$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: spbTZ7e1osdIJ6DhglOCnYZMEXGfr9xBF07OMnZ3GDs= Subject key identifier: 6B:8D:DF:A8:CA:74:C2:C8:C0:F7:89:AE:3F:80:80:3E:44:81:DF:0A Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 3F Signing time: Sat 19 Jul 2025 07:55:42 +0000 Manifest this update: Sat 19 Jul 2025 07:55:42 +0000 Manifest next update: Sat 26 Jul 2025 07:55:42 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: Xj3NE5535KfEwDsH6GWzB4q5bhoeJoRE9qAvt8Xdbn0=) 2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=) 3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=) 4: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=) 5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=) 6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=) 7: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=) 8: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=) 9: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=) 10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: Jul 19 07:55:42 2025 GMT Not After : Jul 26 07:55:42 2025 GMT Subject: CN=687b4f7e-208e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:af:5f:05:16:a1:0c:16:53:f8:bf:b0:93: 76:6b:f5:dc:ec:ba:e1:27:c2:a7:b7:e5:a0:10:04: fe:4f:28:75:b8:88:be:fd:50:a3:98:17:a1:a1:10: f9:49:2e:a0:2f:04:1c:1e:ac:72:f1:80:63:57:ee: 1c:bd:d8:ce:87:e8:59:33:4b:a7:55:8a:fd:45:7e: 50:5c:9e:20:c5:2d:d7:98:e5:1e:fe:12:cf:98:58: ed:e7:ef:e6:89:ce:cf:93:c8:88:f3:10:af:18:c1: 08:d1:c2:c0:15:bc:87:ac:5e:1d:db:53:ff:d1:c7: 06:50:61:e2:00:02:80:46:94:a5:eb:89:03:77:51: 30:2c:5e:1a:2d:14:8e:f3:c3:a9:4d:7a:05:19:a6: 62:4c:6f:42:2a:1f:6c:a2:49:d0:66:5e:3e:43:0c: a3:c1:2c:3e:ad:8e:8f:e7:46:81:90:e0:8e:ad:a1: 3a:ff:d4:c6:88:a4:82:5a:f3:16:b6:1d:e5:5d:75: 45:87:34:1c:01:eb:f2:11:9d:63:2a:bd:1b:64:b3: d3:70:50:a2:fe:b0:95:2a:b0:8f:fc:6a:a8:dd:ba: fc:d5:3c:de:ef:9e:95:67:b4:1f:7e:0b:f9:e8:1d: b5:8b:19:a9:67:60:7a:0d:45:e2:e6:99:61:f9:e0: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:DF:A8:CA:74:C2:C8:C0:F7:89:AE:3F:80:80:3E:44:81:DF:0A X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7d:ef:22:fc:dc:ba:01:b9:5b:26:cf:d1:bf:5e:72:4b:7a: 50:5f:f1:db:f8:b4:a7:f2:57:43:9a:aa:5f:ac:99:06:c4:55: ba:1f:9b:c1:eb:b6:e4:a2:cb:ae:a1:41:eb:a1:e0:5a:df:07: f8:e1:6b:c2:f9:0a:f8:c3:4a:c2:dd:df:39:4f:34:e8:98:a9: f1:e9:9a:ba:31:a7:cf:f0:13:1c:56:a4:47:87:ed:a2:eb:3a: 83:d5:e2:55:de:87:25:2e:c6:16:a9:05:9f:50:db:f3:60:32: 64:03:ce:68:8b:db:a0:3b:8c:8d:e1:8d:fb:6b:35:2b:ce:96: 32:6b:a6:be:e5:93:c8:79:a8:19:af:d9:e7:4b:f8:c4:97:cd: ad:3e:e0:c3:64:e5:0b:53:6a:46:b7:8f:85:63:dc:55:53:d0: ca:3a:cb:b1:7a:32:a4:38:cc:a9:b8:22:24:04:aa:56:e3:6a: 60:88:d5:20:b7:46:57:91:b2:8c:a4:80:d6:72:2f:fb:20:a8: b3:75:cb:20:58:58:5c:b8:70:bd:df:ca:3e:08:89:60:84:c4: db:c4:12:e4:01:5c:6c:ae:a6:84:88:0e:10:e0:0e:cb:ad:f0: ed:c7:3e:93:ae:f6:45:4a:21:2b:8d:8a:c4:98:53:8d:60:12: 66:bb:db:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzRjExMC8GA1UEBRMoMTg5NjdEQ0RCNzI0QTg0QTcxNzExRTY3OEFBQjFEMkU3 MjIxNUQ2QzAeFw0yNTA3MTkwNzU1NDJaFw0yNTA3MjYwNzU1NDJaMBgxFjAUBgNV BAMTDTY4N2I0ZjdlLTIwOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmgK9fBRahDBZT+L+wk3Zr9dzsuuEnwqe35aAQBP5PKHW4iL79UKOYF6GhEPlJ LqAvBBwerHLxgGNX7hy92M6H6FkzS6dViv1FflBcniDFLdeY5R7+Es+YWO3n7+aJ zs+TyIjzEK8YwQjRwsAVvIesXh3bU//RxwZQYeIAAoBGlKXriQN3UTAsXhotFI7z w6lNegUZpmJMb0IqH2yiSdBmXj5DDKPBLD6tjo/nRoGQ4I6toTr/1MaIpIJa8xa2 HeVddUWHNBwB6/IRnWMqvRtks9NwUKL+sJUqsI/8aqjduvzVPN7vnpVntB9+C/no HbWLGalnYHoNReLmmWH54GhPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa43fqMp0 wsjA94muP4CAPkSB3wowHwYDVR0jBBgwFoAUGJZ9zbckqEpxcR5niqsdLnIhXWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDNGL0Q2ODRGQzJFMUE4 QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0paOXpiY2txRXB4Y1I1bmlxc2RMbkloWFd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDNGL0Q2ODRGQzJFMUE4QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVw eGNSNW5pcXNkTG5JaFhXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZ97yL83LoBuVsmz9G/XnJLelBf8dv4tKfyV0Oaql+smQbEVbofm8Hr tuSiy66hQeuh4FrfB/jha8L5CvjDSsLd3zlPNOiYqfHpmroxp8/wExxWpEeH7aLr OoPV4lXehyUuxhapBZ9Q2/NgMmQDzmiL26A7jI3hjftrNSvOljJrpr7lk8h5qBmv 2edL+MSXza0+4MNk5QtTaka3j4Vj3FVT0Mo6y7F6MqQ4zKm4IiQEqlbjamCI1SC3 RleRsoykgNZyL/sgqLN1yyBYWFy4cL3fyj4IiWCExNvEEuQBXGyupoSIDhDgDsut 8O3HPpOu9kVKISuNisSYU41gEma723Y= -----END CERTIFICATE-----Generated at Sun Jul 20 07:57:53 2025 by rpki-client