$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: 768MSPCQvbYiS1UgWCXudKO4KvBNfbmd8vwYI3503fc= Subject key identifier: 09:43:0F:59:00:EA:8C:4D:13:EF:AC:84:0B:B2:15:BE:91:10:B6:06 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 03C3 Signing time: Tue 01 Jul 2025 01:14:08 +0000 Manifest this update: Tue 01 Jul 2025 01:14:08 +0000 Manifest next update: Tue 08 Jul 2025 01:14:08 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: Lprlt9ZHYkpu5aBjB0wFpppX6g1DVjyn+a0yERYlxmI=) 2: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: oAqMSF81/AVYaU8nGd+cBMsrnw20XyD/T/zdIoEB4NE=) 3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: uVo2rPhsS7W1KbzxX340wlAGRoyErXUypsSK5B5R8HQ=) 4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: S2zfaKcticTwAxwJXdMxgXbdbp4SN51y6QSWO83OIuc=) 5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: 7DU3GXxB2biRDfFfxqVKJQEvwzXZf1dP2MF5wRULxe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Jul 1 01:14:08 2025 GMT Not After : Jul 8 01:14:08 2025 GMT Subject: CN=68633660-dfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:67:ea:10:46:fa:ef:89:1e:b0:b4:0d:4e: 53:fe:be:c6:20:b3:c0:60:6a:bd:cf:60:38:1e:0c: fd:b2:66:f1:e8:08:ca:cb:83:18:9c:68:b2:ee:5e: 11:ff:30:6e:9f:78:04:f5:e4:72:28:c6:0e:8c:ab: 7e:b5:02:2f:1e:0a:45:59:8e:9c:11:9d:14:e4:21: c4:35:26:a8:31:14:7e:87:6f:73:da:2b:9f:81:e1: 20:21:f6:27:46:f9:71:27:a2:d8:78:34:a0:36:3f: 45:48:98:27:39:15:34:7f:2a:00:03:2f:2e:16:23: 96:d9:c7:0b:28:42:06:b6:51:c7:ff:a5:a9:d9:2c: 56:a7:b7:f1:62:90:73:3b:fd:e8:91:23:42:22:69: da:e5:91:e1:4e:f3:1f:d0:db:7e:42:ec:b0:c1:37: 09:75:c4:64:bb:12:92:71:c9:1a:04:fa:81:ea:10: 01:e1:b5:53:b9:65:50:43:d0:a6:66:87:80:87:25: 90:e6:dc:5a:38:dd:56:02:33:c2:ea:db:aa:d8:b3: 00:99:3a:91:b7:c0:a7:89:0d:c7:75:b9:88:9f:f5: 5c:2c:6c:48:b4:98:0e:a2:5f:dd:fb:eb:72:19:d3: 3a:98:fd:8c:52:c3:8f:d0:5e:88:94:31:31:02:19: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:43:0F:59:00:EA:8C:4D:13:EF:AC:84:0B:B2:15:BE:91:10:B6:06 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:36:7d:b6:2a:8e:92:f0:84:09:5e:e2:66:c5:25:51:9e:a7: d9:e8:aa:da:f2:a9:3f:9c:cb:82:58:63:28:32:fc:d8:19:c8: 72:1a:90:fa:dd:0c:fc:a8:8b:d2:77:90:50:6b:a8:f3:3d:3b: 0d:53:7d:d4:50:5f:88:0b:e6:fd:a8:50:14:ad:67:57:2a:c9: de:29:b7:b0:f9:57:d3:b1:ea:70:0b:69:5d:2b:2f:f7:71:37: 4d:0a:ca:09:6b:29:8d:15:fe:76:5d:5f:7b:04:d4:02:df:6c: d3:34:54:62:44:b1:03:8d:bf:44:d2:4b:98:2f:7b:2c:70:47: 2f:b8:f4:f9:35:14:2b:d5:8c:8b:87:02:9b:c1:d4:52:ee:c7: d8:5a:cd:42:d8:54:a5:ac:c4:50:28:10:d9:07:32:24:82:50: a6:7d:ae:65:79:0d:90:45:56:10:c0:6d:98:5e:51:76:ea:2c: 7c:72:ee:84:28:89:10:e6:19:9a:f4:79:41:d9:85:84:32:7f: 71:90:8b:02:53:7b:8f:5f:78:76:ce:fe:a7:63:83:d8:d3:73: 0a:f4:d1:df:a3:6a:82:58:77:4a:4b:98:c2:43:7c:5e:fe:14: ad:9b:c0:7e:94:35:86:d5:c3:41:89:f6:5b:86:a7:59:a6:dd: e7:d1:10:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUwNzAxMDExNDA4WhcNMjUwNzA4MDExNDA4WjAYMRYwFAYD VQQDEw02ODYzMzY2MC1kZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBVn6hBG+u+JHrC0DU5T/r7GILPAYGq9z2A4Hgz9smbx6AjKy4MYnGiy7l4R /zBun3gE9eRyKMYOjKt+tQIvHgpFWY6cEZ0U5CHENSaoMRR+h29z2iufgeEgIfYn RvlxJ6LYeDSgNj9FSJgnORU0fyoAAy8uFiOW2ccLKEIGtlHH/6Wp2SxWp7fxYpBz O/3okSNCImna5ZHhTvMf0Nt+QuywwTcJdcRkuxKScckaBPqB6hAB4bVTuWVQQ9Cm ZoeAhyWQ5txaON1WAjPC6tuq2LMAmTqRt8CniQ3HdbmIn/VcLGxItJgOol/d++ty GdM6mP2MUsOP0F6IlDExAhlKtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlDD1kA 6oxNE++shAuyFb6RELYGMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdNn22Ko6S8IQJXuJmxSVRnqfZ6Kra8qk/nMuCWGMoMvzYGchyGpD6 3Qz8qIvSd5BQa6jzPTsNU33UUF+IC+b9qFAUrWdXKsneKbew+VfTsepwC2ldKy/3 cTdNCsoJaymNFf52XV97BNQC32zTNFRiRLEDjb9E0kuYL3sscEcvuPT5NRQr1YyL hwKbwdRS7sfYWs1C2FSlrMRQKBDZBzIkglCmfa5leQ2QRVYQwG2YXlF26ix8cu6E KIkQ5hma9HlB2YWEMn9xkIsCU3uPX3h2zv6nY4PY03MK9NHfo2qCWHdKS5jCQ3xe /hStm8B+lDWG1cNBifZbhqdZpt3n0RA9 -----END CERTIFICATE-----Generated at Thu Jul 3 00:28:29 2025 by rpki-client