$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: 1xJlHgunXdVF5hihESrMoB41WyIce2MXDER2E4M4mE0= Subject key identifier: 26:F4:66:2E:98:2B:C4:0C:27:06:51:6D:69:AD:4D:11:4B:8D:4E:5D Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: F8 Signing time: Tue 01 Jul 2025 05:48:20 +0000 Manifest this update: Tue 01 Jul 2025 05:48:19 +0000 Manifest next update: Tue 08 Jul 2025 05:48:19 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: xk8vYh27Jcj8XB9aVcFuqNUkJi5WqkX0Dp5KQGVmw6E=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Jul 1 05:48:19 2025 GMT Not After : Jul 8 05:48:19 2025 GMT Subject: CN=686376a4-76d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:30:50:ed:53:8d:3f:49:0d:57:73:13:21:99: 66:b0:01:ae:8e:87:95:c9:b8:12:b9:d7:cb:c6:45: 76:f9:0e:8f:5e:89:57:2d:df:b2:34:fd:a6:d8:ea: 36:36:12:e1:11:38:0d:7c:90:33:c4:f5:45:e8:0c: 94:49:8e:b1:cc:d5:70:80:c9:d5:06:fe:4a:6e:cd: 37:da:af:4f:a7:15:70:6c:d0:d2:f7:65:d6:ac:ef: 8c:97:0a:06:aa:f0:15:19:1c:8b:c5:3d:3e:1d:fa: 4a:89:a6:e9:4b:e1:11:16:f5:e5:9f:b1:5f:44:5e: d7:f1:21:ea:2d:87:1c:f8:7f:97:1c:fc:0e:9a:0a: 92:91:09:42:77:21:32:85:4e:5d:5a:ee:b7:ea:48: 08:51:58:6d:00:ca:95:49:2e:19:d2:b7:a9:60:21: ee:45:82:16:c3:3b:52:11:5e:15:f2:fe:28:c3:5e: 38:30:c7:b1:27:93:51:18:aa:90:7b:36:10:a5:a2: ea:08:56:77:a7:a2:63:e4:18:0a:3d:75:72:18:e8: ec:3e:ab:6c:33:32:f6:ca:81:d6:be:9d:bc:70:99: 6f:6b:c8:d1:fb:68:0a:bc:0f:93:2c:59:9d:b8:b0: b6:16:44:39:eb:b9:e3:a4:66:ba:f3:96:ef:b5:c8: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F4:66:2E:98:2B:C4:0C:27:06:51:6D:69:AD:4D:11:4B:8D:4E:5D X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:81:ab:99:e9:9c:1f:09:80:1b:74:71:17:91:d5:60:4a:90: 1f:8c:f2:8a:a5:ba:e4:88:b8:4a:f2:ee:c8:a7:fa:b8:99:12: a7:fe:66:05:c1:77:55:ce:e2:ca:53:96:c1:cf:b3:c9:1c:92: 7b:fd:f7:fa:3b:55:af:8b:bd:29:fe:0f:c7:db:9a:b7:78:f0: 66:f4:58:d4:2e:fd:fc:8a:4c:94:80:96:bb:66:1b:98:95:43: de:b8:f5:00:cd:26:91:69:a0:6e:ee:f2:39:2a:b0:85:37:c3: 9e:db:28:5a:54:b0:31:85:fa:f6:51:4c:d1:67:65:9f:b3:e5: 52:09:c9:67:60:cf:b1:88:9f:f6:11:df:20:20:56:ee:e0:11: ed:6b:4c:7c:2f:8e:74:2a:b6:a2:e3:91:be:77:67:11:34:2a: 53:1b:1a:0a:13:ad:47:8b:e3:53:ce:74:b5:7d:48:d5:17:9e: 53:0d:11:bb:b5:b9:41:f1:23:d0:33:8c:18:d5:34:b6:9e:85: 71:bd:64:0e:4f:90:64:8c:f4:82:ed:72:8c:71:70:4b:f0:c3: 31:ef:68:87:ae:91:69:aa:21:f5:d3:ca:2c:88:4e:c4:65:f0: 3a:bc:6e:53:1b:46:07:03:ce:70:fe:e4:96:53:88:c9:a7:5a: d3:cf:e3:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwNzAxMDU0ODE5WhcNMjUwNzA4MDU0ODE5WjAYMRYwFAYD VQQDEw02ODYzNzZhNC03NmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DBQ7VONP0kNV3MTIZlmsAGujoeVybgSudfLxkV2+Q6PXolXLd+yNP2m2Oo2 NhLhETgNfJAzxPVF6AyUSY6xzNVwgMnVBv5Kbs032q9PpxVwbNDS92XWrO+MlwoG qvAVGRyLxT0+HfpKiabpS+ERFvXln7FfRF7X8SHqLYcc+H+XHPwOmgqSkQlCdyEy hU5dWu636kgIUVhtAMqVSS4Z0repYCHuRYIWwztSEV4V8v4ow144MMexJ5NRGKqQ ezYQpaLqCFZ3p6Jj5BgKPXVyGOjsPqtsMzL2yoHWvp28cJlva8jR+2gKvA+TLFmd uLC2FkQ567njpGa685bvtcjaJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb0Zi6Y K8QMJwZRbWmtTRFLjU5dMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDgauZ6ZwfCYAbdHEXkdVgSpAfjPKKpbrkiLhK8u7Ip/q4mRKn/mYF wXdVzuLKU5bBz7PJHJJ7/ff6O1Wvi70p/g/H25q3ePBm9FjULv38ikyUgJa7ZhuY lUPeuPUAzSaRaaBu7vI5KrCFN8Oe2yhaVLAxhfr2UUzRZ2Wfs+VSCclnYM+xiJ/2 Ed8gIFbu4BHta0x8L450Krai45G+d2cRNCpTGxoKE61Hi+NTznS1fUjVF55TDRG7 tblB8SPQM4wY1TS2noVxvWQOT5BkjPSC7XKMcXBL8MMx72iHrpFpqiH108osiE7E ZfA6vG5TG0YHA85w/uSWU4jJp1rTz+Mb -----END CERTIFICATE-----Generated at Thu Jul 3 01:09:50 2025 by rpki-client