$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: whZ0oW+CyJv9y19CrHHmOvTbSshy4eW+8p7MqOLU6BQ= Subject key identifier: 88:F9:22:21:76:79:17:0C:BA:BA:B2:31:AB:ED:2B:61:D5:03:3F:B8 Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 1F Signing time: Sat 19 Jul 2025 08:07:57 +0000 Manifest this update: Sat 19 Jul 2025 08:07:56 +0000 Manifest next update: Sat 26 Jul 2025 08:07:56 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: h1iEzYSch7WRjmMVsTJZ10Z2svY9W2uJW0Xqm8oKIq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Jul 19 08:07:56 2025 GMT Not After : Jul 26 08:07:56 2025 GMT Subject: CN=687b525c-484f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:6f:d8:bc:f1:82:aa:ed:18:c5:7e:cc:c4: 30:4a:5d:5d:8f:b1:16:02:ab:78:60:d0:49:21:f1: 2c:79:d0:3d:0d:f3:e3:9b:fb:92:92:34:a0:90:bb: 24:63:5d:3f:76:5f:9a:1d:42:ce:e4:e3:5e:3d:a3: ff:17:fc:dc:e9:f3:65:b9:9c:44:a2:ae:52:c3:4f: 32:cf:30:8b:63:9a:88:89:bf:ae:8a:93:39:f9:94: 5d:33:c1:d2:1b:d6:69:7e:45:16:b8:4b:fd:c6:ea: 5b:73:e3:2e:75:38:4b:18:2b:49:4a:88:2e:72:1a: a1:4e:6e:28:a5:2d:c2:32:d9:36:b6:f5:d1:1d:ef: e4:b3:d8:7f:36:0c:f5:0f:a7:aa:42:2b:04:a6:9e: a5:06:46:fc:2e:47:25:17:90:98:00:36:4e:6e:c8: 7b:d8:8b:5e:91:17:5a:26:29:1a:d0:69:10:90:a0: cf:5d:6c:b4:0e:df:c1:3c:cf:a6:31:c3:8e:d9:b3: b9:67:62:d6:e1:7b:57:88:ea:d0:4e:b6:d9:c0:6a: 9a:14:5c:22:ad:ad:28:81:37:54:57:1a:5b:39:87: 98:8c:0a:43:6c:0c:70:97:db:dc:f4:ac:ce:f3:3e: da:1f:a2:9b:1a:ad:52:33:0b:51:b4:0e:32:db:bb: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F9:22:21:76:79:17:0C:BA:BA:B2:31:AB:ED:2B:61:D5:03:3F:B8 X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:26:6d:4e:40:20:70:90:1d:5b:eb:27:ce:02:46:3a:94:f6: e3:aa:28:1e:f3:68:00:1a:18:66:89:e9:e3:17:24:8e:97:56: 9e:75:3b:0e:6a:a6:73:34:84:e3:35:29:cb:a4:42:04:5f:83: ba:bd:f1:fe:2d:fa:e1:2b:28:2e:75:a0:a7:ae:f2:32:42:d8: 29:65:b4:b0:91:87:ff:94:18:6a:fc:1d:9a:9a:6e:22:fd:1b: 47:85:4b:a4:cc:91:1f:f4:53:41:e0:e2:ed:7c:ba:ba:fd:cb: d0:15:7b:65:7b:03:ab:e8:24:cc:fa:9e:7d:ab:11:68:69:eb: c4:8f:e4:7c:6f:08:8d:f4:b2:25:da:ad:60:d1:b7:32:e4:6e: eb:45:83:6b:17:b5:ce:63:35:ad:23:c1:b4:8b:39:6a:a3:27: b3:00:85:ef:0f:dc:17:e3:12:fc:a7:79:22:ec:7b:58:f4:30: 18:db:95:90:c9:d8:2f:4a:29:ab:49:30:aa:b3:4f:1d:0b:73: 9f:fe:b9:d0:2c:a3:40:76:5c:b9:25:6b:f0:d0:bf:17:b2:2c: 9f:d7:1b:f3:95:3a:11:02:9d:8f:22:b1:2b:42:4c:42:63:eb: 09:28:ea:a6:dc:f6:28:3c:85:66:e5:a3:82:24:ae:a4:cb:65: b1:73:54:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTA3MTkwODA3NTZaFw0yNTA3MjYwODA3NTZaMBgxFjAUBgNV BAMTDTY4N2I1MjVjLTQ4NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmAG/YvPGCqu0YxX7MxDBKXV2PsRYCq3hg0Ekh8Sx50D0N8+Ob+5KSNKCQuyRj XT92X5odQs7k4149o/8X/Nzp82W5nESirlLDTzLPMItjmoiJv66Kkzn5lF0zwdIb 1ml+RRa4S/3G6ltz4y51OEsYK0lKiC5yGqFObiilLcIy2Ta29dEd7+Sz2H82DPUP p6pCKwSmnqUGRvwuRyUXkJgANk5uyHvYi16RF1omKRrQaRCQoM9dbLQO38E8z6Yx w47Zs7lnYtbhe1eI6tBOttnAapoUXCKtrSiBN1RXGls5h5iMCkNsDHCX29z0rM7z PtofopsarVIzC1G0DjLbu9Z1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiPkiIXZ5 Fwy6urIxq+0rYdUDP7gwHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAEmbU5AIHCQHVvrJ84CRjqU9uOqKB7zaAAaGGaJ6eMXJI6XVp51Ow5q pnM0hOM1KcukQgRfg7q98f4t+uErKC51oKeu8jJC2ClltLCRh/+UGGr8HZqabiL9 G0eFS6TMkR/0U0Hg4u18urr9y9AVe2V7A6voJMz6nn2rEWhp68SP5HxvCI30siXa rWDRtzLkbutFg2sXtc5jNa0jwbSLOWqjJ7MAhe8P3BfjEvyneSLse1j0MBjblZDJ 2C9KKatJMKqzTx0Lc5/+udAso0B2XLkla/DQvxeyLJ/XG/OVOhECnY8isStCTEJj 6wko6qbc9ig8hWblo4IkrqTLZbFzVCs= -----END CERTIFICATE-----Generated at Mon Jul 21 05:44:47 2025 by rpki-client