$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: 4lyh2DBevXBB97SfuWgZw7Eht/9udwbQFbelgvYTFp0= Subject key identifier: 73:5F:71:8A:09:98:F7:E0:39:45:3B:6C:A7:5E:A0:3C:14:33:16:23 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 018B Signing time: Wed 23 Jul 2025 02:56:08 +0000 Manifest this update: Wed 23 Jul 2025 02:56:07 +0000 Manifest next update: Wed 30 Jul 2025 02:56:07 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: X3z7eKbuCKkseSk6GdxlfdghyU9AOtRrkDN55mF7FCA=) 2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: QotOqnglA46ODcG/lG9E8XyvCGo9HnekdR3etzUrE4c=) 3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: 4KMF0OCYbNDwaW3aLIgUQJgQPdi1cw9YHAWu6imOU70=) 4: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: ezxJgBFw2tKKcU962PajWcu+NU//ODot2RyjD71Fn24=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: vvnk4u9DNse+nnNTrLADNzPvSMLhalyiJs4z4ddnMBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Jul 23 02:56:07 2025 GMT Not After : Jul 30 02:56:07 2025 GMT Subject: CN=68804f48-651c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:37:2e:1d:fa:52:34:9e:41:36:5f:31:de: d4:ae:86:8b:28:29:73:44:e6:12:e1:a3:a0:77:08: 20:2a:a2:cf:32:47:1e:b5:6b:2b:84:2b:2d:c9:7b: 3c:fa:8a:d1:f0:ad:0e:1e:00:9a:8d:06:a5:92:a7: 86:1e:39:bd:28:41:30:72:e4:10:d1:ba:75:a8:c6: 2e:64:c6:92:15:f8:f4:72:26:bf:70:d7:65:6a:96: ab:b9:e5:f7:36:98:fe:df:21:9e:4c:d4:5b:17:36: 99:85:fd:84:9e:a9:82:ac:f4:7a:d6:a1:4c:57:ff: 21:53:04:e4:85:e4:d8:a7:52:49:a5:f0:ec:97:5a: e9:5b:b0:d3:a2:30:43:30:28:7c:73:81:7b:d2:dd: 11:ff:28:ea:c6:6c:ff:f8:86:85:0f:d0:ae:85:47: b7:fb:18:b4:75:a0:7b:a6:6b:a1:7d:98:2f:02:7e: 97:ec:2d:31:91:8e:a6:c4:53:2b:83:7b:54:f0:88: 7f:dc:12:2f:25:e0:a3:1d:28:20:ca:d0:f0:40:bb: 7b:02:ae:21:c2:83:3d:ec:4f:bc:62:76:33:0e:1d: db:9e:0d:28:2a:b8:69:fd:a4:dd:59:d5:b9:dd:c0: d8:a9:bb:a5:29:f3:a7:2e:5e:a4:62:15:ed:bb:8b: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:71:8A:09:98:F7:E0:39:45:3B:6C:A7:5E:A0:3C:14:33:16:23 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:2f:8d:d5:17:76:ae:5f:3f:2f:f8:f2:07:91:da:9e:52:cd: 06:24:3e:2b:b3:5e:57:70:5a:e8:61:5d:fb:c7:6b:f4:93:f7: 09:05:f1:10:db:08:16:bb:96:d8:b9:81:60:c0:2a:94:c6:24: 1a:8b:58:14:9b:74:d2:b2:43:3a:7f:a0:54:ef:92:c6:f5:ac: f6:4b:95:11:1b:54:1d:41:af:0e:6d:ad:48:87:00:0d:1b:99: 21:a8:ae:33:d7:ea:e3:ff:1b:b0:20:bf:a5:df:31:11:2d:6a: 24:2c:2f:9e:e4:3a:c8:4e:3a:de:96:02:0d:3d:b9:e1:fb:34: b9:86:e0:cd:23:62:98:cb:c3:07:ef:68:1e:4d:37:64:da:24: e5:ac:b1:79:db:c5:56:7a:31:7e:e0:a6:2d:7d:2e:1d:0a:64: d7:04:10:62:6e:c1:62:ed:2f:4f:8c:93:89:ed:f2:06:f6:07: 11:f5:70:3b:7a:9b:c4:8e:d0:7b:48:83:5f:25:3c:ee:ae:f0: f3:19:c7:60:e7:73:0e:05:92:c4:b3:e2:d7:41:b7:61:df:93: 94:2b:c5:dc:7f:11:49:49:69:80:e5:a3:52:f0:31:6f:57:88: 3e:be:da:fb:68:4b:1c:e7:72:fb:27:33:ba:76:74:c3:3f:5a: 14:b5:87:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUwNzIzMDI1NjA3WhcNMjUwNzMwMDI1NjA3WjAYMRYwFAYD VQQDEw02ODgwNGY0OC02NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25w3Lh36UjSeQTZfMd7UroaLKClzROYS4aOgdwggKqLPMkcetWsrhCstyXs8 +orR8K0OHgCajQalkqeGHjm9KEEwcuQQ0bp1qMYuZMaSFfj0cia/cNdlaparueX3 Npj+3yGeTNRbFzaZhf2EnqmCrPR61qFMV/8hUwTkheTYp1JJpfDsl1rpW7DTojBD MCh8c4F70t0R/yjqxmz/+IaFD9CuhUe3+xi0daB7pmuhfZgvAn6X7C0xkY6mxFMr g3tU8Ih/3BIvJeCjHSggytDwQLt7Aq4hwoM97E+8YnYzDh3bng0oKrhp/aTdWdW5 3cDYqbulKfOnLl6kYhXtu4tN6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNfcYoJ mPfgOUU7bKdeoDwUMxYjMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnL43VF3auXz8v+PIHkdqeUs0GJD4rs15XcFroYV37x2v0k/cJBfEQ 2wgWu5bYuYFgwCqUxiQai1gUm3TSskM6f6BU75LG9az2S5URG1QdQa8Oba1IhwAN G5khqK4z1+rj/xuwIL+l3zERLWokLC+e5DrITjrelgINPbnh+zS5huDNI2KYy8MH 72geTTdk2iTlrLF528VWejF+4KYtfS4dCmTXBBBibsFi7S9PjJOJ7fIG9gcR9XA7 epvEjtB7SINfJTzurvDzGcdg53MOBZLEs+LXQbdh35OUK8XcfxFJSWmA5aNS8DFv V4g+vtr7aEsc53L7JzO6dnTDP1oUtYeO -----END CERTIFICATE-----Generated at Thu Jul 24 09:15:48 2025 by rpki-client