$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json) Hash identifier: 0NtvKluJ0jMWr/2WkWLu6lebPT+OssASm3CGa/vf5yE= Subject key identifier: 10:80:DC:20:53:F1:B4:26:2A:2F:06:E4:17:35:91:8E:F1:EA:89:A9 Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 06F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft Manifest number: 06EF Signing time: Sun 20 Jul 2025 22:06:56 +0000 Manifest this update: Sun 20 Jul 2025 22:06:56 +0000 Manifest next update: Sun 27 Jul 2025 22:06:56 +0000 Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: L+Ezs8y0BLyYCYhh8mJA9kS8L5Ck1MxENJ9Dmv+0fIQ=) 2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1781 (0x6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: Jul 20 22:06:56 2025 GMT Not After : Jul 27 22:06:56 2025 GMT Subject: CN=687d6880-7c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:ea:41:d4:83:94:10:35:b7:06:73:57:9c: 48:ec:f7:87:5d:8f:7b:56:c6:26:fc:65:bf:b5:69: fc:99:6c:76:4a:cb:d9:38:e5:e0:26:08:5d:5e:d9: 11:47:5d:1b:f3:fb:79:be:07:11:2a:b9:de:65:99: 3d:3c:e8:1b:87:6d:a5:6e:45:8d:73:2e:dd:e4:e4: cd:f6:f9:1a:46:3b:db:4a:95:29:e3:a0:18:fa:d8: ee:d7:5d:e7:66:d1:1f:98:b9:82:03:1c:45:eb:dd: ec:fc:a1:75:0e:e9:bb:88:2e:53:88:a4:6f:d0:ef: 18:0e:35:c8:89:89:d0:95:1b:cd:95:39:db:ee:55: d9:99:8c:09:09:64:28:d5:3b:68:67:88:24:c2:2a: 54:11:e6:8d:62:c4:2a:d3:04:bc:6e:c7:bc:1b:a0: c4:d6:fe:09:c1:52:0e:bd:a3:90:36:0e:31:96:9e: d6:46:90:4d:10:ca:a3:f1:44:0b:b9:54:79:2e:e4: 5b:6a:fc:d4:a7:bb:01:7d:b8:7a:7b:bb:77:7b:fb: e4:64:e7:41:27:1e:71:33:20:1f:39:c5:a7:14:76: f5:17:b7:2c:ec:49:61:ce:69:2d:49:27:3b:0f:eb: 63:1f:86:53:3d:06:4f:c3:9c:cb:cb:96:89:c3:bc: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:80:DC:20:53:F1:B4:26:2A:2F:06:E4:17:35:91:8E:F1:EA:89:A9 X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:73:d9:c9:c0:c8:08:af:43:eb:62:93:c5:5b:ad:da:53:be: 21:9c:33:a9:31:58:04:88:1c:54:40:7f:41:eb:ef:c2:2d:d3: 71:9a:2c:88:97:dd:80:f6:5f:1a:26:12:9b:f3:d7:5e:80:87: 72:5c:bc:70:51:16:c0:ff:6f:6f:4f:a3:ce:cb:bd:39:1a:c4: 30:56:34:27:9a:07:c1:5c:ed:c6:85:3c:e5:3f:a0:e4:8d:13: 63:ce:43:ce:af:ca:8f:dc:00:6b:d8:56:d1:b7:c8:e1:18:81: a7:75:bb:e9:00:ff:9e:71:9b:a9:ab:54:2b:00:93:ca:40:d5: 64:87:d7:28:e6:55:eb:87:8e:1d:7e:80:61:fb:cf:d0:5a:df: de:a3:5e:d3:5d:82:22:a3:9a:56:b6:c2:c1:3b:a7:b1:09:a2: 3d:fc:43:1f:40:b6:91:f7:74:19:ae:5d:c3:46:a9:2e:25:86: 47:d2:b8:6e:ee:5e:85:ca:d5:2d:da:4c:f4:60:69:c6:e0:08: bf:36:fd:4c:71:7c:cb:42:e5:1f:ad:34:1f:24:80:6b:b8:68: 56:b3:9e:39:fd:1f:96:b7:86:88:15:a8:30:98:95:be:b5:0a: 50:3c:58:0a:a1:c7:59:bb:43:11:d9:25:00:1e:2a:f9:96:84: ad:99:3f:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjUwNzIwMjIwNjU2WhcNMjUwNzI3MjIwNjU2WjAYMRYwFAYD VQQDEw02ODdkNjg4MC03YzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3enqQdSDlBA1twZzV5xI7PeHXY97VsYm/GW/tWn8mWx2SsvZOOXgJghdXtkR R10b8/t5vgcRKrneZZk9POgbh22lbkWNcy7d5OTN9vkaRjvbSpUp46AY+tju113n ZtEfmLmCAxxF693s/KF1Dum7iC5TiKRv0O8YDjXIiYnQlRvNlTnb7lXZmYwJCWQo 1TtoZ4gkwipUEeaNYsQq0wS8bse8G6DE1v4JwVIOvaOQNg4xlp7WRpBNEMqj8UQL uVR5LuRbavzUp7sBfbh6e7t3e/vkZOdBJx5xMyAfOcWnFHb1F7cs7ElhzmktSSc7 D+tjH4ZTPQZPw5zLy5aJw7x36wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCA3CBT 8bQmKi8G5Bc1kY7x6ompMB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ dERfVlExaVRqZEh6R2hhUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMc9nJwMgIr0PrYpPFW63aU74hnDOpMVgEiBxUQH9B6+/CLdNxmiyI l92A9l8aJhKb89degIdyXLxwURbA/29vT6POy705GsQwVjQnmgfBXO3GhTzlP6Dk jRNjzkPOr8qP3ABr2FbRt8jhGIGndbvpAP+ecZupq1QrAJPKQNVkh9co5lXrh44d foBh+8/QWt/eo17TXYIio5pWtsLBO6exCaI9/EMfQLaR93QZrl3DRqkuJYZH0rhu 7l6FytUt2kz0YGnG4Ai/Nv1McXzLQuUfrTQfJIBruGhWs545/R+Wt4aIFagwmJW+ tQpQPFgKocdZu0MR2SUAHir5loStmT/n -----END CERTIFICATE-----Generated at Mon Jul 21 06:05:14 2025 by rpki-client