$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: BBHad7IX78e7E3p855DW6cUD4FF7ghlyhDeUEEg2clg= Subject key identifier: 6C:20:33:81:C4:57:63:DA:9D:47:3B:C0:4B:A8:FD:CB:84:FD:D9:6F Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: 87 Signing time: Mon 21 Jul 2025 06:45:47 +0000 Manifest this update: Mon 21 Jul 2025 06:45:46 +0000 Manifest next update: Mon 28 Jul 2025 06:45:46 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: CQXoCxRnciYMTnWen6iSvanOx4q7Haia0nfJT3wovR4=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Jul 21 06:45:46 2025 GMT Not After : Jul 28 06:45:46 2025 GMT Subject: CN=687de21a-ea19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:68:8e:cc:4b:81:66:53:94:d5:3b:86:31: 66:46:9e:1f:8b:e7:de:d5:6c:08:3e:ec:5c:a3:6c: 75:5b:8f:5d:48:f5:63:b8:d4:82:d3:cc:4e:55:97: 82:2a:5d:0f:0d:96:a6:de:ff:48:7a:97:7b:90:9e: f1:db:e8:9a:81:6e:10:f1:0d:9b:0c:09:8b:77:b8: d5:3f:e4:20:e2:01:8c:32:59:75:98:58:c0:93:ff: f3:00:17:e7:a1:33:31:90:a0:75:2e:a4:fd:ba:84: 48:7e:58:ec:54:fc:01:9b:6b:6a:2f:13:ca:42:6a: 6a:ff:18:58:02:8a:bb:dd:14:03:f3:fb:45:11:5f: d6:52:ca:71:90:9c:68:dc:e4:9c:17:48:76:95:61: 62:c9:45:01:72:ff:73:24:39:42:cf:e1:cc:b6:82: 85:b2:a3:20:2d:16:82:11:df:60:7a:f0:b7:2f:18: 04:45:c4:75:e0:d4:0c:4f:6f:f3:3d:c4:15:29:21: c6:d9:b2:13:79:f0:e4:f9:3c:a1:3e:35:7c:2b:bb: 07:56:c4:fb:c8:31:1e:e8:3c:6f:49:8c:44:23:42: 39:84:4e:4e:64:9c:76:30:f2:8b:db:69:d6:79:7a: 17:46:72:79:f2:52:7b:53:43:13:50:eb:b2:23:a2: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:20:33:81:C4:57:63:DA:9D:47:3B:C0:4B:A8:FD:CB:84:FD:D9:6F X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:68:e6:9e:6d:cd:78:be:1d:85:c1:b5:53:04:0f:8a:1a:98: 36:b0:6a:c1:78:47:5c:b7:25:18:bb:0a:10:90:1c:a3:2d:58: 7c:23:95:83:88:6b:2d:1b:22:5a:79:8e:76:73:c2:e1:07:d9: 26:13:fe:57:e7:55:e6:75:6e:90:23:5b:b5:dc:b7:a4:ee:41: 35:b3:ef:53:a4:9c:df:80:d2:94:68:0f:6f:ce:94:9a:bd:25: d9:00:9f:54:df:e6:55:fe:06:cc:35:ab:e1:17:cb:b6:3d:07: ec:ce:ab:a4:52:07:f5:43:45:85:2d:75:3f:a3:30:ad:e6:16: 36:04:74:47:93:5b:d8:2c:27:27:8c:b5:60:29:bd:e1:6e:67: 82:e4:31:05:c3:65:a4:60:47:97:37:b8:bc:6e:68:7b:17:1a: 29:d7:27:5d:e2:6d:13:f4:d4:cb:6a:79:2f:7e:bf:02:d2:9d: 82:ab:e7:c2:54:d3:4e:fa:0b:ed:b6:f9:27:4b:06:73:6f:59: f1:f4:f7:4b:60:2a:21:9c:d6:53:f3:01:21:f7:6a:8d:34:ce: 53:08:09:95:0b:03:c6:03:c3:e0:8b:fa:96:60:71:7c:53:df: dc:bd:7a:9b:a4:e1:d7:9d:0a:b8:eb:04:b2:61:83:45:a6:ef: fe:3c:c7:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKEQ0Njk2NEY5RjM3MzFGMkY2M0U2NzAwOEM5MUU1OUM3 RENDNzg1NTcwHhcNMjUwNzIxMDY0NTQ2WhcNMjUwNzI4MDY0NTQ2WjAYMRYwFAYD VQQDEw02ODdkZTIxYS1lYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFZojsxLgWZTlNU7hjFmRp4fi+fe1WwIPuxco2x1W49dSPVjuNSC08xOVZeC Kl0PDZam3v9Iepd7kJ7x2+iagW4Q8Q2bDAmLd7jVP+Qg4gGMMll1mFjAk//zABfn oTMxkKB1LqT9uoRIfljsVPwBm2tqLxPKQmpq/xhYAoq73RQD8/tFEV/WUspxkJxo 3OScF0h2lWFiyUUBcv9zJDlCz+HMtoKFsqMgLRaCEd9gevC3LxgERcR14NQMT2/z PcQVKSHG2bITefDk+TyhPjV8K7sHVsT7yDEe6DxvSYxEI0I5hE5OZJx2MPKL22nW eXoXRnJ58lJ7U0MTUOuyI6JUpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwgM4HE V2PanUc7wEuo/cuE/dlvMB8GA1UdIwQYMBaAFNRpZPnzcx8vY+ZwCMkeWcfcx4VX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FOTI2RTkxMjlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5OWo1bkFJeVI1Wng5ekho VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FOTI2RTkxMjlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5 OWo1bkFJeVI1Wng5ekhoVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZaOaebc14vh2FwbVTBA+KGpg2sGrBeEdctyUYuwoQkByjLVh8I5WD iGstGyJaeY52c8LhB9kmE/5X51XmdW6QI1u13Lek7kE1s+9TpJzfgNKUaA9vzpSa vSXZAJ9U3+ZV/gbMNavhF8u2PQfszqukUgf1Q0WFLXU/ozCt5hY2BHRHk1vYLCcn jLVgKb3hbmeC5DEFw2WkYEeXN7i8bmh7Fxop1ydd4m0T9NTLankvfr8C0p2Cq+fC VNNO+gvttvknSwZzb1nx9PdLYCohnNZT8wEh92qNNM5TCAmVCwPGA8Pgi/qWYHF8 U9/cvXqbpOHXnQq46wSyYYNFpu/+PMce -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:16 2025 by rpki-client