$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: ie+pAQYriKBEizyCxP66GIMLFdk9uTHMdK6RKaWX4Ms= Subject key identifier: 69:A7:17:3D:62:01:DD:C3:5D:F0:95:49:A7:EA:81:01:46:71:CF:5F Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 0205 Signing time: Mon 21 Jul 2025 02:20:55 +0000 Manifest this update: Mon 21 Jul 2025 02:20:55 +0000 Manifest next update: Mon 28 Jul 2025 02:20:55 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: HNffITd2LVhYau0E5139+K3nz9ChW1R8ap3CR85DN/Y=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: M5APD5jLzCTS+EqF5L/kaW7FUXSVgVVwOlYb/pQ9rq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Jul 21 02:20:55 2025 GMT Not After : Jul 28 02:20:55 2025 GMT Subject: CN=687da407-44bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:79:43:86:46:84:6d:eb:59:78:08:8b:94: 46:b6:7d:6b:69:74:f4:56:22:a7:4d:dd:60:26:13: 27:46:f4:d6:4d:1e:7b:17:ae:ab:4a:09:d0:49:c3: b1:b2:99:f6:de:ee:cb:70:4b:fc:a7:67:58:b0:e8: 4e:d4:dd:17:e6:66:e6:80:39:67:c6:ff:aa:1f:76: 1c:84:bc:a5:1e:54:2f:fe:90:21:20:2a:a4:2e:4f: 90:b3:07:97:1d:43:37:82:6f:7d:58:ec:7c:74:d5: e2:ca:95:32:a3:fb:3a:99:e8:7c:d2:f0:fc:dc:00: 89:6a:f2:f1:63:d9:13:6f:a2:3a:ab:da:74:70:a0: 80:f4:f5:fc:08:e0:c9:b3:67:96:b4:a9:44:ee:d4: 96:ef:56:cc:34:e9:59:3d:df:9c:b9:f4:6c:44:7d: 0b:4f:32:29:3b:39:ef:15:94:8f:37:b6:7f:0d:21: 78:27:75:dd:6c:21:47:41:69:3c:c4:ae:9c:70:7d: 0a:36:91:dd:2e:86:ce:5e:10:c7:69:7f:35:bf:32: 26:b6:46:47:e5:84:81:d3:b3:db:08:ad:62:32:08: 79:19:ce:8a:86:f0:75:68:08:5d:a9:61:5f:72:de: d9:05:2a:b5:38:1e:1e:26:e0:65:15:e6:83:a8:71: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A7:17:3D:62:01:DD:C3:5D:F0:95:49:A7:EA:81:01:46:71:CF:5F X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:00:5a:56:f7:98:44:6a:8a:ec:d3:9c:cd:9a:a3:83:81:8f: e4:99:64:7a:0d:28:40:8b:80:24:7c:f8:7b:a4:db:40:46:10: 74:06:ff:67:8b:9e:e2:6c:78:96:bd:c4:bc:93:58:05:24:a4: 44:4b:ea:f9:09:f9:87:d4:33:b1:05:66:92:5a:fd:ac:0b:1d: 8c:51:cb:19:6d:1b:26:f6:d7:38:9c:f9:7e:5b:bd:3f:8c:71: 06:a4:b8:8b:2f:43:b4:57:de:6a:e7:f8:c0:49:71:8f:c2:09: 49:4f:2e:32:05:95:10:86:b6:40:8c:eb:a8:c1:b6:cc:09:bd: 92:3d:a4:56:01:61:d0:56:ec:3d:01:cb:86:7f:2c:a6:48:82: f4:ed:51:26:4f:c1:35:d5:14:26:bd:9d:e5:e0:a7:cd:dd:d3: 33:59:cf:88:93:4b:a1:5a:d9:27:af:c7:09:6f:d5:38:34:b9: 47:5b:d0:9a:7d:3a:05:aa:3d:42:19:68:fa:f6:10:18:bc:d4: 52:71:25:dd:9a:4d:ae:48:89:e3:d2:ae:3e:c9:c7:fe:17:70: 3b:c3:a6:20:88:1f:99:f6:71:67:69:0d:8e:48:24:bc:c9:9f: 65:d0:62:d0:fb:5c:5b:05:73:df:fe:8f:02:64:0e:12:5b:13: 8e:39:8b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUwNzIxMDIyMDU1WhcNMjUwNzI4MDIyMDU1WjAYMRYwFAYD VQQDEw02ODdkYTQwNy00NGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd95Q4ZGhG3rWXgIi5RGtn1raXT0ViKnTd1gJhMnRvTWTR57F66rSgnQScOx spn23u7LcEv8p2dYsOhO1N0X5mbmgDlnxv+qH3YchLylHlQv/pAhICqkLk+QsweX HUM3gm99WOx8dNXiypUyo/s6meh80vD83ACJavLxY9kTb6I6q9p0cKCA9PX8CODJ s2eWtKlE7tSW71bMNOlZPd+cufRsRH0LTzIpOznvFZSPN7Z/DSF4J3XdbCFHQWk8 xK6ccH0KNpHdLobOXhDHaX81vzImtkZH5YSB07PbCK1iMgh5Gc6KhvB1aAhdqWFf ct7ZBSq1OB4eJuBlFeaDqHEHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmnFz1i Ad3DXfCVSafqgQFGcc9fMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaAFpW95hEaors05zNmqODgY/kmWR6DShAi4AkfPh7pNtARhB0Bv9n i57ibHiWvcS8k1gFJKRES+r5CfmH1DOxBWaSWv2sCx2MUcsZbRsm9tc4nPl+W70/ jHEGpLiLL0O0V95q5/jASXGPwglJTy4yBZUQhrZAjOuowbbMCb2SPaRWAWHQVuw9 AcuGfyymSIL07VEmT8E11RQmvZ3l4KfN3dMzWc+Ik0uhWtknr8cJb9U4NLlHW9Ca fToFqj1CGWj69hAYvNRScSXdmk2uSInj0q4+ycf+F3A7w6YgiB+Z9nFnaQ2OSCS8 yZ9l0GLQ+1xbBXPf/o8CZA4SWxOOOYth -----END CERTIFICATE-----Generated at Mon Jul 21 07:00:28 2025 by rpki-client