$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json) Hash identifier: s7iUqt1uxTS0t3mRwB3IGZLrrSm/Rae+CUWQ3N+5Vuo= Subject key identifier: FC:3B:92:D9:9E:AC:E4:AD:F4:AD:16:12:7B:F8:D0:9B:96:B0:45:66 Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Certificate serial: 1592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft Manifest number: 1588 Signing time: Thu 24 Jul 2025 16:54:25 +0000 Manifest this update: Thu 24 Jul 2025 16:54:25 +0000 Manifest next update: Thu 31 Jul 2025 16:54:25 +0000 Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: wpgZ1TYo7bqbLr1PfIE1Wr8aj9IGI/n99DVH6EvKMtI=) 2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: xdBFNPkazDP5YP2MUntpZBwPWV+oy0u7bSlxk8ZVSa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 16:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5522 (0x1592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Validity Not Before: Jul 24 16:54:25 2025 GMT Not After : Jul 31 16:54:25 2025 GMT Subject: CN=68826541-7758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:32:09:13:b4:fa:cf:c4:0d:68:ea:af:89: 7a:9e:af:a3:bc:84:7f:a4:71:b1:b7:00:8b:19:9e: 19:28:a5:6c:15:7d:08:dd:50:29:18:26:38:c1:a1: 9a:eb:2c:4b:a8:37:ff:92:66:37:4b:57:90:74:13: 2f:b2:fa:32:3f:73:a4:d7:dc:cd:cd:23:45:ae:6b: ef:fd:2a:11:d7:a0:86:a5:b6:2a:b5:83:af:69:ef: 97:5f:01:ce:c0:f6:30:8b:2f:5d:8e:12:f8:a2:f0: 34:04:cb:74:1e:0f:8d:d3:13:4b:eb:b9:a1:36:f6: c8:84:58:ac:a6:b9:3c:45:e7:d5:44:f3:68:c9:e2: 28:a8:3f:5d:c2:28:3c:63:61:eb:c1:69:3f:8a:59: 66:6f:5d:46:d7:d5:3e:1b:88:df:ca:bb:18:de:89: 09:8b:46:dd:4c:5e:ee:49:46:48:10:0c:04:24:dd: ee:40:68:d7:b7:ed:91:7b:e5:6c:8d:22:cd:8f:9d: 18:a6:1d:d3:b7:82:b4:e4:98:bd:c1:bb:8c:c0:9a: 31:90:9a:66:30:d1:c7:b9:0a:e2:de:65:25:0a:9a: 91:4f:fd:31:51:a2:78:14:35:8b:d7:70:ce:ee:db: e6:a3:be:0b:e0:07:ed:fe:91:86:90:3b:c1:9e:d1: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3B:92:D9:9E:AC:E4:AD:F4:AD:16:12:7B:F8:D0:9B:96:B0:45:66 X509v3 Authority Key Identifier: keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5e:b0:d5:3d:fd:9e:9b:2e:73:b5:2f:87:5c:1e:fa:01:e7: af:6a:d3:88:3f:67:5f:1b:bc:34:0a:5a:32:58:3f:d6:04:81: d8:30:10:dd:bd:bd:f5:38:a1:4e:e2:0e:0b:0c:08:c6:ee:b8: cc:63:68:ed:cc:a4:76:95:75:4d:26:97:8d:ea:09:63:cd:ab: 50:74:91:88:2d:a4:b6:87:5a:60:77:ac:b9:b7:50:12:4d:d7: 0b:9d:52:ea:29:50:6e:5b:81:fd:59:5d:f9:84:cb:68:e3:80: 05:0a:82:aa:60:09:1d:3f:99:82:03:38:58:32:3c:7f:d5:2e: cd:e5:e7:ec:45:33:69:dd:3d:01:d7:38:77:19:e0:62:b4:7d: 05:c1:0d:dc:cb:d7:03:b7:67:86:ca:b7:f5:23:2e:de:86:1f: ef:a2:d3:87:3d:31:dc:a3:b9:e1:ac:3b:a6:9f:fd:f0:8e:9d: 8e:84:97:7f:30:15:e1:3b:48:14:8c:3c:a0:7e:2d:54:6e:f9: 60:7a:b0:57:97:f0:e3:70:00:31:82:9a:b2:b7:38:84:03:33: 6b:fd:94:4a:57:4b:e6:15:20:1d:c5:f1:42:6f:e7:07:94:67: d3:97:16:c1:85:6a:5c:a3:c4:49:7c:aa:15:ce:30:a1:44:19: 51:81:f4:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5 NjNDM0Y2MzgwHhcNMjUwNzI0MTY1NDI1WhcNMjUwNzMxMTY1NDI1WjAYMRYwFAYD VQQDEw02ODgyNjU0MS03NzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3syCRO0+s/EDWjqr4l6nq+jvIR/pHGxtwCLGZ4ZKKVsFX0I3VApGCY4waGa 6yxLqDf/kmY3S1eQdBMvsvoyP3Ok19zNzSNFrmvv/SoR16CGpbYqtYOvae+XXwHO wPYwiy9djhL4ovA0BMt0Hg+N0xNL67mhNvbIhFisprk8RefVRPNoyeIoqD9dwig8 Y2HrwWk/illmb11G19U+G4jfyrsY3okJi0bdTF7uSUZIEAwEJN3uQGjXt+2Re+Vs jSLNj50Yph3Tt4K05Ji9wbuMwJoxkJpmMNHHuQri3mUlCpqRT/0xUaJ4FDWL13DO 7tvmo74L4Aft/pGGkDvBntEGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw7ktme rOSt9K0WEnv40JuWsEVmMB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4 RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDAwRS84MDBFM0Y3MjM4RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85 a2Qya1hEZW1JbE9XUEQ5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKXrDVPf2emy5ztS+HXB76AeevatOIP2dfG7w0CloyWD/WBIHYMBDd vb31OKFO4g4LDAjG7rjMY2jtzKR2lXVNJpeN6gljzatQdJGILaS2h1pgd6y5t1AS TdcLnVLqKVBuW4H9WV35hMto44AFCoKqYAkdP5mCAzhYMjx/1S7N5efsRTNp3T0B 1zh3GeBitH0FwQ3cy9cDt2eGyrf1Iy7ehh/votOHPTHco7nhrDumn/3wjp2OhJd/ MBXhO0gUjDygfi1UbvlgerBXl/DjcAAxgpqytziEAzNr/ZRKV0vmFSAdxfFCb+cH lGfTlxbBhWpco8RJfKoVzjChRBlRgfRg -----END CERTIFICATE-----Generated at Fri Jul 25 15:26:51 2025 by rpki-client