$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: GaKVgjsK0DNOhjLOOqaXX4UmbpidyAhG5xuvDwSsF7o= Subject key identifier: 44:12:7F:24:75:92:76:E8:95:27:5D:BC:AF:EC:97:2D:3E:87:EC:F3 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A4C Signing time: Mon 28 Jul 2025 20:06:43 +0000 Manifest this update: Mon 28 Jul 2025 20:06:43 +0000 Manifest next update: Mon 04 Aug 2025 20:06:43 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: N8QG3UWm76jWc/MCBXBiQ82ZfqnpnH50p7kLc3tPyAk=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 20:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Jul 28 20:06:43 2025 GMT Not After : Aug 4 20:06:43 2025 GMT Subject: CN=6887d853-1cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:10:90:f7:1d:c5:0f:6e:6d:0a:55:95:1b: cc:c6:ba:43:0d:c9:b9:b6:9b:59:8b:d6:ee:9a:8f: f7:23:e9:d5:0c:a0:41:df:6f:c7:aa:1a:54:fb:1d: 39:61:52:9a:33:f5:36:c7:ef:39:e4:e7:fd:f4:be: f1:8c:bf:1d:4f:06:aa:c1:0a:c3:f3:bc:68:55:6f: 90:44:0b:14:3d:c3:f5:65:30:6d:ac:e5:a2:c4:40: 97:b6:5b:ee:24:9a:d0:cb:8b:8a:9f:84:a8:00:77: 86:b7:e6:34:02:c1:ca:a6:e3:4d:fb:f8:e9:98:80: 2f:f0:e4:38:cc:8a:2f:1d:2a:34:8c:f8:82:e7:24: 1a:36:d2:ea:54:a3:2c:7f:b7:ec:92:1f:bd:90:70: 29:7f:13:db:0b:60:82:c3:3a:b5:c6:b9:d2:5d:a0: 4b:8a:34:e9:f4:f4:62:6c:c5:77:bc:91:b8:f9:d4: be:1b:99:be:3c:93:ad:36:91:a6:7f:06:9c:e6:bc: 12:c4:5f:03:7a:e9:63:fe:74:aa:87:4e:d4:ac:f6: 42:cc:e6:19:5d:fa:0d:3f:93:e2:3e:15:31:7e:74: 1b:2b:18:8e:3f:88:cf:ab:e4:80:54:6b:5f:a2:5d: 5a:a2:3c:9c:87:8c:56:93:42:a4:a4:9f:3e:39:0b: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:12:7F:24:75:92:76:E8:95:27:5D:BC:AF:EC:97:2D:3E:87:EC:F3 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7c:64:d9:9e:27:bd:92:ad:cd:c9:68:f2:02:a7:92:64:b0: 77:86:6f:9e:5e:7f:61:ec:68:0b:a6:92:9c:8f:ba:ad:a0:8f: b5:9e:5f:65:5f:68:ea:51:50:89:d1:b2:1f:a3:b0:41:ff:13: 30:30:aa:46:8d:6c:f1:e9:68:15:3f:c6:ee:82:34:5c:dd:22: 26:f4:b8:ee:ac:09:12:d1:cc:61:ee:ce:29:1f:c2:1c:90:da: 8a:14:b1:ba:fd:cc:fc:41:d8:f4:da:a0:9b:a0:43:49:18:92: 75:a3:24:25:96:7a:5d:7a:52:6f:c5:b1:65:5b:9e:e2:37:ac: 2a:ee:ee:5a:2d:4d:18:af:77:31:a0:d3:da:d2:31:4f:21:a5: a2:ab:31:7d:ae:f6:ef:89:97:2f:af:98:56:67:89:32:86:28: c4:f8:e6:4f:25:02:de:fe:20:72:a9:dc:ac:37:cd:c1:83:15: e5:25:53:56:01:cc:9b:fa:47:2d:b9:e0:79:5a:39:e1:8d:80: 28:63:99:81:a4:46:19:2a:93:09:6e:af:94:4c:e2:4d:77:84: 3b:02:e7:cc:26:ba:51:95:22:7b:72:f4:db:80:89:3a:f4:a8: 6b:24:78:fb:1d:43:d6:9f:87:14:b6:bd:9d:66:4d:48:3b:64: 50:30:34:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUwNzI4MjAwNjQzWhcNMjUwODA0MjAwNjQzWjAYMRYwFAYD VQQDEw02ODg3ZDg1My0xY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LEQkPcdxQ9ubQpVlRvMxrpDDcm5tptZi9bumo/3I+nVDKBB32/HqhpU+x05 YVKaM/U2x+855Of99L7xjL8dTwaqwQrD87xoVW+QRAsUPcP1ZTBtrOWixECXtlvu JJrQy4uKn4SoAHeGt+Y0AsHKpuNN+/jpmIAv8OQ4zIovHSo0jPiC5yQaNtLqVKMs f7fskh+9kHApfxPbC2CCwzq1xrnSXaBLijTp9PRibMV3vJG4+dS+G5m+PJOtNpGm fwac5rwSxF8Deulj/nSqh07UrPZCzOYZXfoNP5PiPhUxfnQbKxiOP4jPq+SAVGtf ol1aojych4xWk0KkpJ8+OQtM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQSfyR1 knbolSddvK/sly0+h+zzMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+fGTZnie9kq3NyWjyAqeSZLB3hm+eXn9h7GgLppKcj7qtoI+1nl9l X2jqUVCJ0bIfo7BB/xMwMKpGjWzx6WgVP8bugjRc3SIm9LjurAkS0cxh7s4pH8Ic kNqKFLG6/cz8Qdj02qCboENJGJJ1oyQllnpdelJvxbFlW57iN6wq7u5aLU0Yr3cx oNPa0jFPIaWiqzF9rvbviZcvr5hWZ4kyhijE+OZPJQLe/iByqdysN83BgxXlJVNW Acyb+kctueB5WjnhjYAoY5mBpEYZKpMJbq+UTOJNd4Q7AufMJrpRlSJ7cvTbgIk6 9KhrJHj7HUPWn4cUtr2dZk1IO2RQMDQq -----END CERTIFICATE-----Generated at Tue Jul 29 04:45:44 2025 by rpki-client