$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: am4c0ofSJPbYxcBQ4u7dm8W9NlL/7X4+axl2McjD8bg= Subject key identifier: 4B:F9:77:7B:17:F6:EE:07:A5:BE:F8:39:6D:67:3A:E9:83:1E:4E:6C Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: BD Signing time: Fri 13 Jun 2025 04:49:44 +0000 Manifest this update: Fri 13 Jun 2025 04:49:43 +0000 Manifest next update: Fri 20 Jun 2025 04:49:43 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: 1gDubbuv5NXJkKFw273Ks+FO9xff+fhcxVLXVo/YBsA=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Jun 13 04:49:43 2025 GMT Not After : Jun 20 04:49:43 2025 GMT Subject: CN=684bade8-416f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:1b:16:52:46:72:b8:50:66:f6:55:8c:c7: 63:81:26:e7:73:ab:18:f3:38:66:0a:c0:f3:5e:f1: 31:42:9c:5c:3e:11:5b:15:e7:53:d9:2b:c7:95:e9: 5c:e8:52:27:e9:f8:c7:13:00:75:3f:d1:2f:1f:7c: 69:9b:49:19:24:f8:3a:96:4a:5c:fb:d8:c7:27:a3: c1:7e:3b:3d:a4:10:35:57:5a:78:ae:46:de:08:d4: 80:07:f8:db:d9:d1:5a:31:82:da:6b:65:02:a5:5b: 4c:27:4f:40:45:3b:a3:e8:1b:9a:be:b9:21:13:96: 11:1f:e3:16:06:e6:e4:9f:60:e8:8f:64:c6:c3:d3: 23:1c:23:8e:6d:f4:57:cc:49:8b:64:06:c8:aa:ef: bd:45:03:4d:35:54:df:a1:ce:19:3b:0a:f2:4f:c5: cf:52:77:9a:66:e1:1c:97:85:37:fb:c1:54:73:42: 39:16:d0:cf:5d:f0:83:c9:c6:7e:fc:9b:a2:5f:cb: 9d:fd:7a:fa:c7:a6:36:b7:29:8d:45:4c:f4:4c:66: 87:48:dd:f6:6f:c8:a0:af:c7:78:bf:3f:3a:10:d7: 47:0a:eb:77:15:d1:b1:e4:5a:3e:44:07:73:a3:09: 31:63:31:60:22:5b:26:57:27:6e:9c:46:d5:4c:a6: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F9:77:7B:17:F6:EE:07:A5:BE:F8:39:6D:67:3A:E9:83:1E:4E:6C X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a8:b7:a4:2b:84:e4:9b:70:b3:e2:36:84:73:dd:1a:54:e2: d3:2b:54:14:ac:98:41:e8:36:ac:8f:ff:bd:f7:01:26:76:cb: 49:cc:b6:b5:3f:0b:11:77:d1:05:70:ce:bf:5c:92:8f:a1:dd: ea:c0:6f:b3:be:a0:93:03:86:a1:af:72:16:0c:e4:84:5d:6b: 4a:25:ee:0c:26:18:96:09:24:b7:be:eb:6c:0c:ca:13:65:89: bd:d4:0e:53:0a:b0:3b:d2:9b:a0:06:21:88:05:d6:57:0d:59: 80:5c:f9:8e:96:c2:d0:b8:52:5c:d3:44:dd:bd:bf:86:07:ef: 7a:06:a2:78:c7:b4:40:87:52:d4:59:60:88:79:16:fb:4c:cb: 15:89:29:b3:db:39:1c:ca:a7:a2:9d:0a:9d:68:85:68:73:8e: 26:fa:58:83:94:52:50:56:27:7f:42:ad:22:96:ac:4a:50:bd: 3c:65:d1:2a:63:e0:72:8e:90:37:8d:2d:c3:52:c1:c6:42:15: 63:7d:ad:60:e5:a1:88:20:54:67:40:c9:0e:c8:92:ef:d7:44: d8:9b:70:ad:13:95:03:a5:dd:fd:47:ca:0a:bc:80:61:4b:35: 95:5a:6f:bf:81:0e:b5:b1:a6:02:22:e2:93:34:d4:6f:6a:b5: 5d:6b:81:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUwNjEzMDQ0OTQzWhcNMjUwNjIwMDQ0OTQzWjAYMRYwFAYD VQQDEw02ODRiYWRlOC00MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jkbFlJGcrhQZvZVjMdjgSbnc6sY8zhmCsDzXvExQpxcPhFbFedT2SvHlelc 6FIn6fjHEwB1P9EvH3xpm0kZJPg6lkpc+9jHJ6PBfjs9pBA1V1p4rkbeCNSAB/jb 2dFaMYLaa2UCpVtMJ09ARTuj6BuavrkhE5YRH+MWBubkn2Doj2TGw9MjHCOObfRX zEmLZAbIqu+9RQNNNVTfoc4ZOwryT8XPUneaZuEcl4U3+8FUc0I5FtDPXfCDycZ+ /JuiX8ud/Xr6x6Y2tymNRUz0TGaHSN32b8igr8d4vz86ENdHCut3FdGx5Fo+RAdz owkxYzFgIlsmVydunEbVTKbjVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv5d3sX 9u4Hpb74OW1nOumDHk5sMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxqLekK4Tkm3Cz4jaEc90aVOLTK1QUrJhB6Dasj/+99wEmdstJzLa1 PwsRd9EFcM6/XJKPod3qwG+zvqCTA4ahr3IWDOSEXWtKJe4MJhiWCSS3vutsDMoT ZYm91A5TCrA70pugBiGIBdZXDVmAXPmOlsLQuFJc00Tdvb+GB+96BqJ4x7RAh1LU WWCIeRb7TMsViSmz2zkcyqeinQqdaIVoc44m+liDlFJQVid/Qq0ilqxKUL08ZdEq Y+ByjpA3jS3DUsHGQhVjfa1g5aGIIFRnQMkOyJLv10TYm3CtE5UDpd39R8oKvIBh SzWVWm+/gQ61saYCIuKTNNRvarVda4Gc -----END CERTIFICATE-----Generated at Fri Jun 13 07:57:03 2025 by rpki-client