$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: tWX1/ypxxvCurEvqwJI5dp+hnoK4HfSK4CAs32Nw8ak= Subject key identifier: F9:2F:D5:7F:7F:93:F9:1B:98:84:13:54:50:91:4E:A4:9D:8D:53:A8 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A1B Signing time: Thu 24 Jul 2025 16:28:45 +0000 Manifest this update: Thu 24 Jul 2025 16:28:44 +0000 Manifest next update: Thu 31 Jul 2025 16:28:44 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: 3h2wvMl1Jdb8dXGht7BW22ayfkuFn8HAbtryUhhHn/w=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: zSKXyhNbfFoYNCqEVuHbtopb0K0RjSYVs5+6fMK45yM=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: TNm1D3H84N7whf8ekQ/vCF3rhsZGPVYvMkkPOGLONIM=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 8/w05fSu74dL03k0q9KVl8WrlCWTBNHjvuwvJNrIN8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 16:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6717 (0x1a3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Jul 24 16:28:44 2025 GMT Not After : Jul 31 16:28:44 2025 GMT Subject: CN=68825f3c-e40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:d0:57:ad:4b:d5:30:15:fb:d8:1d:60:84: 8a:76:e4:9b:71:d1:63:34:d9:02:94:d1:73:87:1e: 72:0d:1d:33:2f:2b:75:ea:cb:46:a4:8c:1a:e0:5a: 3a:16:e1:05:e9:bb:a1:53:52:31:5b:19:6e:f5:d9: d6:1c:b9:07:92:8d:ae:e9:bf:8e:16:44:f2:b1:d5: f5:43:2d:1a:76:d5:33:fb:96:a7:86:f9:d9:43:d7: 0c:c7:7c:35:ef:82:4f:7b:9b:fd:2c:cb:d7:f0:08: 0b:e6:74:14:03:6b:9b:ae:17:c5:a7:c0:84:76:9c: b6:90:3f:d0:b2:e9:c0:51:3f:80:a9:86:bf:49:e0: c3:d6:d3:72:70:41:8c:c1:25:be:31:9b:9c:0f:d9: 71:33:d1:2b:4b:0e:39:6a:c8:77:e8:7f:89:09:f3: 07:5c:97:3e:ff:e8:af:b2:9f:b8:49:82:19:ea:81: ef:f3:3a:89:f4:60:cd:3d:3d:91:73:64:53:fd:7e: bf:76:ca:f2:b7:66:fb:c7:b3:bc:83:73:88:8c:4a: b0:79:63:0b:a1:4f:70:04:32:f8:1d:1f:34:8d:24: df:f1:5f:3f:1b:c0:fd:24:a4:1d:a3:2a:46:f6:8e: 62:72:8c:a3:65:ac:74:6b:ce:0b:b9:85:a2:35:45: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2F:D5:7F:7F:93:F9:1B:98:84:13:54:50:91:4E:A4:9D:8D:53:A8 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:29:69:8c:fb:8c:7c:90:d0:ef:72:41:1a:88:65:2c:77:41: e5:b7:34:84:98:96:20:d4:9b:24:b4:22:9d:0d:1f:51:20:20: b4:c7:c0:bd:f7:86:ce:85:91:4a:a6:1e:72:70:2d:44:3a:31: 9f:6e:36:41:ec:ef:78:cf:c0:2c:25:7c:3f:6e:d5:4f:31:e8: 00:9d:92:64:24:6d:27:d6:73:f3:35:53:12:9a:07:2e:4a:40: 4f:1b:ec:67:30:92:4e:6c:27:e7:c3:fe:16:df:aa:09:19:be: 04:99:47:56:17:c3:66:95:95:52:d8:80:72:12:8b:86:48:cd: ec:21:7f:cc:7a:f0:7a:8e:cb:eb:08:92:c2:c9:48:cd:32:4d: 53:20:a9:8e:98:5f:12:1f:34:f4:ee:c3:42:71:95:2e:1e:89: 38:0d:55:9f:d2:ac:d3:e2:51:5f:3e:b4:7d:d4:da:ee:3f:62: 97:ee:85:9b:02:8f:45:59:8f:2b:3b:f6:7f:0a:3c:b2:09:76: b4:50:28:e9:cd:33:a3:6c:f6:2a:bc:9d:8f:d2:88:be:93:24: f7:1d:34:3c:d7:9f:89:19:4c:4f:8f:81:de:ba:ff:f0:77:d2: b4:21:35:b4:0a:f2:0f:28:86:2a:60:c9:61:a0:ad:32:e6:7b: e2:03:5e:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUwNzI0MTYyODQ0WhcNMjUwNzMxMTYyODQ0WjAYMRYwFAYD VQQDEw02ODgyNWYzYy1lNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3irQV61L1TAV+9gdYISKduSbcdFjNNkClNFzhx5yDR0zLyt16stGpIwa4Fo6 FuEF6buhU1IxWxlu9dnWHLkHko2u6b+OFkTysdX1Qy0adtUz+5anhvnZQ9cMx3w1 74JPe5v9LMvX8AgL5nQUA2ubrhfFp8CEdpy2kD/QsunAUT+AqYa/SeDD1tNycEGM wSW+MZucD9lxM9ErSw45ash36H+JCfMHXJc+/+ivsp+4SYIZ6oHv8zqJ9GDNPT2R c2RT/X6/dsryt2b7x7O8g3OIjEqweWMLoU9wBDL4HR80jSTf8V8/G8D9JKQdoypG 9o5icoyjZax0a84LuYWiNUV7lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkv1X9/ k/kbmIQTVFCRTqSdjVOoMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOKWmM+4x8kNDvckEaiGUsd0HltzSEmJYg1JsktCKdDR9RICC0x8C9 94bOhZFKph5ycC1EOjGfbjZB7O94z8AsJXw/btVPMegAnZJkJG0n1nPzNVMSmgcu SkBPG+xnMJJObCfnw/4W36oJGb4EmUdWF8NmlZVS2IByEouGSM3sIX/MevB6jsvr CJLCyUjNMk1TIKmOmF8SHzT07sNCcZUuHok4DVWf0qzT4lFfPrR91NruP2KX7oWb Ao9FWY8rO/Z/CjyyCXa0UCjpzTOjbPYqvJ2P0oi+kyT3HTQ815+JGUxPj4Heuv/w d9K0ITW0CvIPKIYqYMlhoK0y5nviA14M -----END CERTIFICATE-----Generated at Fri Jul 25 07:04:25 2025 by rpki-client