$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: ftvngeb9Uq+vhxq36IYxHtza5HLwpucNpbTf+z65MXM= Subject key identifier: E7:3F:1F:E1:21:DE:09:CA:4F:F4:25:17:CF:39:0A:A0:81:5C:CC:E3 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 22F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 22B5 Signing time: Fri 18 Jul 2025 15:57:51 +0000 Manifest this update: Fri 18 Jul 2025 15:57:51 +0000 Manifest next update: Fri 25 Jul 2025 15:57:51 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: KWnUFRu5LvfnrKQXQrj4a90pMkIY1db1HcHR70JJnxQ=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: 2SAdCKQcIWqABPUcECk5L/zG6WToDQOSztNZtA6yviw=) 3: A163C5C869A111ECA4837D28C4F9AE02.roa (hash: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8=) 4: E57A64AA165C11EABB13924AC4F9AE02.roa (hash: Kp1L9OUEsepRZk0KKmtB6S8OnLO2gE492T0DeYXHR/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8951 (0x22f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Jul 18 15:57:51 2025 GMT Not After : Jul 25 15:57:51 2025 GMT Subject: CN=687a6eff-f9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:ad:5e:de:6e:65:38:56:78:19:10:6f:dd: 71:1f:b1:df:21:95:8c:73:d9:53:9e:84:62:7d:56: 5e:54:9a:5c:dc:d7:e0:c4:d4:13:46:df:ce:71:c7: d2:eb:7e:cd:28:af:89:a2:e2:1b:cf:0b:a1:f6:28: fc:71:2a:73:9d:bd:48:19:b3:aa:b7:bd:eb:17:7f: 4c:4a:71:ae:8b:ed:e9:1d:06:72:e0:28:b3:e9:dc: 75:7c:76:c0:11:aa:21:90:aa:17:f6:49:69:e8:95: 33:e5:95:d4:fc:ff:b9:48:8f:1d:1c:4e:a6:6a:d7: 10:0b:61:bf:9e:16:8b:d9:ee:b9:d4:8f:a9:2c:51: e1:cc:88:ba:7c:82:4a:76:8d:b6:c6:d6:20:13:20: 5f:94:fc:2f:a7:f8:07:34:a9:6a:4e:81:d3:9a:91: 0c:bb:a1:a6:b9:d5:7d:c9:e8:be:26:74:c6:37:d2: d7:fe:45:f1:51:56:2b:7c:e2:35:f1:a0:6d:fe:03: 96:ab:21:65:12:1b:4b:c2:44:32:ea:e5:f6:75:58: ec:d9:a9:e8:e0:06:4e:b7:9e:20:6e:61:42:0d:91: 26:5f:90:05:4f:81:02:b2:c7:69:25:df:97:e8:75: 6f:19:f8:af:53:54:df:24:5b:20:b5:5d:d5:18:a4: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:1F:E1:21:DE:09:CA:4F:F4:25:17:CF:39:0A:A0:81:5C:CC:E3 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d4:96:2f:88:ff:b1:12:6d:3e:b8:6c:5d:83:cc:31:85:81: d2:61:86:17:65:5d:5d:51:07:9e:1e:a4:a6:ac:ae:eb:d8:ef: 7f:87:46:c6:a1:80:87:fd:a0:17:0a:3f:e8:b9:a6:ec:d9:77: 19:d3:c1:57:4d:db:74:ed:6c:f6:26:44:1e:d8:e1:8c:6f:b9: 8c:c3:55:dc:d3:52:86:4e:8f:1b:96:bd:93:6f:47:4c:f8:f9: 77:be:37:b5:39:1f:41:3b:79:47:f0:4a:63:02:a9:b7:49:02: 21:7f:6a:3c:1d:f1:d1:95:a3:1b:54:7a:72:00:28:97:3b:63: 48:e0:06:10:ee:16:63:e6:de:ff:5c:2b:d5:de:98:ef:07:20: cd:b2:b3:d4:6c:08:dd:fa:e1:e9:84:08:e3:56:3a:94:8f:b3: 2a:51:49:b1:30:f4:0c:f7:0d:63:dc:6f:66:57:c6:59:bb:9f: 5b:92:58:ef:df:9e:60:d7:0c:01:c9:a9:f2:43:b7:c6:c3:4f: 9d:a8:10:b0:87:69:e4:13:a0:9e:da:8b:a5:17:c6:22:45:3c: 8d:11:3f:75:5c:91:a3:d7:50:11:23:00:9d:3c:b8:09:58:d6: 2e:3d:54:28:64:d9:af:27:7c:7b:b2:2a:b1:ee:33:a2:d5:a5: 6f:db:b3:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUwNzE4MTU1NzUxWhcNMjUwNzI1MTU1NzUxWjAYMRYwFAYD VQQDEw02ODdhNmVmZi1mOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JytXt5uZThWeBkQb91xH7HfIZWMc9lTnoRifVZeVJpc3NfgxNQTRt/OccfS 637NKK+JouIbzwuh9ij8cSpznb1IGbOqt73rF39MSnGui+3pHQZy4Ciz6dx1fHbA EaohkKoX9klp6JUz5ZXU/P+5SI8dHE6matcQC2G/nhaL2e651I+pLFHhzIi6fIJK do22xtYgEyBflPwvp/gHNKlqToHTmpEMu6GmudV9yei+JnTGN9LX/kXxUVYrfOI1 8aBt/gOWqyFlEhtLwkQy6uX2dVjs2ano4AZOt54gbmFCDZEmX5AFT4ECssdpJd+X 6HVvGfivU1TfJFsgtV3VGKRyEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc/H+Eh 3gnKT/QlF885CqCBXMzjMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW1JYviP+xEm0+uGxdg8wxhYHSYYYXZV1dUQeeHqSmrK7r2O9/h0bG oYCH/aAXCj/ouabs2XcZ08FXTdt07Wz2JkQe2OGMb7mMw1Xc01KGTo8blr2Tb0dM +Pl3vje1OR9BO3lH8EpjAqm3SQIhf2o8HfHRlaMbVHpyACiXO2NI4AYQ7hZj5t7/ XCvV3pjvByDNsrPUbAjd+uHphAjjVjqUj7MqUUmxMPQM9w1j3G9mV8ZZu59bkljv 355g1wwByanyQ7fGw0+dqBCwh2nkE6Ce2oulF8YiRTyNET91XJGj11ARIwCdPLgJ WNYuPVQoZNmvJ3x7siqx7jOi1aVv27NV -----END CERTIFICATE-----Generated at Sun Jul 20 07:45:06 2025 by rpki-client