$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: 6eBcBOtNIiGuXPfoI5RloK/FChHabiLbZ9GBZWyzZV4= Subject key identifier: 41:01:E2:8E:26:C9:7D:8C:99:6A:89:05:24:80:68:3A:AA:74:72:1E Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 31 Signing time: Sat 23 Aug 2025 07:52:46 +0000 Manifest this update: Sat 23 Aug 2025 07:52:46 +0000 Manifest next update: Sat 30 Aug 2025 07:52:45 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: hz9gfNQaz3SGfECjXkcW7yo09tsvLXTEGlTWpEYsWdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Aug 23 07:52:46 2025 GMT Not After : Aug 30 07:52:45 2025 GMT Subject: CN=68a9734e-10cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:1c:63:11:fd:8d:f0:24:fa:fc:2e:72:de: 4d:de:d2:61:26:5c:e6:12:ea:9a:ae:7c:e2:b6:77: c4:10:b0:e6:c1:7c:fb:8e:9d:af:88:01:8a:ef:4f: 38:a7:62:17:5c:17:37:62:f9:b6:ee:20:b8:ff:26: 40:cb:8f:13:a3:42:26:ad:83:8e:1b:e1:12:c5:a1: a8:a4:b4:84:3a:37:eb:58:b6:e1:e3:26:8b:3c:59: a3:34:cd:fb:f4:83:d4:51:e5:aa:7d:b9:9c:57:d4: de:39:c7:da:0c:00:61:5c:d9:51:ac:99:03:f9:1d: a9:0b:49:a6:75:7c:a3:d7:b9:af:ac:9b:95:ec:ea: 54:79:09:b2:1a:ac:cc:b5:a0:2f:15:8e:b0:54:8c: ef:71:aa:cb:c0:4e:af:aa:76:8c:44:7a:15:5c:c5: ff:41:18:33:98:1d:ab:1f:33:c4:16:a1:e7:0d:93: 71:85:ac:6d:fc:ad:ab:fc:50:e2:0d:c5:19:86:84: 11:54:f7:3c:69:65:43:3c:bb:8f:be:63:c1:24:4d: b9:77:f6:82:9f:4e:5c:29:44:8d:20:6f:63:84:5e: ca:98:6e:a9:98:b0:0b:50:f8:6a:b2:74:bd:20:c0: 9f:07:9d:97:cb:47:d6:a4:e2:ac:55:11:91:fb:4a: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:E2:8E:26:C9:7D:8C:99:6A:89:05:24:80:68:3A:AA:74:72:1E X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:da:b9:b4:6b:e7:73:ee:a6:12:90:b7:4a:d8:42:fd:30:58: e0:78:b9:a1:83:ce:ef:9f:e9:f4:da:b6:b2:a8:85:27:30:81: 7c:cf:ac:3d:32:0c:a9:b8:e4:b9:41:4e:05:bb:82:51:9f:ca: a6:56:c8:30:8a:ac:e5:b7:e9:f3:c1:81:14:d1:0f:38:f5:f6: 3a:94:e6:99:37:52:be:b5:19:fd:7a:f1:5b:6a:ae:0c:35:89: 5e:3e:78:6a:fd:59:11:07:4e:2c:aa:78:c2:f7:dd:27:e2:2d: 2e:87:58:2c:72:c9:d1:89:36:a4:82:de:a4:42:ef:58:e6:9f: 35:93:7d:a4:6b:0c:77:d1:bb:ed:1b:6f:66:a4:fc:7e:3a:1f: 39:3a:b6:34:31:af:39:53:06:96:e2:3f:a0:b1:20:25:d3:af: f8:f4:01:76:fc:d1:93:f4:21:10:de:ec:92:e4:ad:d0:c9:95: 2b:75:3d:12:62:aa:ec:51:fc:a4:bd:8a:5b:e9:2e:78:86:90: ca:76:d9:ea:0d:d3:c7:d1:3f:90:ea:13:e8:57:ea:e5:e3:50: 36:cb:10:2f:6a:0f:77:7b:37:8f:6f:ab:55:83:95:84:9e:7c: 12:8d:62:92:a5:80:83:30:87:ad:63:cb:00:cc:6b:fd:44:28: ac:df:45:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTA4MjMwNzUyNDZaFw0yNTA4MzAwNzUyNDVaMBgxFjAUBgNV BAMTDTY4YTk3MzRlLTEwY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeNhxjEf2N8CT6/C5y3k3e0mEmXOYS6pqufOK2d8QQsObBfPuOna+IAYrvTzin YhdcFzdi+bbuILj/JkDLjxOjQiatg44b4RLFoaiktIQ6N+tYtuHjJos8WaM0zfv0 g9RR5ap9uZxX1N45x9oMAGFc2VGsmQP5HakLSaZ1fKPXua+sm5Xs6lR5CbIarMy1 oC8VjrBUjO9xqsvATq+qdoxEehVcxf9BGDOYHasfM8QWoecNk3GFrG38rav8UOIN xRmGhBFU9zxpZUM8u4++Y8EkTbl39oKfTlwpRI0gb2OEXsqYbqmYsAtQ+GqydL0g wJ8HnZfLR9ak4qxVEZH7SjYBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQQHijibJ fYyZaokFJIBoOqp0ch4wHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADPaubRr53PuphKQt0rYQv0wWOB4uaGDzu+f6fTatrKohScwgXzPrD0y DKm45LlBTgW7glGfyqZWyDCKrOW36fPBgRTRDzj19jqU5pk3Ur61Gf168Vtqrgw1 iV4+eGr9WREHTiyqeML33SfiLS6HWCxyydGJNqSC3qRC71jmnzWTfaRrDHfRu+0b b2ak/H46Hzk6tjQxrzlTBpbiP6CxICXTr/j0AXb80ZP0IRDe7JLkrdDJlSt1PRJi quxR/KS9ilvpLniGkMp22eoN08fRP5DqE+hX6uXjUDbLEC9qD3d7N49vq1WDlYSe fBKNYpKlgIMwh61jywDMa/1EKKzfRVY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:47 2025 by rpki-client