$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json) Hash identifier: D5t2qhAKFnjdBxk6rVBuqguW5MzJ4eb9OL5yrh2JfjA= Subject key identifier: 21:5A:C8:9E:12:37:05:2A:E8:68:D8:61:CA:50:8C:D4:06:28:6E:F2 Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft Manifest number: 0455 Signing time: Mon 21 Jul 2025 00:44:47 +0000 Manifest this update: Mon 21 Jul 2025 00:44:47 +0000 Manifest next update: Mon 28 Jul 2025 00:44:47 +0000 Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: ysU6G0eDCmk+XF6MHrUX2WxnKa6cY8VepjSaNAMFZdM=) 2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: O1MkwGdKDfVHdsOhHQrlU/aFTqc21EnEwMBW12Asebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Validity Not Before: Jul 21 00:44:47 2025 GMT Not After : Jul 28 00:44:47 2025 GMT Subject: CN=687d8d7f-052f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:b0:a1:fb:16:b3:05:fd:47:86:4d:09:ea: d7:e6:8a:27:8d:af:ff:35:e9:32:67:10:35:fa:92: 73:fd:a5:60:8e:c8:64:de:0a:19:16:8f:20:4f:ba: e7:c3:45:76:bd:e7:ef:ae:5c:a2:e7:c3:61:b0:bc: 16:4f:4c:25:0a:ae:d1:c8:c3:64:94:46:59:6b:71: 4a:56:d7:76:98:a8:ed:f1:6f:02:6e:0c:91:7c:7f: 50:f5:09:08:ac:28:63:d3:ad:a1:c3:63:d1:55:3c: 9b:7e:51:ad:ad:3a:18:82:72:b8:9f:d3:80:97:6c: 9e:2b:27:56:0b:b3:58:44:97:ce:28:af:e8:f2:7d: 7d:13:19:2c:d0:19:56:9b:2b:db:cc:a3:44:fb:a1: 67:10:05:8f:58:11:cb:9d:37:03:4b:04:43:28:7d: 0e:f2:fa:28:b9:a3:e9:3f:e2:4f:60:2b:17:65:f6: 68:d7:f3:4c:b3:5c:7d:d5:ef:a6:e9:ba:e0:cb:51: 1a:c2:dd:b3:d0:67:a7:16:4b:e5:06:5e:1d:35:0f: 1c:6e:58:98:03:6c:d7:d9:5c:84:f5:53:9e:91:84: c1:b7:73:16:f7:78:b1:b6:70:d9:35:69:6b:b2:6a: 80:1e:48:b5:c7:36:9a:b1:80:6d:b2:9c:fb:ef:22: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:C8:9E:12:37:05:2A:E8:68:D8:61:CA:50:8C:D4:06:28:6E:F2 X509v3 Authority Key Identifier: keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a5:64:2a:92:13:f5:e0:14:03:4b:b4:90:17:65:b6:c8:56: 4b:32:bf:b8:69:c7:59:0c:41:e4:fb:2b:5d:74:2c:78:d2:64: cf:3c:0c:ac:b8:7a:f2:66:1c:25:cf:4e:4a:9f:5f:b9:c6:0f: 7f:33:2f:01:bf:b9:8e:62:c9:08:11:6d:ff:a8:db:84:29:a1: 39:cd:52:56:d0:7a:b1:25:b0:c1:6d:ad:1d:fe:e1:da:91:a4: 81:8b:0c:e8:cb:83:1d:05:92:77:8a:bd:fd:23:c1:b4:0f:62: 85:30:f9:34:e9:75:d4:f3:6a:ed:2f:b5:3e:57:1a:de:8c:15: 4b:9a:53:62:fd:06:7c:ba:1c:e2:da:3a:51:20:32:33:76:92: 90:c8:e7:dc:f7:36:fc:30:3b:14:77:30:4e:51:cd:19:9b:fc: 62:bf:a3:0d:d7:51:55:1b:67:ad:1c:6f:4b:c0:2d:f0:39:34: f4:34:b9:00:dd:f0:3b:69:5c:a7:ce:5e:62:1e:63:15:f1:ca: d7:16:18:1c:28:06:41:b4:d5:e7:88:57:a8:d0:a1:f4:b2:2f: 5e:8a:5b:71:79:29:ce:0c:f0:38:f1:47:6a:ed:3f:84:8b:77: 10:4e:54:b9:5f:d7:a5:cb:49:7e:62:a9:bd:7f:c0:04:1d:e3: d0:2f:46:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUE4RDExMC8GA1UEBRMoODJEODE4ODYxREQ0QTcwRjc3MDhEMjA1RTRCODlFODUx NENBMUY2QzAeFw0yNTA3MjEwMDQ0NDdaFw0yNTA3MjgwMDQ0NDdaMBgxFjAUBgNV BAMTDTY4N2Q4ZDdmLTA1MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqErCh+xazBf1Hhk0J6tfmiieNr/816TJnEDX6knP9pWCOyGTeChkWjyBPuufD RXa95++uXKLnw2GwvBZPTCUKrtHIw2SURllrcUpW13aYqO3xbwJuDJF8f1D1CQis KGPTraHDY9FVPJt+Ua2tOhiCcrif04CXbJ4rJ1YLs1hEl84or+jyfX0TGSzQGVab K9vMo0T7oWcQBY9YEcudNwNLBEMofQ7y+ii5o+k/4k9gKxdl9mjX80yzXH3V76bp uuDLURrC3bPQZ6cWS+UGXh01DxxuWJgDbNfZXIT1U56RhMG3cxb3eLG2cNk1aWuy aoAeSLXHNpqxgG2ynPvvIiL9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIVrInhI3 BSroaNhhylCM1AYobvIwHwYDVR0jBBgwFoAUgtgYhh3Upw93CNIF5LiehRTKH2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QThELzMyRjFGNEMyODNF OTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3RnWWhoM1VwdzkzQ05JRjVMaWVoUlRLSDJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5 M0NOSUY1TGllaFJUS0gydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABelZCqSE/XgFANLtJAXZbbIVksyv7hpx1kMQeT7K110LHjSZM88DKy4 evJmHCXPTkqfX7nGD38zLwG/uY5iyQgRbf+o24QpoTnNUlbQerElsMFtrR3+4dqR pIGLDOjLgx0FkneKvf0jwbQPYoUw+TTpddTzau0vtT5XGt6MFUuaU2L9Bny6HOLa OlEgMjN2kpDI59z3NvwwOxR3ME5RzRmb/GK/ow3XUVUbZ60cb0vALfA5NPQ0uQDd 8DtpXKfOXmIeYxXxytcWGBwoBkG01eeIV6jQofSyL16KW3F5Kc4M8DjxR2rtP4SL dxBOVLlf16XLSX5iqb1/wAQd49AvRjg= -----END CERTIFICATE-----Generated at Mon Jul 21 05:47:03 2025 by rpki-client