$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: 4toH18vYJxMla9GMxCRKUfCuM6SJr2WeBC1YyohTvIM= Subject key identifier: 98:0F:06:37:D6:22:DD:3E:9B:8C:CB:E5:47:69:80:12:63:82:EF:75 Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0D8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0D85 Signing time: Mon 30 Jun 2025 18:09:02 +0000 Manifest this update: Mon 30 Jun 2025 18:09:01 +0000 Manifest next update: Mon 07 Jul 2025 18:09:01 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: aLy/Awr6iT2pm0Bpd6+Te2aX6fz70+peM+4XeisiYdM=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: Kl+qHWqwPNXr+jNBmlZ54bsne4TIDTa38/cYe+iBa+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3468 (0xd8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Jun 30 18:09:01 2025 GMT Not After : Jul 7 18:09:01 2025 GMT Subject: CN=6862d2be-7edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:a3:13:c3:53:7e:f6:1f:34:cc:c6:25:f4: 4b:42:4a:0f:37:bf:5d:63:aa:7a:9c:16:2b:26:fd: d8:e3:ff:a4:f2:d3:6b:a0:f5:a1:30:56:b2:57:b5: c9:76:85:e5:ce:7b:1a:0b:10:71:79:6c:94:91:6f: 56:bf:61:db:df:8b:6a:ef:ea:ef:75:e5:29:48:6c: fd:09:63:24:39:fd:9a:64:0e:c5:40:14:90:c1:07: 98:03:cb:41:b2:30:b3:32:fc:af:1b:48:a9:d7:68: ab:b3:d9:6e:06:20:5f:7f:3a:8d:b2:84:ad:2c:30: 89:ed:a4:b3:4b:a1:96:50:f0:9c:f7:13:49:c0:d3: 00:cb:77:83:f0:f6:e3:9f:d3:4f:52:4d:c1:1a:68: 7b:c2:64:1a:3c:c6:2f:0b:5f:1b:d6:e5:c6:72:cf: 36:5d:6b:6a:5c:90:4f:8d:44:07:9d:c8:2d:6f:fd: 76:25:26:95:9e:62:25:8a:c3:9f:1c:4f:01:1d:05: 84:4b:a6:a1:11:e0:11:7c:ae:c5:c2:29:70:1b:fd: fd:30:fb:69:73:0f:b5:db:b6:dd:c8:bf:73:cb:00: 1a:76:66:af:48:f0:27:bc:c5:dc:34:ea:93:62:92: bd:1b:0b:f9:7d:05:87:da:14:b0:54:50:b4:d9:ca: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0F:06:37:D6:22:DD:3E:9B:8C:CB:E5:47:69:80:12:63:82:EF:75 X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d7:ad:31:5b:ca:71:e5:01:5c:c2:d7:e3:b7:e8:29:8e:59: 4e:8f:f0:e5:56:b1:d0:28:cc:84:52:55:9e:38:82:7c:fc:86: 8e:46:37:6c:5a:ca:37:cb:b5:00:d9:f2:dc:d0:90:92:0a:f1: 95:e5:71:7f:75:f1:a5:ca:08:f5:5a:6e:60:10:79:69:43:c0: 7c:62:48:86:ba:bc:68:af:a9:8d:b6:0e:c8:da:06:82:9d:67: 2d:59:15:fd:0e:dc:9c:87:f2:33:f7:26:93:db:19:a7:45:3e: ec:b8:7b:27:2b:a4:bd:6f:41:6c:bd:f2:1d:48:80:39:60:c9: 93:a6:1a:13:63:9c:8b:01:9d:dc:ab:65:b9:04:60:9e:66:81: 74:00:d6:b2:ba:bd:40:a2:c6:66:92:b7:a2:9c:6b:02:69:f4: 47:d7:0b:6b:a3:d5:0b:5a:b3:27:94:d6:92:ee:d7:a1:69:55: cf:91:1a:30:b1:bd:82:1f:36:e8:7c:44:db:31:b2:23:ff:34: 39:fa:ac:13:05:c6:b1:d4:19:d6:cd:3d:f3:d5:1d:b8:45:3b: 1a:37:ef:ab:66:3b:21:a0:46:c1:6a:82:55:79:b2:86:31:af: de:6a:29:8f:a5:af:a5:83:b7:24:66:45:49:e5:8e:21:80:d5: 9b:10:da:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjUwNjMwMTgwOTAxWhcNMjUwNzA3MTgwOTAxWjAYMRYwFAYD VQQDEw02ODYyZDJiZS03ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0yjE8NTfvYfNMzGJfRLQkoPN79dY6p6nBYrJv3Y4/+k8tNroPWhMFayV7XJ doXlznsaCxBxeWyUkW9Wv2Hb34tq7+rvdeUpSGz9CWMkOf2aZA7FQBSQwQeYA8tB sjCzMvyvG0ip12irs9luBiBffzqNsoStLDCJ7aSzS6GWUPCc9xNJwNMAy3eD8Pbj n9NPUk3BGmh7wmQaPMYvC18b1uXGcs82XWtqXJBPjUQHncgtb/12JSaVnmIlisOf HE8BHQWES6ahEeARfK7FwilwG/39MPtpcw+127bdyL9zywAadmavSPAnvMXcNOqT YpK9Gwv5fQWH2hSwVFC02cp1CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgPBjfW It0+m4zL5UdpgBJjgu91MB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9160xW8px5QFcwtfjt+gpjllOj/DlVrHQKMyEUlWeOIJ8/IaORjds Wso3y7UA2fLc0JCSCvGV5XF/dfGlygj1Wm5gEHlpQ8B8YkiGurxor6mNtg7I2gaC nWctWRX9Dtych/Iz9yaT2xmnRT7suHsnK6S9b0FsvfIdSIA5YMmTphoTY5yLAZ3c q2W5BGCeZoF0ANayur1AosZmkreinGsCafRH1wtro9ULWrMnlNaS7tehaVXPkRow sb2CHzbofETbMbIj/zQ5+qwTBcax1BnWzT3z1R24RTsaN++rZjshoEbBaoJVebKG Ma/eaimPpa+lg7ckZkVJ5Y4hgNWbENqT -----END CERTIFICATE-----Generated at Wed Jul 2 01:19:16 2025 by rpki-client