$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: ZxcJI+6vEWsMtcPnProyfulxNzq4tKFzSTiXhWTbwxM= Subject key identifier: F4:CB:E1:B6:B8:47:BC:12:C2:85:BA:B3:FD:FE:AB:C0:5A:F2:43:02 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 12CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 12B7 Signing time: Sun 08 Jun 2025 16:58:15 +0000 Manifest this update: Sun 08 Jun 2025 16:58:14 +0000 Manifest next update: Sun 15 Jun 2025 16:58:14 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: U1iozYTf4CgsXgKA5foebdAdcNYhwoLydp8qKPAPm6I=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 16:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4813 (0x12cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Jun 8 16:58:14 2025 GMT Not After : Jun 15 16:58:14 2025 GMT Subject: CN=6845c127-f851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:67:4f:76:69:ee:03:db:16:76:2a:ff:d5: 8f:ea:f0:91:49:37:cd:e9:c3:93:ef:a5:07:ad:ac: 86:4d:37:56:3c:99:de:c6:56:46:9f:fb:2c:76:58: e8:a1:d3:2e:ea:51:d4:13:53:b4:6d:51:50:94:7f: 2a:d5:53:08:1a:33:72:6c:59:19:1f:32:70:c3:ee: cb:a9:7c:63:8c:fd:06:4d:ec:b7:88:b2:ec:e1:fc: c7:b1:c7:05:76:36:1a:77:b3:ce:85:e9:e4:b0:68: f1:d5:c8:89:f5:c6:32:f5:76:e2:d5:65:b4:99:c8: 2a:21:e5:49:a1:0b:d9:7f:08:b6:14:a9:08:33:de: 7d:a2:6e:25:77:f1:2e:6e:98:e2:dc:49:5d:6a:7f: 30:fd:03:f7:d3:5a:a5:76:c0:8b:39:e5:15:94:a9: 81:e6:28:79:36:32:e5:2f:47:cc:f7:e7:09:e4:bc: 58:58:e4:d6:b3:92:20:4f:ae:38:aa:31:f4:85:66: fa:6a:2d:03:bb:b5:6f:3a:c9:5d:c8:1a:13:f9:08: 28:40:39:c0:ef:35:d0:8b:20:26:b8:33:32:cb:69: 26:cb:e4:68:ce:81:d0:d8:18:82:61:39:67:59:bf: dc:b7:4f:ed:75:63:fb:4b:6b:75:2e:a4:e1:62:a0: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CB:E1:B6:B8:47:BC:12:C2:85:BA:B3:FD:FE:AB:C0:5A:F2:43:02 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:c6:2f:dc:69:b5:01:cc:a0:e2:8c:2b:53:63:19:af:dc:45: 96:05:cc:a5:10:7b:ea:f4:5f:50:61:5b:8d:92:68:49:f0:ec: 5b:bc:be:9e:90:46:79:e8:c8:81:7c:fe:99:c5:f0:52:4c:ba: d4:ef:58:8a:07:3e:21:ff:86:af:64:49:1f:72:20:b3:6e:f1: 5c:cc:4b:3b:3d:d8:f6:bd:2c:78:fe:32:5e:f2:11:27:15:e4: 2e:b2:1c:ad:e1:8e:36:24:36:93:49:f5:bd:1d:a9:95:d7:58: 66:11:09:7d:41:c9:83:f9:21:d8:8c:a2:98:58:cc:51:95:9f: a0:bd:64:a6:e4:8e:47:1d:c7:d7:0f:bd:5b:6d:0b:30:43:3a: 2f:fd:cd:fd:26:9f:19:0e:14:90:40:dc:1c:a3:f7:a2:6b:67: e7:fe:11:f7:d2:d9:ba:06:5f:c5:0f:86:12:9f:34:48:a3:65: be:84:1e:2b:0a:49:5b:e4:f5:7e:f2:ad:24:15:06:a9:50:17: 7d:ff:a6:99:88:bc:7e:cd:da:22:88:5b:d4:62:cd:8c:d3:33: 63:1b:2c:a7:29:33:c2:49:a1:2e:9f:95:72:b5:ea:77:93:f6: 90:ea:a1:15:29:70:27:d8:f8:0b:8e:f9:7a:65:6b:a1:e7:9d: 7e:0f:28:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUwNjA4MTY1ODE0WhcNMjUwNjE1MTY1ODE0WjAYMRYwFAYD VQQDEw02ODQ1YzEyNy1mODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOxnT3Zp7gPbFnYq/9WP6vCRSTfN6cOT76UHrayGTTdWPJnexlZGn/ssdljo odMu6lHUE1O0bVFQlH8q1VMIGjNybFkZHzJww+7LqXxjjP0GTey3iLLs4fzHsccF djYad7POhenksGjx1ciJ9cYy9Xbi1WW0mcgqIeVJoQvZfwi2FKkIM959om4ld/Eu bpji3Eldan8w/QP301qldsCLOeUVlKmB5ih5NjLlL0fM9+cJ5LxYWOTWs5IgT644 qjH0hWb6ai0Du7VvOsldyBoT+QgoQDnA7zXQiyAmuDMyy2kmy+RozoHQ2BiCYTln Wb/ct0/tdWP7S2t1LqThYqCqhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTL4ba4 R7wSwoW6s/3+q8Ba8kMCMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrxi/cabUBzKDijCtTYxmv3EWWBcylEHvq9F9QYVuNkmhJ8OxbvL6e kEZ56MiBfP6ZxfBSTLrU71iKBz4h/4avZEkfciCzbvFczEs7Pdj2vSx4/jJe8hEn FeQushyt4Y42JDaTSfW9HamV11hmEQl9QcmD+SHYjKKYWMxRlZ+gvWSm5I5HHcfX D71bbQswQzov/c39Jp8ZDhSQQNwco/eia2fn/hH30tm6Bl/FD4YSnzRIo2W+hB4r Cklb5PV+8q0kFQapUBd9/6aZiLx+zdoiiFvUYs2M0zNjGyynKTPCSaEun5Vytep3 k/aQ6qEVKXAn2PgLjvl6ZWuh551+DygY -----END CERTIFICATE-----Generated at Tue Jun 10 00:45:57 2025 by rpki-client