$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json) Hash identifier: SWRMqMoMhmk4EosAIYHgVufz+M8qwG5thYu0I5HUjHY= Subject key identifier: B5:82:62:6E:3C:88:10:CE:93:64:F9:F9:AC:A5:A2:A8:F5:16:83:CF Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft Manifest number: 22 Signing time: Mon 21 Jul 2025 08:00:53 +0000 Manifest this update: Mon 21 Jul 2025 08:00:53 +0000 Manifest next update: Mon 28 Jul 2025 08:00:53 +0000 Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: oQM9XKabtpuzYyZ8dfS7399exwZJbBBfFIUwiVZLwCY=) 2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Validity Not Before: Jul 21 08:00:53 2025 GMT Not After : Jul 28 08:00:53 2025 GMT Subject: CN=687df3b5-f493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:9d:47:f9:77:4e:9f:81:1c:83:1c:96:c0: b6:0b:c8:f8:3a:0e:51:ad:de:41:1c:b0:47:3d:eb: 9c:c8:39:79:83:a0:3c:79:f5:56:b4:f6:4c:00:85: 18:d0:6c:f9:77:c2:22:15:51:3a:37:8e:74:7f:4f: 89:02:9b:1e:c5:a6:7c:ae:d0:b2:5d:88:fe:93:81: a9:c9:6b:28:00:a3:fb:f9:9f:e1:40:af:a8:f0:fc: 38:bd:af:04:f4:e0:d6:71:ce:27:3d:66:80:73:a3: e1:cd:1b:79:76:d3:a3:e9:13:3b:3e:54:20:99:09: f9:74:93:55:b6:52:76:df:d8:80:64:76:02:45:c0: 4e:c5:b4:31:14:a0:c7:d4:dd:83:56:b4:65:e5:e0: 46:17:ca:c5:03:ba:96:13:5c:c2:6d:3f:90:2b:f0: 6c:a9:cd:f1:f3:a6:39:40:9b:31:99:7b:7e:bd:4f: d2:b9:fc:26:52:f5:2d:73:2e:a2:ec:6b:dc:8a:78: 00:3c:a9:0b:ca:69:7a:5e:7d:00:f7:75:7b:e4:d3: 87:20:fe:77:c1:6f:8f:a9:e1:65:c1:c5:8a:e8:f7: b6:42:e7:60:87:c8:08:27:6e:d9:7c:d7:72:2d:0f: d0:de:85:4a:60:68:8f:81:b0:7c:24:bb:7f:ad:ce: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:82:62:6E:3C:88:10:CE:93:64:F9:F9:AC:A5:A2:A8:F5:16:83:CF X509v3 Authority Key Identifier: keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ef:a7:9c:d4:9e:30:e6:8c:60:e5:2f:8c:96:bd:05:6a:6a: fd:1b:be:e0:42:fe:5a:cf:5e:d7:74:89:84:68:50:30:3e:dc: cc:a1:ea:7e:9c:74:64:35:79:e9:7b:a7:4b:36:ab:bf:42:4d: 9a:e2:0f:38:13:d2:96:19:dd:bb:9c:90:48:39:e4:67:fa:47: 7c:72:07:07:ac:47:fb:37:64:00:d0:14:1b:65:5d:57:91:dd: 71:5d:0f:60:d0:a4:35:4f:91:0d:33:d5:4b:0a:a9:8d:02:68: 78:f2:b5:8f:15:3f:96:27:6e:8e:2b:e6:2b:87:ff:9e:a5:df: 46:59:fc:df:cb:25:84:19:5f:ea:49:72:a7:d2:6c:0d:7e:00: 39:bb:bc:ea:f1:17:83:3a:3e:3e:bc:e2:0f:a2:6c:cb:4a:12: 91:cc:58:31:99:11:46:07:69:b5:42:02:2e:ea:1a:e7:81:2e: b3:f8:1f:f5:96:15:28:a4:c1:aa:4b:42:0d:1f:6c:15:46:21: 00:3d:2b:3f:62:45:c7:cd:27:25:b5:b7:c8:f9:40:46:46:d1: 5e:cf:de:79:77:a8:29:4d:17:a7:62:85:8e:da:3a:74:2f:6f: 60:b5:bb:12:87:ce:0d:44:0b:34:3e:b0:bd:57:9a:83:cc:12: a2:34:e2:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3 MzVDRUY0MDAeFw0yNTA3MjEwODAwNTNaFw0yNTA3MjgwODAwNTNaMBgxFjAUBgNV BAMTDTY4N2RmM2I1LWY0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdMZ1H+XdOn4EcgxyWwLYLyPg6DlGt3kEcsEc965zIOXmDoDx59Va09kwAhRjQ bPl3wiIVUTo3jnR/T4kCmx7Fpnyu0LJdiP6TganJaygAo/v5n+FAr6jw/Di9rwT0 4NZxzic9ZoBzo+HNG3l206PpEzs+VCCZCfl0k1W2Unbf2IBkdgJFwE7FtDEUoMfU 3YNWtGXl4EYXysUDupYTXMJtP5Ar8GypzfHzpjlAmzGZe369T9K5/CZS9S1zLqLs a9yKeAA8qQvKaXpefQD3dXvk04cg/nfBb4+p4WXBxYro97ZC52CHyAgnbtl813It D9DehUpgaI+BsHwku3+tzsdJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtYJibjyI EM6TZPn5rKWiqPUWg88wHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1 NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MzUyLzgyOTM4MDQ2MzE1NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVx N2JsUVVaVEw5RTNOYzcwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABjvp5zUnjDmjGDlL4yWvQVqav0bvuBC/lrPXtd0iYRoUDA+3Myh6n6c dGQ1eel7p0s2q79CTZriDzgT0pYZ3buckEg55Gf6R3xyBwesR/s3ZADQFBtlXVeR 3XFdD2DQpDVPkQ0z1UsKqY0CaHjytY8VP5Ynbo4r5iuH/56l30ZZ/N/LJYQZX+pJ cqfSbA1+ADm7vOrxF4M6Pj684g+ibMtKEpHMWDGZEUYHabVCAi7qGueBLrP4H/WW FSikwapLQg0fbBVGIQA9Kz9iRcfNJyW1t8j5QEZG0V7P3nl3qClNF6dihY7aOnQv b2C1uxKHzg1ECzQ+sL1XmoPMEqI04qE= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:44 2025 by rpki-client