$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: QgFj7U7RF/lBP7oanPohGNFwn8I6h/acY+7GmAayGcg= Subject key identifier: C2:64:C8:32:59:FF:76:F3:DA:0B:B6:77:A7:54:75:35:7B:E6:9E:90 Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: BB Signing time: Mon 09 Jun 2025 04:53:36 +0000 Manifest this update: Mon 09 Jun 2025 04:53:36 +0000 Manifest next update: Mon 16 Jun 2025 04:53:36 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: eMwlYA6RCqXvEG8TA/Oh9hGyO5HfodMidOuUuXSCwbk=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Jun 9 04:53:36 2025 GMT Not After : Jun 16 04:53:36 2025 GMT Subject: CN=684668d0-72c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:e9:5d:a8:64:ae:22:5c:f1:4b:83:a9:5c: f3:d1:d2:66:c7:ad:e0:e2:75:e8:dd:6b:28:67:27: a9:5f:6e:34:cb:4f:a0:e8:f1:f1:84:54:8a:d4:fc: ae:b7:8f:8a:0f:64:eb:b1:f3:c6:85:a3:6c:d1:f6: a1:95:28:6b:e0:a3:6b:8d:3a:28:6e:07:5c:88:20: 21:00:00:1a:fc:6f:0b:2e:08:1d:10:c8:73:b1:e7: e9:58:17:fd:a1:1b:33:0b:c0:6b:7d:69:e2:ae:7e: 6b:45:aa:d8:7f:a1:54:64:c9:1b:bd:2a:7e:f3:d2: 1d:f0:e9:45:db:97:01:45:93:ad:af:9a:53:9c:b3: 0d:bd:61:1b:b3:a5:e8:0c:6d:74:f5:16:49:cd:db: 58:7a:07:f2:5c:89:29:5e:ee:3c:31:16:b2:ee:25: ef:05:07:0e:f7:b6:82:e2:9b:87:23:89:3f:b3:5e: fe:4e:f0:9d:43:b7:b9:43:fd:b9:33:1b:05:9d:14: bd:8f:70:c3:e1:e3:66:c1:b5:77:63:50:31:12:79: 8a:49:f3:dc:01:e8:3d:e6:29:ea:0a:6c:56:69:30: 51:8b:45:53:32:9c:d3:0e:a0:3f:9b:10:c1:16:9c: 69:ca:12:e4:70:6e:ff:7c:e7:43:d5:9d:25:4f:eb: c5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:64:C8:32:59:FF:76:F3:DA:0B:B6:77:A7:54:75:35:7B:E6:9E:90 X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:42:33:c6:7c:8b:ae:19:9a:62:60:f2:bb:f5:b3:fe:b2:69: ea:c9:f9:e2:52:0a:94:9a:6d:a6:81:d6:df:50:58:95:fb:62: a7:98:e9:ec:c5:d9:df:f3:f4:66:7c:e0:31:da:ad:57:e7:a0: 21:2f:27:f3:33:b3:1a:de:54:e4:20:af:0e:d7:ff:1b:de:53: 65:23:84:48:61:b6:c6:0e:d7:8d:9f:5f:0c:88:40:28:36:19: 6b:15:13:d9:27:08:7d:a1:2b:26:39:28:69:bf:ed:01:e1:e8: 92:4d:5c:8a:9c:9c:7e:16:e8:57:fa:aa:90:ed:3a:f0:1f:25: 88:6d:80:70:17:72:91:01:30:86:d8:df:5f:cf:bd:27:22:de: af:36:17:10:8c:8b:14:1d:7c:e9:55:fa:14:89:0d:5b:60:fa: 8d:01:61:7f:5a:a9:a4:e5:f8:e6:ff:e6:4b:d0:f1:93:a6:70: be:2d:50:da:1d:21:46:77:6a:e3:05:b8:5f:a4:55:a2:8c:e9: 34:21:1d:81:01:25:37:d1:28:d6:16:19:2a:7b:1f:d9:1a:73: 0f:1b:0b:4e:28:19:52:ad:91:1c:73:43:07:72:13:d6:1f:52: dd:ba:51:29:89:e0:c6:5c:58:84:ed:f3:c4:e8:5b:10:50:9e: e0:10:6b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUwNjA5MDQ1MzM2WhcNMjUwNjE2MDQ1MzM2WjAYMRYwFAYD VQQDEw02ODQ2NjhkMC03MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzXpXahkriJc8UuDqVzz0dJmx63g4nXo3WsoZyepX240y0+g6PHxhFSK1Pyu t4+KD2TrsfPGhaNs0fahlShr4KNrjToobgdciCAhAAAa/G8LLggdEMhzsefpWBf9 oRszC8BrfWnirn5rRarYf6FUZMkbvSp+89Id8OlF25cBRZOtr5pTnLMNvWEbs6Xo DG109RZJzdtYegfyXIkpXu48MRay7iXvBQcO97aC4puHI4k/s17+TvCdQ7e5Q/25 MxsFnRS9j3DD4eNmwbV3Y1AxEnmKSfPcAeg95inqCmxWaTBRi0VTMpzTDqA/mxDB FpxpyhLkcG7/fOdD1Z0lT+vFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJkyDJZ /3bz2gu2d6dUdTV75p6QMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkQjPGfIuuGZpiYPK79bP+smnqyfniUgqUmm2mgdbfUFiV+2KnmOns xdnf8/RmfOAx2q1X56AhLyfzM7Ma3lTkIK8O1/8b3lNlI4RIYbbGDteNn18MiEAo NhlrFRPZJwh9oSsmOShpv+0B4eiSTVyKnJx+FuhX+qqQ7TrwHyWIbYBwF3KRATCG 2N9fz70nIt6vNhcQjIsUHXzpVfoUiQ1bYPqNAWF/Wqmk5fjm/+ZL0PGTpnC+LVDa HSFGd2rjBbhfpFWijOk0IR2BASU30SjWFhkqex/ZGnMPGwtOKBlSrZEcc0MHchPW H1LdulEpieDGXFiE7fPE6FsQUJ7gEGss -----END CERTIFICATE-----Generated at Tue Jun 10 10:44:36 2025 by rpki-client