$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft File: gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft (raw, json) Hash identifier: m7/fM5d+2tZIG5vF8wPqnxXrcHTP15tetH5lILtKf4k= Subject key identifier: BB:B1:FC:71:C3:7D:71:EA:9B:27:79:92:44:AC:6E:D5:C7:FC:19:4B Authority key identifier: 81:DC:1D:EE:07:08:33:A7:E7:53:97:20:87:5A:17:60:7E:E1:26:CF Certificate issuer: /CN=A91C9F4F/serialNumber=81DC1DEE070833A7E7539720875A17607EE126CF Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft Manifest number: 017D Signing time: Mon 21 Jul 2025 03:42:34 +0000 Manifest this update: Mon 21 Jul 2025 03:42:33 +0000 Manifest next update: Mon 28 Jul 2025 03:42:33 +0000 Files and hashes: 1: gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl (hash: cvu2VPdHbfuI09tKCDLjE7CxDVwJxEcGS4MnGW/+CpQ=) 2: 81E588C21B1F11EE8F6BA876C4F9AE02.roa (hash: YbSnSO8idK0DmEg6LCnsVKLIIYfjTfvJo7EtnNr+cS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9F4F, serialNumber=81DC1DEE070833A7E7539720875A17607EE126CF Validity Not Before: Jul 21 03:42:33 2025 GMT Not After : Jul 28 03:42:33 2025 GMT Subject: CN=687db72a-831c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:4f:92:87:df:68:8e:71:11:32:12:cf:b2: dc:64:72:d2:ca:e1:32:b3:c6:14:6b:7b:ad:db:14: af:68:ad:df:35:9a:03:02:f3:6d:e2:4f:b0:7a:21: dd:65:53:dd:66:e5:90:48:89:bf:18:11:17:56:5b: 3a:db:fc:53:19:54:38:7c:d7:76:d5:7a:11:bb:4f: 55:01:f6:1a:60:ff:9d:9e:40:9b:3d:c6:9c:33:59: 05:52:60:c9:7f:a0:ed:65:a4:fb:ea:fc:d2:14:46: 37:55:45:fb:e9:6d:fe:a0:7d:66:58:3c:55:ba:f6: ca:36:af:b2:3f:1c:f0:ac:9c:a8:0d:57:29:a4:1a: bd:0c:ce:9f:95:87:35:c6:0e:fb:88:95:61:f8:ae: be:3d:85:c8:e6:48:f9:83:92:f6:58:6b:a9:19:3b: 86:b1:2d:55:a9:87:da:e9:59:27:77:6e:13:26:f7: ad:b6:92:cc:53:01:fb:7a:97:eb:7e:b2:2c:df:32: 93:bf:8d:e9:c7:79:70:0c:b1:7a:48:c5:0c:e6:6d: 6d:c6:82:b0:0e:13:8c:59:3b:26:61:77:e7:74:c4: 7e:74:74:69:42:ce:14:37:66:bd:e0:06:c1:a5:09: d1:3c:18:86:2e:1d:91:ff:2d:07:7a:a4:64:df:37: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B1:FC:71:C3:7D:71:EA:9B:27:79:92:44:AC:6E:D5:C7:FC:19:4B X509v3 Authority Key Identifier: keyid:81:DC:1D:EE:07:08:33:A7:E7:53:97:20:87:5A:17:60:7E:E1:26:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:77:75:52:12:03:52:e4:16:3f:c4:ea:fa:ee:91:b7:1c:02: 3b:6e:ff:d6:1a:15:e9:c7:eb:c8:60:07:89:2e:ed:b5:1a:ff: 53:74:8d:a2:05:4b:33:11:9d:f7:90:39:c4:d5:56:de:e0:2d: 20:46:29:83:99:68:31:11:99:e1:38:6f:78:3d:1d:ef:dc:66: bd:35:ac:14:74:d9:6e:2f:3b:b7:ef:86:58:df:1b:19:64:ba: 84:81:55:7e:08:58:a1:93:50:89:3e:35:d1:dc:8a:45:db:71: 93:f0:6b:8d:ec:c2:64:dd:16:b2:81:2f:ea:49:62:13:13:44: 48:a9:a1:50:3b:0b:b8:fd:f9:26:42:90:13:69:ba:6f:02:db: 90:fb:50:8f:0b:db:86:dc:47:d4:1a:f9:19:ba:c2:70:cc:93: 84:d5:f5:a1:2b:ac:35:f3:2d:04:68:28:e2:bd:08:67:d0:9e: 3f:aa:27:0f:ef:ca:ef:7f:22:30:cb:12:7e:10:1c:f0:0b:b3: fc:9e:41:89:61:f5:e8:73:db:75:a5:de:d4:0d:e5:b1:aa:54: 8b:72:72:2a:fa:a4:cc:f4:ab:29:c0:0a:91:b4:f2:60:44:0a: 32:b4:21:9b:14:33:ec:45:27:df:3b:ad:c1:28:b5:5a:2a:42: bd:34:17:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlGNEYxMTAvBgNVBAUTKDgxREMxREVFMDcwODMzQTdFNzUzOTcyMDg3NUExNzYw N0VFMTI2Q0YwHhcNMjUwNzIxMDM0MjMzWhcNMjUwNzI4MDM0MjMzWjAYMRYwFAYD VQQDEw02ODdkYjcyYS04MzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLRPkoffaI5xETISz7LcZHLSyuEys8YUa3ut2xSvaK3fNZoDAvNt4k+weiHd ZVPdZuWQSIm/GBEXVls62/xTGVQ4fNd21XoRu09VAfYaYP+dnkCbPcacM1kFUmDJ f6DtZaT76vzSFEY3VUX76W3+oH1mWDxVuvbKNq+yPxzwrJyoDVcppBq9DM6flYc1 xg77iJVh+K6+PYXI5kj5g5L2WGupGTuGsS1VqYfa6Vknd24TJvettpLMUwH7epfr frIs3zKTv43px3lwDLF6SMUM5m1txoKwDhOMWTsmYXfndMR+dHRpQs4UN2a94AbB pQnRPBiGLh2R/y0HeqRk3zeseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLux/HHD fXHqmyd5kkSsbtXH/BlLMB8GA1UdIwQYMBaAFIHcHe4HCDOn51OXIIdaF2B+4SbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUY0Ri82RjBEMDUxMDFC MUQxMUVFODdEMjg5NzZDNEY5QUUwMi9nZHdkN2djSU02Zm5VNWNnaDFvWFlIN2hK czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dkd2Q3Z2NJTTZmblU1Y2doMW9YWUg3aEpzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUY0Ri82RjBEMDUxMDFCMUQxMUVFODdEMjg5NzZDNEY5QUUwMi9nZHdkN2djSU02 Zm5VNWNnaDFvWFlIN2hKczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCd3VSEgNS5BY/xOr67pG3HAI7bv/WGhXpx+vIYAeJLu21Gv9TdI2i BUszEZ33kDnE1Vbe4C0gRimDmWgxEZnhOG94PR3v3Ga9NawUdNluLzu374ZY3xsZ ZLqEgVV+CFihk1CJPjXR3IpF23GT8GuN7MJk3RaygS/qSWITE0RIqaFQOwu4/fkm QpATabpvAtuQ+1CPC9uG3EfUGvkZusJwzJOE1fWhK6w18y0EaCjivQhn0J4/qicP 78rvfyIwyxJ+EBzwC7P8nkGJYfXoc9t1pd7UDeWxqlSLcnIq+qTM9KspwAqRtPJg RAoytCGbFDPsRSffO63BKLVaKkK9NBdQ -----END CERTIFICATE-----Generated at Mon Jul 21 07:06:54 2025 by rpki-client