$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: 2lW5Q4cNBqVsiWYM0oejWiwaNJ4VAo85yZwljuOHHdU= Subject key identifier: BE:BE:80:76:12:91:50:60:93:64:DB:D3:68:4C:FF:A2:B3:4E:04:8F Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 116D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 1146 Signing time: Mon 30 Jun 2025 17:28:09 +0000 Manifest this update: Mon 30 Jun 2025 17:28:09 +0000 Manifest next update: Mon 07 Jul 2025 17:28:09 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: BtUfL8NoijVf82r+tcfK1z26HkaH33jT8K5g5qfldPQ=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4461 (0x116d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Jun 30 17:28:09 2025 GMT Not After : Jul 7 17:28:09 2025 GMT Subject: CN=6862c929-4f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:04:ed:92:ab:25:3c:09:15:07:9b:8a:d6: 85:c7:85:3d:69:9f:7f:15:f7:3c:11:ba:38:d1:9b: a1:68:ef:1f:89:73:89:89:4a:bc:d7:a2:b1:c5:c5: 38:1e:0b:2a:a0:c9:ce:12:a9:dd:c5:a8:3b:13:06: b8:2f:09:72:72:f5:4c:23:00:45:48:f5:e6:b1:a8: e2:bb:16:fd:44:46:d4:e8:51:7c:22:1d:e6:46:26: 70:0e:25:da:73:6f:9a:6c:55:13:76:09:b7:5a:7d: aa:94:f4:b9:fd:fe:af:91:ad:c2:5e:8a:f9:af:92: 5b:0a:a5:84:77:9e:fa:dd:f1:52:ea:12:a5:d4:3f: f9:1f:29:22:bd:ac:e3:a1:3b:6a:51:25:02:16:49: 45:dc:8c:ea:89:be:04:fb:a6:02:55:80:30:b1:88: 89:95:a9:0c:91:c7:6d:f0:07:44:26:46:80:bf:0a: c4:d8:81:d1:7a:b2:7b:c5:57:71:50:8e:35:75:d1: 5a:f0:06:21:8e:a6:d1:16:81:c1:00:06:33:62:aa: 3c:a6:15:5e:17:01:36:3a:d8:82:00:c5:fd:17:ef: 6f:90:84:38:32:9d:4a:15:86:f2:78:45:66:93:78: 40:0b:a8:ba:72:d7:5b:a6:77:41:d9:05:71:de:c6: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BE:80:76:12:91:50:60:93:64:DB:D3:68:4C:FF:A2:B3:4E:04:8F X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:83:60:1f:4c:7a:2c:c3:43:e9:50:05:27:f3:b7:c9:a2:91: bd:e4:50:d1:93:0b:8d:a1:ab:05:e3:74:e6:d1:b9:df:e2:da: eb:a3:2d:6d:83:6e:1a:9f:7c:88:d3:49:e9:60:ee:f4:8a:da: 4d:b6:9e:db:ec:75:c3:50:26:1b:d5:90:ba:62:da:09:ba:49: 17:dd:eb:b9:97:66:72:33:92:88:2c:87:7f:99:e3:37:22:3b: 09:de:2e:56:f6:d3:f0:72:93:fe:1f:d3:e4:cf:33:53:74:21: 48:4a:2f:53:c1:40:15:24:48:5b:02:bb:fd:3e:36:2f:d6:42: be:b1:1f:07:61:e8:e5:33:14:2a:b4:f2:7f:a3:2e:61:00:49: 7d:ed:17:c1:c5:5c:27:31:07:8d:19:00:63:c8:35:4b:f1:4f: 48:a9:6b:e5:83:21:d7:90:f5:69:72:7a:04:80:ac:f3:b6:3b: 3e:fb:2f:25:9f:25:9f:2f:90:07:d1:0c:14:8b:43:4e:86:9b: a6:e4:cc:d2:8c:26:4b:bb:cd:e7:e4:d6:51:42:d1:ff:aa:b2: b0:ab:6a:cb:5c:ee:ab:af:ee:b1:a8:38:46:7a:5b:0c:03:83: 75:69:7d:70:10:12:80:7f:fb:7b:65:62:b7:bf:6b:d8:b2:bc: ef:15:4c:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUwNjMwMTcyODA5WhcNMjUwNzA3MTcyODA5WjAYMRYwFAYD VQQDEw02ODYyYzkyOS00ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7QE7ZKrJTwJFQebitaFx4U9aZ9/Ffc8Ebo40ZuhaO8fiXOJiUq816KxxcU4 HgsqoMnOEqndxag7Ewa4LwlycvVMIwBFSPXmsajiuxb9REbU6FF8Ih3mRiZwDiXa c2+abFUTdgm3Wn2qlPS5/f6vka3CXor5r5JbCqWEd5763fFS6hKl1D/5Hykivazj oTtqUSUCFklF3Izqib4E+6YCVYAwsYiJlakMkcdt8AdEJkaAvwrE2IHRerJ7xVdx UI41ddFa8AYhjqbRFoHBAAYzYqo8phVeFwE2OtiCAMX9F+9vkIQ4Mp1KFYbyeEVm k3hAC6i6ctdbpndB2QVx3sbL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6+gHYS kVBgk2Tb02hM/6KzTgSPMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2g2AfTHosw0PpUAUn87fJopG95FDRkwuNoasF43Tm0bnf4trroy1t g24an3yI00npYO70itpNtp7b7HXDUCYb1ZC6YtoJukkX3eu5l2ZyM5KILId/meM3 IjsJ3i5W9tPwcpP+H9PkzzNTdCFISi9TwUAVJEhbArv9PjYv1kK+sR8HYejlMxQq tPJ/oy5hAEl97RfBxVwnMQeNGQBjyDVL8U9IqWvlgyHXkPVpcnoEgKzztjs++y8l nyWfL5AH0QwUi0NOhpum5MzSjCZLu83n5NZRQtH/qrKwq2rLXO6rr+6xqDhGelsM A4N1aX1wEBKAf/t7ZWK3v2vYsrzvFUx2 -----END CERTIFICATE-----Generated at Wed Jul 2 04:34:16 2025 by rpki-client