$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: pRnQdcXghGwJJ7SVCbQ1f45Z1xoUvRE6nJbgpOz8tf4= Subject key identifier: A9:DE:EC:7B:87:3F:84:1B:F7:8F:62:56:C5:EF:2F:0D:AB:77:FF:A1 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 0102 Signing time: Mon 21 Jul 2025 05:18:33 +0000 Manifest this update: Mon 21 Jul 2025 05:18:32 +0000 Manifest next update: Mon 28 Jul 2025 05:18:32 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: zS/8c2zeVNrHtD4QX5os68l5+T7TivrCgh2VO0kU/vs=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Jul 21 05:18:32 2025 GMT Not After : Jul 28 05:18:32 2025 GMT Subject: CN=687dcda9-1105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:56:10:05:c7:f7:bc:4d:7b:a7:b4:e2:ba: be:05:d9:a6:a1:53:a4:c5:10:dd:4b:0f:a0:a9:48: cf:ed:93:0f:a2:77:b8:21:e4:90:f7:62:da:b8:9a: d5:4e:6d:4c:e4:55:68:29:f2:fe:01:d7:a8:17:5b: 5d:f2:1c:b4:d8:50:46:c8:1d:e5:81:dd:bd:e4:d8: 03:49:b5:80:4d:5a:39:5c:b4:f7:ea:26:14:c4:a6: ff:f3:67:6c:b1:bc:49:fb:29:5c:48:ab:5a:6e:2b: 92:22:0f:61:6d:13:40:3c:5b:c1:87:0f:35:29:2c: 64:70:4f:13:2f:31:ac:f8:97:e5:78:b3:c7:51:ef: fa:79:34:35:a8:0c:0c:19:bd:b9:52:47:f4:f0:93: 8a:88:2e:dc:02:ce:12:d4:6e:b5:60:06:67:75:be: 21:a2:89:c4:cc:db:13:0a:96:fc:39:0c:97:b0:f1: 69:19:82:4f:71:c1:1d:d4:ab:79:6c:c0:6d:36:ff: 67:77:07:aa:c8:d9:fa:6a:24:60:03:a5:ce:d7:9f: 42:2e:4b:1f:5c:5f:21:92:3b:9a:42:c9:65:30:2e: 82:a7:db:a4:ca:6e:33:ff:64:fa:fd:46:f3:54:70: 48:d3:03:3d:cd:fb:30:50:5f:82:39:ec:46:46:30: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:EC:7B:87:3F:84:1B:F7:8F:62:56:C5:EF:2F:0D:AB:77:FF:A1 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:88:9a:1e:61:f5:22:0a:59:3a:1d:3a:45:e0:07:e6:51:c1: df:98:4f:30:e7:d5:64:b2:7f:1e:bb:3b:f3:68:e2:74:26:80: 25:3c:ee:db:6e:f2:04:c6:d7:3d:3d:43:dc:da:ed:0d:52:ca: 71:15:04:73:b1:0b:27:28:b6:5e:dc:1a:cc:08:a7:c9:66:07: 14:83:a6:2e:a3:03:65:2c:b0:f4:a5:c2:fe:f6:78:d7:41:cd: 3b:10:83:bf:e3:cb:eb:0d:01:f5:e4:32:8e:68:0a:34:6d:58: 43:60:f5:6a:79:84:c8:5b:d6:bb:ad:ed:a7:58:1d:59:55:99: 9e:cd:f3:92:94:57:44:b4:7c:5d:1f:68:77:f8:f8:cf:6f:4e: 35:8c:4f:fa:d0:2d:e7:73:0c:6a:df:f6:db:2a:ad:7d:c9:40: e5:73:3a:0c:98:c3:03:f4:9b:d7:04:24:99:38:a6:7e:84:a8: 60:17:37:ad:d4:ab:10:8f:d7:c9:c2:ec:3a:8a:06:b6:2b:6a: 2a:aa:01:b7:ab:7e:fe:4a:4a:0b:71:48:a7:3d:6e:7b:a8:82: a1:38:be:33:09:45:13:0a:e7:1d:fe:18:75:05:6b:6e:d5:bc: fd:34:0c:7b:f5:cc:76:0d:16:b2:48:ff:54:45:b5:c8:30:7d: df:d6:6d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwNzIxMDUxODMyWhcNMjUwNzI4MDUxODMyWjAYMRYwFAYD VQQDEw02ODdkY2RhOS0xMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy11WEAXH97xNe6e04rq+BdmmoVOkxRDdSw+gqUjP7ZMPone4IeSQ92LauJrV Tm1M5FVoKfL+AdeoF1td8hy02FBGyB3lgd295NgDSbWATVo5XLT36iYUxKb/82ds sbxJ+ylcSKtabiuSIg9hbRNAPFvBhw81KSxkcE8TLzGs+JfleLPHUe/6eTQ1qAwM Gb25Ukf08JOKiC7cAs4S1G61YAZndb4hoonEzNsTCpb8OQyXsPFpGYJPccEd1Kt5 bMBtNv9ndweqyNn6aiRgA6XO159CLksfXF8hkjuaQsllMC6Cp9ukym4z/2T6/Ubz VHBI0wM9zfswUF+COexGRjDjWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKne7HuH P4Qb949iVsXvLw2rd/+hMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBciJoeYfUiClk6HTpF4AfmUcHfmE8w59Vksn8euzvzaOJ0JoAlPO7b bvIExtc9PUPc2u0NUspxFQRzsQsnKLZe3BrMCKfJZgcUg6YuowNlLLD0pcL+9njX Qc07EIO/48vrDQH15DKOaAo0bVhDYPVqeYTIW9a7re2nWB1ZVZmezfOSlFdEtHxd H2h3+PjPb041jE/60C3ncwxq3/bbKq19yUDlczoMmMMD9JvXBCSZOKZ+hKhgFzet 1KsQj9fJwuw6iga2K2oqqgG3q37+SkoLcUinPW57qIKhOL4zCUUTCucd/hh1BWtu 1bz9NAx79cx2DRaySP9URbXIMH3f1m0C -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:24 2025 by rpki-client