$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: G60TDpCQumuRP2CTWc+Lu29pKUInmgEED9rcWIukoSY= Subject key identifier: D8:E2:84:20:38:EF:6A:51:CD:BC:45:DB:BD:FC:2E:C2:0C:E4:AA:CC Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 0229 Signing time: Sat 19 Jul 2025 02:22:47 +0000 Manifest this update: Sat 19 Jul 2025 02:22:46 +0000 Manifest next update: Sat 26 Jul 2025 02:22:46 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: nKPaSf/cXSGVAAcGJ/sDIZV2krFkAmbhQsM7Wy1omMM=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: TRC536qZcJYkhaiy2DyQacSqavhhgva90rSbfihiHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Jul 19 02:22:46 2025 GMT Not After : Jul 26 02:22:46 2025 GMT Subject: CN=687b0176-e437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:60:e8:40:aa:ef:e8:6f:e2:b2:36:cc:11: 40:38:59:bf:d6:a1:2d:ff:af:9a:96:5c:4c:cd:59: 95:8c:5c:61:ca:5b:ee:a8:cd:c4:d2:d3:44:ec:f2: f5:cb:d9:a8:b1:eb:9c:fb:ba:9d:0f:bf:96:2d:21: 96:2e:58:d4:c1:57:12:22:f2:74:d8:1b:97:fe:b9: b7:09:c9:0e:61:b2:b0:91:f1:cf:9e:f2:73:20:04: 3e:ed:95:6e:c9:d1:31:23:12:ed:01:ed:27:27:8f: 3f:88:5b:d7:f1:1d:cb:05:b3:75:41:64:05:8a:0a: 66:00:e5:21:bf:36:fe:f4:d5:64:f0:fd:29:c4:1c: b9:de:c3:6c:63:3c:cf:ae:e1:e9:64:a3:a3:61:50: 23:85:88:44:43:11:c6:bb:96:51:f4:37:b2:c3:c8: bb:07:cc:41:09:4b:d9:85:1e:1a:63:2e:4e:ed:a3: d7:91:49:58:e3:1b:f9:22:3b:b8:37:03:4f:38:27: a8:94:05:29:3e:ee:7f:f8:b9:f6:de:65:95:fd:3e: f4:40:18:23:8e:81:39:0a:55:57:48:f6:98:71:31: fc:81:03:51:09:f9:27:7d:31:4d:ec:8e:85:e0:f7: 8c:26:ab:c0:81:c5:c4:b4:57:30:dd:fa:25:c9:f3: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:84:20:38:EF:6A:51:CD:BC:45:DB:BD:FC:2E:C2:0C:E4:AA:CC X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:92:80:ca:1f:b4:fd:eb:7a:7c:f9:a5:9e:41:e8:4f:b6:be: 59:df:46:62:6c:bc:6f:aa:b5:f9:92:ae:25:c3:ff:2c:1a:75: d5:14:af:4f:57:f7:99:c6:64:75:72:f0:8d:c3:50:cd:63:df: c6:c7:0e:45:42:9c:d8:07:05:9c:b3:89:a5:77:20:ad:97:8f: 0e:75:f9:96:77:9a:9f:c0:15:ca:c1:2d:77:dc:b7:1b:22:58: fc:fd:ab:72:82:f3:4a:c3:cb:b6:38:ce:d9:e3:03:b6:58:4e: 13:50:5b:4c:1c:ab:4d:7f:e0:c6:75:46:38:7b:34:3f:f1:df: fe:4d:aa:96:c1:bf:9c:19:b1:c0:70:bb:4c:b3:03:0f:8f:b2: 76:4e:ee:95:4a:5a:47:ed:31:64:66:56:a9:2c:77:4b:ce:a8: 49:69:cf:09:9b:f1:fb:ae:ec:6a:5d:90:ae:ca:62:b5:b4:83: e6:b0:7f:25:ab:85:45:3e:9f:3d:ed:a6:0d:36:1d:18:f3:d7: 95:fc:18:fa:fd:16:da:08:2f:25:65:e6:a3:83:02:ea:cd:6f: ce:2e:bf:e5:6b:32:52:1a:54:88:2f:3d:1e:6f:56:fe:76:6e: f8:cc:c2:bd:46:46:88:0b:a2:f4:09:ec:01:7f:cc:1c:01:9e: 14:36:d2:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUwNzE5MDIyMjQ2WhcNMjUwNzI2MDIyMjQ2WjAYMRYwFAYD VQQDEw02ODdiMDE3Ni1lNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsitg6ECq7+hv4rI2zBFAOFm/1qEt/6+allxMzVmVjFxhylvuqM3E0tNE7PL1 y9moseuc+7qdD7+WLSGWLljUwVcSIvJ02BuX/rm3CckOYbKwkfHPnvJzIAQ+7ZVu ydExIxLtAe0nJ48/iFvX8R3LBbN1QWQFigpmAOUhvzb+9NVk8P0pxBy53sNsYzzP ruHpZKOjYVAjhYhEQxHGu5ZR9Deyw8i7B8xBCUvZhR4aYy5O7aPXkUlY4xv5Iju4 NwNPOCeolAUpPu5/+Ln23mWV/T70QBgjjoE5ClVXSPaYcTH8gQNRCfknfTFN7I6F 4PeMJqvAgcXEtFcw3folyfPxlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjihCA4 72pRzbxF2738LsIM5KrMMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlkoDKH7T963p8+aWeQehPtr5Z30ZibLxvqrX5kq4lw/8sGnXVFK9P V/eZxmR1cvCNw1DNY9/Gxw5FQpzYBwWcs4mldyCtl48OdfmWd5qfwBXKwS133Lcb Ilj8/atygvNKw8u2OM7Z4wO2WE4TUFtMHKtNf+DGdUY4ezQ/8d/+TaqWwb+cGbHA cLtMswMPj7J2Tu6VSlpH7TFkZlapLHdLzqhJac8Jm/H7ruxqXZCuymK1tIPmsH8l q4VFPp897aYNNh0Y89eV/Bj6/RbaCC8lZeajgwLqzW/OLr/lazJSGlSILz0eb1b+ dm74zMK9RkaIC6L0CewBf8wcAZ4UNtIB -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:25 2025 by rpki-client