$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: sAwFfgriFFFnN2Vg0iJA0vf68SA60LAl0pAfVX/Yut8= Subject key identifier: 1B:34:58:68:F8:38:E1:A2:4D:06:EF:CA:22:8D:30:E9:E4:EC:81:3C Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 16 Signing time: Tue 01 Jul 2025 08:46:31 +0000 Manifest this update: Tue 01 Jul 2025 08:46:30 +0000 Manifest next update: Tue 08 Jul 2025 08:46:30 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: JJZgIW/6P7OyYPfEUVOfdXa2TiyZ1v/AKB9e2+GjW48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Jul 1 08:46:30 2025 GMT Not After : Jul 8 08:46:30 2025 GMT Subject: CN=6863a066-9cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:a5:61:ce:7f:5f:0a:49:71:db:ba:c7:98: ff:0e:28:4f:a9:cc:c0:26:78:8b:40:b4:23:a0:95: fb:dd:cf:6e:3f:e1:d0:3b:bf:13:c6:b3:2a:2f:75: 4f:62:4e:00:b5:bf:02:a8:c9:59:09:df:e2:b3:e9: f5:69:8e:04:e1:e9:26:3f:d5:7d:78:a4:9b:fc:e7: c4:e3:3c:e1:bc:c9:e1:8b:bf:16:14:bd:84:b6:85: a2:7a:6c:6b:ae:01:eb:d7:7d:43:34:35:70:4e:54: 96:33:7b:85:d8:1d:4d:03:db:97:31:16:6b:78:34: cf:57:8b:4d:ad:d1:1d:ab:35:b1:24:4f:53:59:a3: ba:9c:ce:13:e7:34:12:4d:5d:ac:d6:5b:cc:95:83: 13:55:08:7b:b8:12:d1:b8:5e:c9:8b:66:33:cf:45: 66:aa:6a:2d:94:a7:e1:cd:2f:a9:81:5d:da:12:00: f5:e0:e0:1f:0d:9b:f9:54:c9:42:cf:30:2f:96:0b: d7:81:81:91:a9:03:33:be:9a:b7:eb:98:4a:36:1b: 9e:df:54:16:2a:f8:a7:a8:f3:77:65:13:b4:58:b2: d0:9c:87:65:93:30:7d:73:3a:a8:9f:8f:4d:51:dd: 4f:65:94:d5:44:15:11:f0:a2:97:eb:d9:ac:e4:5f: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:58:68:F8:38:E1:A2:4D:06:EF:CA:22:8D:30:E9:E4:EC:81:3C X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e2:35:7f:57:d2:f0:a0:37:85:63:e2:06:83:90:59:f2:ad: 8b:ae:a1:e5:6d:7e:70:78:4b:69:c2:00:ec:bf:6a:3b:d0:67: 5f:d9:60:0f:77:60:66:58:0b:a1:97:b4:f6:98:23:ac:d0:da: 97:15:49:96:d3:50:0c:23:69:f6:79:47:be:a4:04:7e:71:48: a7:ab:1b:83:5c:17:61:7a:b7:f4:6f:da:b0:f3:5d:c2:a0:ad: 76:44:3d:d0:38:2f:39:61:1c:8e:6c:32:c2:b9:76:c2:36:10: dc:32:42:80:a7:e6:6d:29:b2:69:2b:96:32:f8:d3:0e:7d:83: 10:f4:90:8f:08:5e:46:3c:35:73:f8:2d:4b:aa:5f:3e:d2:bb: 0b:bd:46:72:ae:be:8b:c7:ea:e9:73:cc:a4:b3:d4:fe:0f:67: fc:c8:de:cc:78:4c:a9:bf:e0:86:ec:39:31:86:98:09:39:9f: 20:33:92:2a:7e:15:0b:07:20:78:02:aa:9f:90:0f:65:e1:6d: f5:b4:3b:e6:2f:05:1e:e3:41:65:b9:e9:4d:7b:22:e5:dc:c6: 08:23:4e:b7:ae:0e:44:51:f5:90:e8:fe:5a:cc:07:51:3d:1d: 3c:fc:dc:1c:2b:74:6d:b2:07:98:1b:26:fa:50:93:f6:99:72: 4d:d5:40:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTA3MDEwODQ2MzBaFw0yNTA3MDgwODQ2MzBaMBgxFjAUBgNV BAMTDTY4NjNhMDY2LTljZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm06Vhzn9fCklx27rHmP8OKE+pzMAmeItAtCOglfvdz24/4dA7vxPGsyovdU9i TgC1vwKoyVkJ3+Kz6fVpjgTh6SY/1X14pJv858TjPOG8yeGLvxYUvYS2haJ6bGuu AevXfUM0NXBOVJYze4XYHU0D25cxFmt4NM9Xi02t0R2rNbEkT1NZo7qczhPnNBJN XazWW8yVgxNVCHu4EtG4XsmLZjPPRWaqai2Up+HNL6mBXdoSAPXg4B8Nm/lUyULP MC+WC9eBgZGpAzO+mrfrmEo2G57fVBYq+Keo83dlE7RYstCch2WTMH1zOqifj01R 3U9llNVEFRHwopfr2azkXz17AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGzRYaPg4 4aJNBu/KIo0w6eTsgTwwHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACriNX9X0vCgN4Vj4gaDkFnyrYuuoeVtfnB4S2nCAOy/ajvQZ1/ZYA93 YGZYC6GXtPaYI6zQ2pcVSZbTUAwjafZ5R76kBH5xSKerG4NcF2F6t/Rv2rDzXcKg rXZEPdA4LzlhHI5sMsK5dsI2ENwyQoCn5m0psmkrljL40w59gxD0kI8IXkY8NXP4 LUuqXz7Suwu9RnKuvovH6ulzzKSz1P4PZ/zI3sx4TKm/4IbsOTGGmAk5nyAzkip+ FQsHIHgCqp+QD2XhbfW0O+YvBR7jQWW56U17IuXcxggjTreuDkRR9ZDo/lrMB1E9 HTz83BwrdG2yB5gbJvpQk/aZck3VQF0= -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:46 2025 by rpki-client