$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: 7uRPvkdyGMnviX6Xr5vTDwCrw6EihBLINvva9JyatCk= Subject key identifier: AC:97:A3:E8:62:B6:B0:D1:AD:66:14:57:09:F0:B7:8F:82:28:8A:C1 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3F7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3B0D Signing time: Fri 18 Jul 2025 14:20:30 +0000 Manifest this update: Fri 18 Jul 2025 14:20:30 +0000 Manifest next update: Fri 25 Jul 2025 14:20:30 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: m5O5qaLzCRkNmdWypIfrYiXfYggzV+EDK5DGUTtn63s=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: PALIyVWAsvtscgbg+sm73eiiYRuD68MSbPN0evXTaxE=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: XIkS3fiVeDxNk75oObZc/USCn6ndycSaKmVzL41B8c0=) 4: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: GhiisK+xkE915yTtyPUFYsaGYRY3S2Kd3NQqsg2cf3U=) 5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: YU4YZ74T7xW8XI8cuLhtjNp6mdFgmcLPCumM3sCTd+o=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 4LrbAymfyErsiUGk8ioJ8VeDxysNk9CIt+uac7LIaSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16250 (0x3f7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Jul 18 14:20:30 2025 GMT Not After : Jul 25 14:20:30 2025 GMT Subject: CN=687a582e-32bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:35:27:57:04:1d:8f:34:32:6f:66:f5:a2: 4c:51:bd:88:71:03:05:7e:e3:a1:5a:24:0b:10:2d: 9a:e3:64:fc:7a:b4:00:60:fc:63:45:ca:5a:ef:ce: 07:56:8f:14:3b:e8:e4:4c:d4:75:4b:a4:68:0c:f9: 78:88:0e:f0:ff:93:a6:9f:42:53:30:7d:f1:7f:71: bb:26:e5:ad:d2:a2:4d:ab:97:8e:a3:65:74:3d:f9: 82:96:a7:e9:56:5a:59:5b:04:68:4d:c2:22:56:6f: ac:83:21:bb:67:b6:b1:a7:09:d1:fd:ed:92:db:f1: bf:68:25:5e:60:8f:35:7b:84:a7:82:a2:7e:30:26: ef:64:40:1a:b6:ee:38:93:2f:50:9d:2f:e7:cd:2e: 3f:74:76:d7:6f:0c:66:1b:d3:03:92:5b:a8:15:ea: 33:b5:f8:13:fa:72:76:92:6a:01:82:1a:4b:33:65: d1:a4:81:6b:c6:0b:eb:13:5c:00:40:ae:37:c3:33: fb:8d:6e:ef:a1:0a:a5:35:10:ec:81:a3:67:a5:2f: ba:34:0f:9d:48:7a:15:91:26:df:83:6d:9c:c6:a4: 9b:27:29:17:8d:ed:c4:7d:dc:ff:94:9f:48:a2:54: 85:af:91:fc:69:60:8d:73:e2:59:fe:fc:ed:23:3a: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:97:A3:E8:62:B6:B0:D1:AD:66:14:57:09:F0:B7:8F:82:28:8A:C1 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:74:b8:9b:77:ca:e5:bc:2f:77:ec:77:25:c0:66:0b:f0:37: 84:25:f6:e1:a8:0f:8c:e0:35:ab:e7:e5:71:d0:52:6a:e9:5f: 32:d5:75:c9:ac:f9:db:1a:b7:35:79:6c:a6:c1:31:bf:31:82: ff:8a:e1:78:c4:5a:4a:56:dd:cd:5b:59:5a:08:31:5a:97:f1: d5:b4:83:4c:b7:e1:58:f2:36:62:01:54:02:e9:89:61:24:90: 3b:a3:84:b0:82:f7:25:20:44:91:cf:5d:83:e7:5e:76:8d:3d: e3:05:f5:26:58:b4:c0:1f:db:5d:89:e2:17:4f:1c:49:63:d8: 50:dc:d7:22:47:09:a6:f7:40:54:f8:7e:e6:d0:d0:8d:ee:a3: 1b:18:fd:38:0b:31:c4:29:07:10:c7:c1:23:90:39:07:0f:7b: b3:33:cd:45:61:81:d2:57:63:b4:1f:8e:66:72:81:de:f9:df: 86:23:be:bc:a5:76:df:90:f8:75:4e:d4:89:64:73:c0:50:16: ee:41:93:ad:67:40:ca:cf:4a:af:82:07:01:bc:03:6a:f9:51: 34:39:7b:7d:8e:ca:74:06:25:4c:65:5d:66:ca:9e:a0:61:ab: 51:ca:50:eb:a9:4b:f7:58:57:4c:30:a6:c1:64:68:9c:8d:38: ac:49:9d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUwNzE4MTQyMDMwWhcNMjUwNzI1MTQyMDMwWjAYMRYwFAYD VQQDEw02ODdhNTgyZS0zMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3Y1J1cEHY80Mm9m9aJMUb2IcQMFfuOhWiQLEC2a42T8erQAYPxjRcpa784H Vo8UO+jkTNR1S6RoDPl4iA7w/5Omn0JTMH3xf3G7JuWt0qJNq5eOo2V0PfmClqfp VlpZWwRoTcIiVm+sgyG7Z7axpwnR/e2S2/G/aCVeYI81e4SngqJ+MCbvZEAatu44 ky9QnS/nzS4/dHbXbwxmG9MDkluoFeoztfgT+nJ2kmoBghpLM2XRpIFrxgvrE1wA QK43wzP7jW7voQqlNRDsgaNnpS+6NA+dSHoVkSbfg22cxqSbJykXje3Efdz/lJ9I olSFr5H8aWCNc+JZ/vztIzqw3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyXo+hi trDRrWYUVwnwt4+CKIrBMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtdLibd8rlvC937HclwGYL8DeEJfbhqA+M4DWr5+Vx0FJq6V8y1XXJ rPnbGrc1eWymwTG/MYL/iuF4xFpKVt3NW1laCDFal/HVtINMt+FY8jZiAVQC6Ylh JJA7o4SwgvclIESRz12D5152jT3jBfUmWLTAH9tdieIXTxxJY9hQ3NciRwmm90BU +H7m0NCN7qMbGP04CzHEKQcQx8EjkDkHD3uzM81FYYHSV2O0H45mcoHe+d+GI768 pXbfkPh1TtSJZHPAUBbuQZOtZ0DKz0qvggcBvANq+VE0OXt9jsp0BiVMZV1myp6g YatRylDrqUv3WFdMMKbBZGicjTisSZ2L -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:21 2025 by rpki-client