$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: hK6KKWvpKZt/CqLTXvXMxuwb57+7Kh79XPOEhh7hQTY= Subject key identifier: 3C:B5:84:61:D7:63:E0:04:C2:BD:B9:79:1C:43:A9:2C:9E:B9:9E:F4 Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: 69 Signing time: Mon 09 Jun 2025 05:58:50 +0000 Manifest this update: Mon 09 Jun 2025 05:58:49 +0000 Manifest next update: Mon 16 Jun 2025 05:58:49 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: 8wguyytaU5EtAr/Qubws9/KGHxhKjvEqBdUpHg62Ao8=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 05:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Jun 9 05:58:49 2025 GMT Not After : Jun 16 05:58:49 2025 GMT Subject: CN=68467819-1803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:c6:98:17:33:10:0d:de:14:fa:1b:67:ae: 76:e9:9d:a4:a6:c9:21:b8:95:1f:70:6a:36:15:68: 01:d8:3a:be:48:c3:ea:76:14:88:ae:c4:2b:97:7c: a1:d1:fa:12:3c:b9:54:39:33:f8:04:1c:a1:02:5e: d9:99:65:ac:5b:22:b4:c0:c6:60:f9:27:99:0d:31: 84:d5:16:e6:20:ca:f4:91:8f:94:c3:a5:e4:3b:c3: 0f:69:74:0c:a9:2c:a9:c2:85:52:c5:f2:54:26:98: ee:81:e3:ca:47:80:b3:52:f0:27:dc:8f:a7:5f:33: 6a:c4:ab:6f:16:94:8d:e9:89:0d:2c:b4:e0:d1:34: 0c:bd:bb:2b:9a:19:22:41:aa:f4:b4:f7:9a:9b:33: fc:55:d9:20:4e:eb:bb:68:74:e8:03:00:aa:9c:55: b7:d1:96:84:64:49:89:ee:6c:0e:a7:3c:ed:80:8c: c4:08:5d:ad:88:a9:1a:4f:9c:30:71:13:b4:3e:fa: c4:05:c6:a3:92:b6:b2:c6:85:28:63:6e:a1:38:5a: a4:eb:c9:26:2e:84:fd:74:8c:d0:2f:bb:5d:94:9a: 03:f4:25:66:99:b8:da:8d:0f:5d:b3:8b:dd:5d:40: 5f:6a:8f:eb:a4:29:6d:59:0a:52:b0:41:bd:46:84: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B5:84:61:D7:63:E0:04:C2:BD:B9:79:1C:43:A9:2C:9E:B9:9E:F4 X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6d:45:26:01:cd:11:14:e6:f6:77:01:89:d5:7a:4a:57:00: 15:4d:9b:45:b5:3b:c1:49:e9:56:68:ec:57:ba:d4:46:97:6c: 18:82:3e:cd:75:75:70:c5:64:5c:38:df:2e:ba:9f:86:ff:00: 93:43:b7:24:bd:4c:78:c1:07:db:3a:0c:00:b9:1f:12:ae:f4: f1:24:d0:90:f9:b4:f2:20:8a:46:74:59:fb:e5:7d:79:ac:fe: 24:e1:90:0c:33:59:2f:03:bb:84:91:2b:41:e4:65:f2:ab:7f: b6:0d:fe:6e:c6:38:44:3b:72:fc:71:40:b9:f8:c7:af:d5:b8: cd:0e:23:f4:c0:40:bd:3a:a2:f6:77:73:4d:27:41:68:6f:94: 71:14:ee:7c:8f:8b:25:9d:72:a4:94:19:54:26:e4:19:3b:3c: ac:34:6e:30:e6:55:24:87:56:c7:4d:82:e3:ad:b5:f2:72:aa: 57:3b:b5:a6:16:ec:09:9c:25:84:11:00:29:06:07:49:8e:b6: b9:3e:e3:bc:bd:bf:d3:b6:91:39:bd:b3:3e:53:e7:e5:54:1a: 7a:ec:5d:47:1d:e8:18:e0:b8:4e:7a:fa:10:65:88:91:27:84: 6b:5b:ae:7e:32:56:8b:a6:4c:43:3f:ff:19:d9:28:74:6f:72: 53:64:83:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoODJBNzY5REQ3NDZDODMxRjRDNERCMjlENkE2NURFMDhE NkFEOTVFRDAeFw0yNTA2MDkwNTU4NDlaFw0yNTA2MTYwNTU4NDlaMBgxFjAUBgNV BAMTDTY4NDY3ODE5LTE4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnhMaYFzMQDd4U+htnrnbpnaSmySG4lR9wajYVaAHYOr5Iw+p2FIiuxCuXfKHR +hI8uVQ5M/gEHKECXtmZZaxbIrTAxmD5J5kNMYTVFuYgyvSRj5TDpeQ7ww9pdAyp LKnChVLF8lQmmO6B48pHgLNS8Cfcj6dfM2rEq28WlI3piQ0stODRNAy9uyuaGSJB qvS095qbM/xV2SBO67todOgDAKqcVbfRloRkSYnubA6nPO2AjMQIXa2IqRpPnDBx E7Q++sQFxqOStrLGhShjbqE4WqTrySYuhP10jNAvu12UmgP0JWaZuNqND12zi91d QF9qj+ukKW1ZClKwQb1GhOO9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPLWEYddj 4ATCvbl5HEOpLJ65nvQwHwYDVR0jBBgwFoAUgqdp3XRsgx9MTbKdamXeCNatle0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzc0OTEyQjJDQUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3FkcDNYUnNneDlNVGJLZGFtWGVDTmF0bGUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MUFFLzc0OTEyQjJDQUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5 TVRiS2RhbVhlQ05hdGxlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZtRSYBzREU5vZ3AYnVekpXABVNm0W1O8FJ6VZo7Fe61EaXbBiCPs11 dXDFZFw43y66n4b/AJNDtyS9THjBB9s6DAC5HxKu9PEk0JD5tPIgikZ0WfvlfXms /iThkAwzWS8Du4SRK0HkZfKrf7YN/m7GOEQ7cvxxQLn4x6/VuM0OI/TAQL06ovZ3 c00nQWhvlHEU7nyPiyWdcqSUGVQm5Bk7PKw0bjDmVSSHVsdNguOttfJyqlc7taYW 7AmcJYQRACkGB0mOtrk+47y9v9O2kTm9sz5T5+VUGnrsXUcd6BjguE56+hBliJEn hGtbrn4yVoumTEM//xnZKHRvclNkg5U= -----END CERTIFICATE-----Generated at Wed Jun 11 07:16:26 2025 by rpki-client