$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: cefaAJlcXl5a0Xymg9l8hJXaH+T4/U2lZPXGYe+NN8o= Subject key identifier: AE:41:3E:E6:BF:50:65:DB:86:EB:F9:06:05:3F:EC:CB:52:82:2B:D9 Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: 8B Signing time: Mon 21 Jul 2025 06:44:28 +0000 Manifest this update: Mon 21 Jul 2025 06:44:27 +0000 Manifest next update: Mon 28 Jul 2025 06:44:27 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: zg8biRY/sL3PQIKm4GfXE8pBZGdOb5yHDRJ0BXYmD24=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Jul 21 06:44:27 2025 GMT Not After : Jul 28 06:44:27 2025 GMT Subject: CN=687de1cb-e1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:e0:dd:a9:1c:6e:e5:e6:2a:5f:f0:dd:ec: 09:b0:ea:6b:9c:a7:8e:f8:6e:31:7f:6c:c3:9a:6d: f6:28:a0:de:d6:00:df:20:76:71:eb:ba:d6:c3:24: d3:83:4f:62:91:bf:9c:4e:b8:40:f3:3d:bd:c1:6c: a7:58:52:8c:d0:87:00:e9:39:ca:f4:7c:82:1f:54: b8:3f:2b:90:a7:d4:d1:c6:85:1c:66:94:df:dd:cc: a5:7a:fe:c5:3b:32:2f:4c:13:8e:6a:b8:e5:0e:a5: 33:e5:7d:5d:b3:10:e2:e0:13:71:dd:ef:71:c9:6d: 0e:df:03:09:cd:ea:4b:96:4b:66:b8:2c:52:c6:67: b0:50:a8:00:96:5d:f5:4f:a4:ff:6b:05:20:cd:b8: 8c:97:bb:18:20:19:04:40:07:9d:9a:b2:76:d7:4c: c6:02:5c:60:d4:90:ec:be:7a:b0:20:32:50:e8:72: 9f:d2:80:6d:cf:e8:a6:5d:e5:be:46:72:13:59:a6: 24:5f:a3:eb:83:40:1e:44:08:ad:62:67:7f:2b:dc: 6f:48:ab:cc:72:21:ae:ba:d8:12:4c:51:84:89:3f: 69:2d:a7:7d:40:e3:c9:f2:6a:7e:b2:7c:87:f2:6d: 37:e0:96:0d:31:c7:31:e9:6b:aa:76:de:ae:8a:04: eb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:41:3E:E6:BF:50:65:DB:86:EB:F9:06:05:3F:EC:CB:52:82:2B:D9 X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:77:5c:f6:b1:7b:96:31:60:5d:2f:ee:33:dc:3d:8c:0c:0b: 16:9b:7f:74:6b:a6:27:06:c5:43:8b:3c:28:92:4e:36:14:c0: 1e:c3:d3:87:f0:24:8a:8d:f7:3c:0a:60:27:e2:ad:1c:a3:b8: 33:5f:ae:77:e7:0f:fc:b3:5e:9e:a5:a9:35:d8:a5:ce:76:d8: 07:75:2f:67:3a:44:87:89:5d:b1:f5:94:c6:c6:92:18:a9:20: 13:3e:d9:98:46:a3:d3:4e:a1:d7:6e:8f:0f:ce:7f:8c:17:c7: bb:4d:68:02:7d:8e:8a:08:6b:df:89:6e:ec:19:d6:e8:7c:a8: 68:af:2a:9d:9f:93:40:d1:75:82:b9:26:a7:49:27:34:52:a3: 3d:df:ba:12:dd:74:ee:d1:c1:35:dc:5e:03:83:98:1c:85:da: ef:85:d6:0b:ed:12:57:8d:8b:7f:20:c9:3a:62:ee:94:60:1b: b6:0f:6f:f1:87:f3:62:1e:75:fd:03:05:cf:59:c3:c1:96:1b: 32:22:83:a6:52:9b:e8:66:3e:1f:f6:3d:ac:59:64:15:3e:93: 64:16:c5:af:49:a7:d5:02:60:8e:80:44:78:dc:7d:63:88:95: 9b:e7:77:68:dc:e7:c1:13:5d:80:af:9b:90:89:a8:16:74:b0: 04:ef:8b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy NDIyRUI2NkYwHhcNMjUwNzIxMDY0NDI3WhcNMjUwNzI4MDY0NDI3WjAYMRYwFAYD VQQDEw02ODdkZTFjYi1lMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz7g3akcbuXmKl/w3ewJsOprnKeO+G4xf2zDmm32KKDe1gDfIHZx67rWwyTT g09ikb+cTrhA8z29wWynWFKM0IcA6TnK9HyCH1S4PyuQp9TRxoUcZpTf3cylev7F OzIvTBOOarjlDqUz5X1dsxDi4BNx3e9xyW0O3wMJzepLlktmuCxSxmewUKgAll31 T6T/awUgzbiMl7sYIBkEQAedmrJ210zGAlxg1JDsvnqwIDJQ6HKf0oBtz+imXeW+ RnITWaYkX6Prg0AeRAitYmd/K9xvSKvMciGuutgSTFGEiT9pLad9QOPJ8mp+snyH 8m034JYNMccx6Wuqdt6uigTrgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5BPua/ UGXbhuv5BgU/7MtSgivZMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0 bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51 VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvd1z2sXuWMWBdL+4z3D2MDAsWm390a6YnBsVDizwokk42FMAew9OH 8CSKjfc8CmAn4q0co7gzX6535w/8s16epak12KXOdtgHdS9nOkSHiV2x9ZTGxpIY qSATPtmYRqPTTqHXbo8Pzn+MF8e7TWgCfY6KCGvfiW7sGdbofKhoryqdn5NA0XWC uSanSSc0UqM937oS3XTu0cE13F4Dg5gchdrvhdYL7RJXjYt/IMk6Yu6UYBu2D2/x h/NiHnX9AwXPWcPBlhsyIoOmUpvoZj4f9j2sWWQVPpNkFsWvSafVAmCOgER43H1j iJWb53do3OfBE12Ar5uQiagWdLAE74v6 -----END CERTIFICATE-----Generated at Mon Jul 21 07:44:53 2025 by rpki-client