$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json) Hash identifier: HEK69Z/d3oppEtLYas2y0P9r0S3818KcYtxXGhZ5+K0= Subject key identifier: 21:DD:EA:03:F0:50:5A:A7:D5:EC:19:2B:90:65:55:DE:71:EC:69:28 Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft Manifest number: 0444 Signing time: Thu 05 Jun 2025 00:07:36 +0000 Manifest this update: Thu 05 Jun 2025 00:07:35 +0000 Manifest next update: Thu 12 Jun 2025 00:07:35 +0000 Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: M51F9I9obse21uatxWgXeyB2vb+dgXnvMiCE3hLFeLc=) 2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: Y2D4bZVCWRU0pKNmh7gUDg+LE8MSxtojGL7g4PBL1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Validity Not Before: Jun 5 00:07:35 2025 GMT Not After : Jun 12 00:07:35 2025 GMT Subject: CN=6840dfc8-060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:d8:b6:ca:38:b3:34:38:0c:2a:00:e8:9c: 24:14:c4:e7:9c:43:31:a4:cf:9e:a3:92:24:2d:fd: 44:25:07:ad:ed:a3:c9:6e:4e:8b:fa:15:91:9e:37: 13:37:38:e7:b0:62:bc:b6:82:35:3c:af:26:82:82: 2a:f0:7a:3b:58:9f:d9:f9:bb:e3:81:c1:49:31:24: c0:fd:4a:e6:35:74:48:d8:81:a6:35:08:78:f0:70: 9c:d3:bd:7d:cb:82:51:93:c9:36:b6:c3:d1:6f:37: 05:17:e3:f3:a7:f8:96:ad:0a:7e:ff:df:c2:cf:5c: 9b:e7:3d:43:f0:cd:f0:3f:b6:fd:37:81:e6:48:f2: 8a:21:57:46:5d:75:cd:11:8a:13:d2:5c:2e:f6:a3: 89:5c:ce:6c:fe:57:93:7f:96:b3:15:b0:df:1b:f6: 08:00:b3:47:1b:52:a3:fc:bb:42:4e:68:51:4f:56: 07:b7:fe:5b:e6:64:0c:6b:0e:9f:bf:72:58:cf:eb: 6a:a3:25:e3:24:83:95:05:7e:04:8b:07:2c:9b:83: 31:3b:b9:bb:ca:48:3f:1c:f3:6c:29:47:14:44:04: 14:58:dd:ba:86:0e:b4:04:e9:54:91:c0:8d:f2:9d: dc:2a:7c:f8:62:ce:0f:c8:b6:3c:7e:38:55:a6:90: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DD:EA:03:F0:50:5A:A7:D5:EC:19:2B:90:65:55:DE:71:EC:69:28 X509v3 Authority Key Identifier: keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dd:1a:b2:11:07:72:e8:83:58:95:af:4c:fa:13:c9:0b:ff: d5:80:b2:54:83:4a:e4:58:83:85:40:fb:36:b4:13:fa:35:44: ea:48:03:fc:bc:3d:1e:54:cd:16:d6:14:bf:7c:a8:5d:8d:f0: e1:2c:32:40:85:98:0f:e3:ba:c2:24:86:ef:fa:d0:19:eb:da: ae:de:b5:00:65:b4:1d:de:87:e9:7b:c9:e6:9a:40:2d:c9:4d: 9b:38:ee:d4:64:aa:61:76:73:1a:49:b4:70:55:b3:86:b5:cb: c9:4d:a9:df:69:30:c2:ae:c9:08:19:9e:27:0b:05:6f:96:e1: fb:b5:73:37:d4:c0:39:67:94:63:a0:c0:b3:08:d8:f8:e9:77: ae:46:c6:ca:31:3b:21:9c:ab:27:04:44:de:fb:02:93:74:54: 31:d5:af:a0:38:14:ff:8d:56:b8:7d:0f:e5:fa:78:38:52:07: 37:c6:43:35:ec:47:15:b7:84:46:dd:90:25:eb:7f:43:55:ed: ce:d6:b2:ea:36:63:0b:0a:a6:a8:f3:e6:03:75:38:37:4d:d0: 79:a9:95:73:31:1d:44:a1:52:4a:b7:aa:f0:ab:26:e2:05:a4: 56:3f:d7:11:88:b1:f7:cf:b2:2f:2e:b2:ef:08:ed:2f:7f:cf: e9:43:20:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx MjU2MTQxM0MwHhcNMjUwNjA1MDAwNzM1WhcNMjUwNjEyMDAwNzM1WjAYMRYwFAYD VQQDEw02ODQwZGZjOC0wNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDzYtso4szQ4DCoA6JwkFMTnnEMxpM+eo5IkLf1EJQet7aPJbk6L+hWRnjcT NzjnsGK8toI1PK8mgoIq8Ho7WJ/Z+bvjgcFJMSTA/UrmNXRI2IGmNQh48HCc0719 y4JRk8k2tsPRbzcFF+Pzp/iWrQp+/9/Cz1yb5z1D8M3wP7b9N4HmSPKKIVdGXXXN EYoT0lwu9qOJXM5s/leTf5azFbDfG/YIALNHG1Kj/LtCTmhRT1YHt/5b5mQMaw6f v3JYz+tqoyXjJIOVBX4Eiwcsm4MxO7m7ykg/HPNsKUcURAQUWN26hg60BOlUkcCN 8p3cKnz4Ys4PyLY8fjhVppDFCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHd6gPw UFqn1ewZK5BlVd5x7GkoMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5 N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i dUJFVjZDdjl5VlFTVmhRVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa3RqyEQdy6INYla9M+hPJC//VgLJUg0rkWIOFQPs2tBP6NUTqSAP8 vD0eVM0W1hS/fKhdjfDhLDJAhZgP47rCJIbv+tAZ69qu3rUAZbQd3ofpe8nmmkAt yU2bOO7UZKphdnMaSbRwVbOGtcvJTanfaTDCrskIGZ4nCwVvluH7tXM31MA5Z5Rj oMCzCNj46XeuRsbKMTshnKsnBETe+wKTdFQx1a+gOBT/jVa4fQ/l+ng4Ugc3xkM1 7EcVt4RG3ZAl639DVe3O1rLqNmMLCqao8+YDdTg3TdB5qZVzMR1EoVJKt6rwqybi BaRWP9cRiLH3z7IvLrLvCO0vf8/pQyCn -----END CERTIFICATE-----Generated at Thu Jun 5 20:06:31 2025 by rpki-client