$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: Y2q7kXeQouZD41GZ7ep26yj9EapUT4sdTgB8v8Niq0Y= Subject key identifier: 6F:E2:6B:3B:91:91:D5:8E:17:BC:0F:F7:F2:BB:4B:89:30:76:7C:84 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: C5 Signing time: Mon 21 Jul 2025 05:57:51 +0000 Manifest this update: Mon 21 Jul 2025 05:57:50 +0000 Manifest next update: Mon 28 Jul 2025 05:57:50 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: SjlNIEgM+8bLIku4irJtpS7CsgiyLG2uq3Z3v2oF1lk=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: cLX/NcpRBUgL7nqhk0rMjH0omx3nN9XKcz3vUbvy2EE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Jul 21 05:57:50 2025 GMT Not After : Jul 28 05:57:50 2025 GMT Subject: CN=687dd6df-82d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:3f:f7:6c:cb:64:1d:0e:96:6d:e6:d0:d7: 02:c5:e1:99:66:1c:b4:0b:81:8b:ae:eb:c8:2c:9e: 5b:f1:7c:fb:0a:ab:70:35:54:fe:14:95:31:02:85: ba:71:c1:1d:e2:ef:64:0b:c5:ff:db:75:98:4f:e7: 51:e5:1d:0b:2f:53:f0:7a:ce:57:a3:61:42:9c:d5: 2e:21:44:bc:6f:1a:a0:f6:9f:df:98:14:7a:26:de: 9f:a5:e1:38:04:fc:5b:59:cf:d7:81:86:c4:20:09: 88:dd:ee:57:10:c2:5d:f7:5e:09:4a:10:8b:55:22: bf:17:72:24:ef:22:c3:70:26:33:ca:14:fc:aa:3b: 58:51:a7:16:7a:a7:cc:98:9d:3a:6f:6e:a9:75:aa: 9e:5c:40:f7:6f:43:21:27:61:03:f3:a0:29:63:28: ae:1c:87:26:e3:07:c6:e0:8f:49:e2:13:a7:c2:a0: ae:71:f3:6c:3a:03:63:c4:4c:78:59:94:d1:08:53: cc:d8:64:24:a6:bd:90:47:20:b0:d0:6f:e5:6b:60: e9:d4:2b:34:aa:ff:23:37:b2:95:3e:87:c2:57:8f: 28:24:b3:11:fe:0f:20:c2:55:b3:ba:d8:06:62:e5: be:63:9e:b3:40:db:05:b1:b0:7d:59:54:80:a8:14: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E2:6B:3B:91:91:D5:8E:17:BC:0F:F7:F2:BB:4B:89:30:76:7C:84 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:51:2e:34:fe:fb:65:4c:7c:5e:34:fe:13:b5:6a:cc:ad:aa: 64:74:a9:b0:5d:f7:dc:87:39:de:c9:c6:26:06:8e:36:fa:4d: 45:86:a1:56:ef:b2:cd:ce:18:10:25:96:9a:1b:3a:1e:8b:65: 66:6a:15:58:23:1c:4f:d7:41:b0:46:59:b0:a0:f5:0f:a8:e4: 34:04:38:fd:6e:de:5d:21:6b:2b:95:7c:00:c5:e5:7a:b5:4a: d0:cd:60:85:d1:16:fa:ee:61:4f:d6:84:85:34:ea:a8:ca:cd: 3b:26:49:7e:82:57:d4:af:be:0e:2a:fa:b9:f4:89:c5:91:bf: 48:16:7c:03:bb:f1:0b:42:c8:dd:18:a5:55:1a:33:07:87:95: cb:2e:87:d4:70:81:2b:98:a9:5e:39:aa:6d:e6:57:8d:c3:a3: 45:10:fe:55:53:9f:e4:42:f7:71:54:10:8f:97:ba:8c:9a:99: 6a:21:34:72:9e:35:6a:b1:dd:3e:60:34:6d:e4:2d:a8:e7:20: 83:ad:ff:05:be:51:04:2e:97:c3:b9:08:b5:44:ea:5b:73:c5: 1e:b0:cc:56:cb:90:d2:51:6b:19:75:a3:b2:81:a7:ec:39:97: 7c:fa:8b:7e:69:b5:50:e7:9c:be:71:db:3e:5b:ec:30:c4:fd: 5c:4a:44:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUwNzIxMDU1NzUwWhcNMjUwNzI4MDU1NzUwWjAYMRYwFAYD VQQDEw02ODdkZDZkZi04MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc8/92zLZB0Olm3m0NcCxeGZZhy0C4GLruvILJ5b8Xz7CqtwNVT+FJUxAoW6 ccEd4u9kC8X/23WYT+dR5R0LL1Pwes5Xo2FCnNUuIUS8bxqg9p/fmBR6Jt6fpeE4 BPxbWc/XgYbEIAmI3e5XEMJd914JShCLVSK/F3Ik7yLDcCYzyhT8qjtYUacWeqfM mJ06b26pdaqeXED3b0MhJ2ED86ApYyiuHIcm4wfG4I9J4hOnwqCucfNsOgNjxEx4 WZTRCFPM2GQkpr2QRyCw0G/la2Dp1Cs0qv8jN7KVPofCV48oJLMR/g8gwlWzutgG YuW+Y56zQNsFsbB9WVSAqBR6fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/iazuR kdWOF7wP9/K7S4kwdnyEMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn WXpYQXRGNW1VWHRRaTROUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3US40/vtlTHxeNP4TtWrMrapkdKmwXffchzneycYmBo42+k1FhqFW 77LNzhgQJZaaGzoei2VmahVYIxxP10GwRlmwoPUPqOQ0BDj9bt5dIWsrlXwAxeV6 tUrQzWCF0Rb67mFP1oSFNOqoys07Jkl+glfUr74OKvq59InFkb9IFnwDu/ELQsjd GKVVGjMHh5XLLofUcIErmKleOapt5leNw6NFEP5VU5/kQvdxVBCPl7qMmplqITRy njVqsd0+YDRt5C2o5yCDrf8FvlEELpfDuQi1ROpbc8UesMxWy5DSUWsZdaOygafs OZd8+ot+abVQ55y+cds+W+wwxP1cSkR9 -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:04 2025 by rpki-client