$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: l4prXnt5j92AvTn/5tjDG0JbG0yUpqfVt6uqFX8JC0w= Subject key identifier: 56:91:76:09:18:A6:8B:EF:36:0A:C1:B3:B7:93:5B:ED:B5:8D:F1:C1 Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 0151 Signing time: Sun 29 Jun 2025 03:18:42 +0000 Manifest this update: Sun 29 Jun 2025 03:18:41 +0000 Manifest next update: Sun 06 Jul 2025 03:18:41 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: iv7O0loLaiCKvSz5QAhtv++8cwpyMDfuTE41mQb3GjA=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: iKZhrYsqwja6p9Jg0/rXm6hAG4LxSI3ekb53k0lCuBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Jun 29 03:18:41 2025 GMT Not After : Jul 6 03:18:41 2025 GMT Subject: CN=6860b092-b7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:fe:89:54:3c:96:75:3d:78:68:69:cd:ac: 51:9f:ce:58:9f:cd:2b:01:e5:0f:90:e9:58:6a:82: 40:3e:14:89:d5:7a:89:bc:6e:aa:9b:85:5f:ae:1d: 78:89:07:74:09:05:3b:f1:3e:a8:f9:69:eb:59:cc: ea:49:ab:a3:1d:c9:08:8c:02:64:8e:46:2c:5b:f4: 07:c3:e9:5e:f6:23:83:b6:17:fe:24:91:fa:11:5a: 96:6a:c2:31:f2:45:c0:60:69:9c:01:a8:00:fb:00: 0d:0d:c8:ce:59:b2:ba:75:1f:3e:e1:6e:57:72:b3: c0:28:e1:8e:79:c1:e4:73:34:2d:eb:1f:7a:a1:07: db:9a:b2:31:7a:cd:cb:0c:57:32:bd:5e:1b:ae:18: 28:49:69:47:2f:7e:33:1d:28:c9:f7:fe:9c:ee:8f: 15:e7:42:e7:13:10:cb:46:34:91:93:5c:94:ed:23: 28:03:87:80:0d:b1:ef:e7:68:09:26:59:1a:a2:0f: c6:e2:09:4a:f3:db:c9:b6:54:71:b4:42:a2:1a:a0: 22:72:23:0d:4c:80:12:7b:ef:6a:01:1b:f7:80:1d: fe:57:31:9b:36:a2:2d:9f:ab:af:c0:62:52:22:29: 03:cb:f5:b6:de:61:42:76:41:e8:48:1d:b7:f4:a3: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:91:76:09:18:A6:8B:EF:36:0A:C1:B3:B7:93:5B:ED:B5:8D:F1:C1 X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e1:46:dc:57:52:30:2d:ae:eb:e6:7f:05:7c:7e:5b:d8:10: 24:b8:e9:ef:ea:4c:12:b8:c7:bb:be:01:7f:26:b5:03:69:47: c5:2b:b9:67:bf:3c:df:3a:22:17:15:98:09:41:7c:73:38:b1: d2:89:db:f7:83:42:f3:a8:74:26:e1:1c:06:c8:3e:b2:ee:e9: df:f8:b5:90:d3:b2:15:48:ea:cd:03:11:17:d1:24:a8:b6:17: d0:31:6a:70:5b:c0:3a:57:98:19:88:3e:bf:fa:c4:19:72:fe: 23:60:ad:4a:f3:c3:be:b8:0a:43:a8:72:88:b9:a0:33:1d:3c: 84:24:38:d9:5b:fc:09:3b:24:ea:a3:6d:0d:74:3b:e7:90:6f: d3:9d:0b:9e:d1:65:8f:4b:e7:65:06:4f:84:ae:87:35:af:f3: 81:40:83:dc:66:8a:71:f3:04:e3:c7:63:e9:3e:6f:ec:ec:5f: a3:6b:4f:fd:fd:a1:ac:0c:85:92:d5:7e:68:e5:2e:54:52:55: f6:e4:b9:35:49:dd:03:9d:5e:c0:53:6d:45:84:60:64:72:7b: f3:dd:74:dd:82:3e:b0:3d:a9:c6:cf:31:4a:07:99:28:98:cb: 7e:4d:1f:5d:23:dd:ce:ce:d6:06:cd:19:d5:8f:32:78:30:08: 44:d0:16:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjUwNjI5MDMxODQxWhcNMjUwNzA2MDMxODQxWjAYMRYwFAYD VQQDEw02ODYwYjA5Mi1iN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndT+iVQ8lnU9eGhpzaxRn85Yn80rAeUPkOlYaoJAPhSJ1XqJvG6qm4Vfrh14 iQd0CQU78T6o+WnrWczqSaujHckIjAJkjkYsW/QHw+le9iODthf+JJH6EVqWasIx 8kXAYGmcAagA+wANDcjOWbK6dR8+4W5XcrPAKOGOecHkczQt6x96oQfbmrIxes3L DFcyvV4brhgoSWlHL34zHSjJ9/6c7o8V50LnExDLRjSRk1yU7SMoA4eADbHv52gJ Jlkaog/G4glK89vJtlRxtEKiGqAiciMNTIASe+9qARv3gB3+VzGbNqItn6uvwGJS IikDy/W23mFCdkHoSB239KOTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaRdgkY povvNgrBs7eTW+21jfHBMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh4UbcV1IwLa7r5n8FfH5b2BAkuOnv6kwSuMe7vgF/JrUDaUfFK7ln vzzfOiIXFZgJQXxzOLHSidv3g0LzqHQm4RwGyD6y7unf+LWQ07IVSOrNAxEX0SSo thfQMWpwW8A6V5gZiD6/+sQZcv4jYK1K88O+uApDqHKIuaAzHTyEJDjZW/wJOyTq o20NdDvnkG/TnQue0WWPS+dlBk+Eroc1r/OBQIPcZopx8wTjx2PpPm/s7F+ja0/9 /aGsDIWS1X5o5S5UUlX25Lk1Sd0DnV7AU21FhGBkcnvz3XTdgj6wPanGzzFKB5ko mMt+TR9dI93OztYGzRnVjzJ4MAhE0BbA -----END CERTIFICATE-----Generated at Tue Jul 1 05:12:42 2025 by rpki-client