$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: 3ibvLkBrJNsN1abd/RzSL4lhl2q5h/9uP1kHSNhjwKM= Subject key identifier: 82:76:71:C7:AF:A8:DE:65:63:45:64:81:4F:24:7D:E9:C8:22:24:35 Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: BB Signing time: Sat 19 Jul 2025 06:06:51 +0000 Manifest this update: Sat 19 Jul 2025 06:06:50 +0000 Manifest next update: Sat 26 Jul 2025 06:06:50 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: Ewq+Nis6vR8VYrAd/UA1gANHVi9my7i3rlnVH9E3M/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Jul 19 06:06:50 2025 GMT Not After : Jul 26 06:06:50 2025 GMT Subject: CN=687b35fb-332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:ac:45:64:30:f6:2f:db:ee:71:97:ba:33: f7:03:e8:a2:cd:be:7f:0f:23:7c:3e:53:bc:f2:1c: b6:de:78:ef:87:8a:26:13:72:7f:55:68:a2:95:63: 0c:50:e5:4d:78:ed:08:9d:db:18:59:dc:b4:94:10: db:0d:a1:7b:6d:9e:09:f3:c6:bb:46:6b:a6:9f:0e: 96:eb:0b:0e:4f:8f:4b:38:82:c8:00:ba:e7:7d:d2: 22:d4:8d:22:ab:4d:c1:64:61:b4:59:a0:59:7f:34: c8:74:81:c4:9f:13:86:05:c2:29:cb:e4:31:a3:ac: 91:0b:f6:b7:3a:21:b6:b7:fb:3e:de:3a:df:1f:54: 37:c0:0b:ef:1b:80:3b:09:22:24:89:24:90:07:cf: 0e:67:45:a7:06:6e:4c:0d:ed:4f:b9:bc:ab:9c:01: 01:dc:1c:4e:df:5b:96:e8:05:b5:26:65:b2:2c:66: d7:6b:57:47:17:4d:85:8e:53:76:16:49:48:33:d2: 8f:b2:c7:b5:c6:c4:cc:6b:77:58:96:32:05:13:96: 25:5f:10:6f:3f:a5:30:b6:fc:aa:f5:97:3e:80:31: 52:33:3d:23:72:92:e0:3f:1f:17:a8:4b:7d:28:da: 8c:12:54:55:53:79:cc:aa:18:04:13:2e:8b:c5:56: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:76:71:C7:AF:A8:DE:65:63:45:64:81:4F:24:7D:E9:C8:22:24:35 X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5b:2a:10:5a:fa:d1:4c:78:28:c1:27:fb:8a:5e:14:0d:6d: 1c:91:70:80:5b:86:2d:01:e1:8e:b0:0b:36:bd:77:83:d0:f8: 19:53:cd:bf:3d:dd:f2:b2:9a:6f:87:60:e6:4f:ee:2b:cd:eb: a0:79:18:13:49:f5:74:d3:62:90:d1:1c:f6:62:14:05:ab:f3: 80:22:92:8a:12:6d:b4:91:ac:dd:08:1c:04:be:37:e2:28:5f: 08:a2:fc:0a:b5:f0:5f:7f:b1:76:2f:5d:ab:54:2a:76:45:53: fb:af:d0:e0:dc:c5:e9:48:48:14:f0:69:46:72:74:45:d1:62: f1:f0:e6:49:c2:5e:c6:a1:9f:59:c7:40:2d:5e:b2:a2:b6:02: 4b:1e:6e:7e:bd:15:66:c7:0f:9f:c6:df:4e:8d:c0:bb:52:c0: 4a:e0:ce:6a:ad:fb:c7:9c:84:37:30:b8:cc:45:2b:6b:fb:42: 0f:51:80:77:dd:c1:55:b8:c5:80:a4:c8:0e:01:5e:dd:a9:69: f3:90:1c:80:44:6d:c4:96:c5:15:95:97:c7:4a:27:58:9c:e6: 72:78:66:c1:50:98:9e:e5:fe:ae:ac:9e:5a:b3:bd:df:5c:6b: 41:cc:b8:34:52:84:58:9b:26:1a:7b:01:a8:11:ec:ac:b1:0d: d2:35:da:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjUwNzE5MDYwNjUwWhcNMjUwNzI2MDYwNjUwWjAYMRYwFAYD VQQDEw02ODdiMzVmYi0zMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYisRWQw9i/b7nGXujP3A+iizb5/DyN8PlO88hy23njvh4omE3J/VWiilWMM UOVNeO0IndsYWdy0lBDbDaF7bZ4J88a7Rmumnw6W6wsOT49LOILIALrnfdIi1I0i q03BZGG0WaBZfzTIdIHEnxOGBcIpy+Qxo6yRC/a3OiG2t/s+3jrfH1Q3wAvvG4A7 CSIkiSSQB88OZ0WnBm5MDe1PubyrnAEB3BxO31uW6AW1JmWyLGbXa1dHF02FjlN2 FklIM9KPsse1xsTMa3dYljIFE5YlXxBvP6Uwtvyq9Zc+gDFSMz0jcpLgPx8XqEt9 KNqMElRVU3nMqhgEEy6LxVbSgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ2ccev qN5lY0VkgU8kfenIIiQ1MB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkWyoQWvrRTHgowSf7il4UDW0ckXCAW4YtAeGOsAs2vXeD0PgZU82/ Pd3ysppvh2DmT+4rzeugeRgTSfV002KQ0Rz2YhQFq/OAIpKKEm20kazdCBwEvjfi KF8IovwKtfBff7F2L12rVCp2RVP7r9Dg3MXpSEgU8GlGcnRF0WLx8OZJwl7GoZ9Z x0AtXrKitgJLHm5+vRVmxw+fxt9OjcC7UsBK4M5qrfvHnIQ3MLjMRStr+0IPUYB3 3cFVuMWApMgOAV7dqWnzkByARG3ElsUVlZfHSidYnOZyeGbBUJie5f6urJ5as73f XGtBzLg0UoRYmyYaewGoEeyssQ3SNdoh -----END CERTIFICATE-----Generated at Mon Jul 21 06:24:34 2025 by rpki-client