd:de: 77:e3:64:07:9c:f1:81:01:5c:ad:4b:70:01:f2:ff: 0e:73:e9:8d:fc:fa:19:b8:bf:ef:49:91:2a:40:d1: 0f:98:a0:15:06:86:7e:d0:86:dc:db:ee:4d:9f:1c: 6d:6a:74:b8:0e:2c:dc:55:c5:56:53:3c:80:23:1b: 1e:47:3a:a5:e5:e0:4e:c8:1d:c3:bb:b7:27:90:d3: 85:c8:96:03:34:14:55:38:48:4e:a6:b2:08:09:39: 94:5c:76:17:e2:fe:03:a5:ea:54:f8:fc:91:d1:86: b2:34:6b:75:82:b1:25:4f:1d:2a:58:a2:80:c2:07: 05:39:fd:5b:a5:a4:af:06:c3:0a:36:e3:ce:b1:e7: dc:77:fe:4e:7d:08:85:01:fd:ae:a3:25:71:1c:a7: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:43:93:B1:B4:01:EE:6A:07:E6:49:6A:3B:92:BC:6C:56:5D:2D:BD X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:fd:ae:5d:2b:4e:3a:fd:02:7d:a6:77:be:cc:11:b3:ee:38: 95:18:30:a0:c9:df:bd:72:46:f9:66:18:6d:3f:1f:f4:41:3d: b3:f1:42:41:62:87:11:6b:59:64:3f:74:c1:ac:36:8b:b4:50: b4:6b:64:f7:ef:36:90:0d:51:c2:c8:e0:a0:ab:be:88:a6:b7: c4:1e:6f:1f:2f:50:57:b4:43:9b:d5:03:5d:33:99:85:27:ec: 51:75:03:b7:a2:c6:2d:b9:56:fe:f5:9f:8d:98:22:83:6d:49: 6f:18:e8:69:23:4b:21:92:2a:31:27:95:92:01:1c:6a:33:2c: d2:88:94:12:39:3a:bc:65:4a:3a:f0:4b:94:f0:0b:03:f2:16: c0:88:6a:74:af:69:e4:4d:3f:27:4a:31:c4:2f:42:f2:9a:19: 64:4e:c2:1c:8c:13:56:3b:2b:94:69:f0:7f:18:68:56:f5:9a: 81:c9:93:1d:17:41:31:ae:9e:3c:6d:d4:98:88:c3:bd:65:63: 6b:1d:df:72:10:4a:6c:57:a3:ab:e3:dd:93:c0:ed:47:97:bd: 50:55:97:e8:b2:1c:94:ff:8c:54:ac:0b:9e:73:15:16:72:8b: 76:e3:fd:3f:0f:8c:10:e4:55:f3:16:2d:30:c6:9c:90:aa:db: 80:cb:de:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjUwODIzMDMyNzE1WhcNMjUwODMwMDMyNzE1WjAYMRYwFAYD VQQDEw02OGE5MzUxMy04YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujMN+OqzYGu5SDDZqAbQhNnslL2nbjRL8JHnmTIj8nUQGdZYTZdcHS7Exy5/ wqrPOEyf4Vsj0B2ZB6Ad0kk8xoCAapnSUlheY2CwxXtqWOht2ocHPtg7XEiyL//s 1GlsEw4kElnK/d5342QHnPGBAVytS3AB8v8Oc+mN/PoZuL/vSZEqQNEPmKAVBoZ+ 0Ibc2+5NnxxtanS4DizcVcVWUzyAIxseRzql5eBOyB3Du7cnkNOFyJYDNBRVOEhO prIICTmUXHYX4v4DpepU+PyR0YayNGt1grElTx0qWKKAwgcFOf1bpaSvBsMKNuPO sefcd/5OfQiFAf2uoyVxHKf7PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtDk7G0 Ae5qB+ZJajuSvGxWXS29MB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/a5dK046/QJ9pne+zBGz7jiVGDCgyd+9ckb5ZhhtPx/0QT2z8UJB YocRa1lkP3TBrDaLtFC0a2T37zaQDVHCyOCgq76IprfEHm8fL1BXtEOb1QNdM5mF J+xRdQO3osYtuVb+9Z+NmCKDbUlvGOhpI0shkioxJ5WSARxqMyzSiJQSOTq8ZUo6 8EuU8AsD8hbAiGp0r2nkTT8nSjHEL0LymhlkTsIcjBNWOyuUafB/GGhW9ZqByZMd F0Exrp48bdSYiMO9ZWNrHd9yEEpsV6Or492TwO1Hl71QVZfoshyU/4xUrAuecxUW cot24/0/D4wQ5FXzFi0wxpyQqtuAy94k -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:35 2025 by rpki-client