$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: KWeLuaxG8Ns/Zb99NhhYu3YQz0TwUxezvwZDETVEmbY= Subject key identifier: FC:9B:48:5A:D5:E8:70:42:6C:72:3A:08:A0:30:3B:19:A3:ED:56:0B Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:54:36 +0000 Manifest this update: Sat 31 May 2025 05:54:36 +0000 Manifest next update: Sat 07 Jun 2025 05:54:36 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: ip81zees3zWr773Chk20om4A7Yi6mUuSJNoryGtKPQk=) 2: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (hash: DfXJNnGu5R78q4knIp+T6nbwy/V4l/65/i/LBotIC/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: May 31 05:54:36 2025 GMT Not After : Jun 7 05:54:36 2025 GMT Subject: CN=683a999c-213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:11:83:2a:19:72:08:db:27:36:d9:26:41: 61:30:47:b2:d4:b4:a8:c3:44:5b:1e:51:80:65:d5: e3:65:8e:49:19:c8:7e:48:de:5f:86:af:c1:2c:d7: 8f:b5:38:2c:93:f1:67:bf:a4:a9:f1:19:d0:c9:40: bf:34:17:5b:d3:fd:3c:d5:8b:34:eb:6a:09:06:ba: 61:e2:b8:30:34:cc:24:7b:25:3a:1c:dc:93:29:5d: 73:e1:a1:38:81:1c:19:da:05:74:7f:df:ad:da:d8: 01:70:0b:60:f6:a6:42:3c:5a:73:33:cd:d9:bc:b0: 90:e5:0f:ab:5c:61:03:bd:a5:43:f1:58:73:4d:a4: 7e:a6:4b:d2:4a:56:c2:c3:bf:e8:6d:60:5b:71:49: d4:fd:00:d5:24:f2:2f:13:1a:80:79:97:0a:f8:ca: 5b:09:5f:55:f6:5f:7c:df:f0:e6:f1:72:3c:bc:18: e8:0d:60:bf:e8:3d:dc:b5:dc:02:47:c3:47:14:c8: 89:1e:d2:28:dd:8d:c3:d6:4e:bb:4b:b3:85:2c:86: 5e:62:7d:26:cc:5d:8b:90:70:de:8c:ff:4b:f4:4a: bf:6a:00:91:5a:9d:59:b2:60:cd:3c:ff:87:98:c8: 39:77:36:47:c2:87:d5:87:af:c9:5c:95:c8:f6:90: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9B:48:5A:D5:E8:70:42:6C:72:3A:08:A0:30:3B:19:A3:ED:56:0B X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:34:bb:60:70:ed:37:e1:68:5a:0d:5e:d6:12:5b:17:dd:71: 3c:ba:85:31:3c:c6:38:9d:43:a3:29:30:23:a6:e0:5a:f4:d7: 83:92:5d:64:93:2f:35:af:57:fb:bf:91:66:ce:1a:2f:98:9b: a3:58:c5:be:18:26:78:aa:a0:ee:c0:fe:3d:46:55:0c:dc:31: 7a:64:d2:c8:7d:25:a5:18:43:fd:9b:5d:95:f1:4b:a4:84:25: 5e:79:4f:73:09:8f:c7:d8:2f:bd:cc:7e:5a:fc:cd:e7:29:b3: a7:37:ab:cc:3d:1e:f9:e4:00:e0:58:a9:1a:81:fd:0e:d2:47: b7:71:78:ad:ce:7f:21:e4:94:ac:28:1a:47:e1:7e:94:47:37: d5:13:49:4f:54:8e:16:49:b4:fa:57:5c:8e:9e:a5:c5:85:5d: 61:b4:a2:99:01:37:a4:bb:4d:66:2e:1a:79:4f:7e:c9:3a:62: 0c:c1:c0:0a:53:03:79:3b:ea:a7:b2:5d:2a:6f:49:60:7d:d5: 30:6d:20:d2:31:3c:bf:d5:0c:96:47:12:04:4b:12:2a:9e:00: 5c:a0:ca:41:a5:3d:8c:1c:eb:c7:54:92:a6:b9:14:8e:80:06: 5d:3d:94:e9:20:e1:58:d9:1b:78:11:25:0e:a3:07:9b:43:af: a5:cc:37:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZGNkJBMEI2RUQ2 Q0M0MUUxMEIwHhcNMjUwNTMxMDU1NDM2WhcNMjUwNjA3MDU1NDM2WjAYMRYwFAYD VQQDEw02ODNhOTk5Yy0yMTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PgRgyoZcgjbJzbZJkFhMEey1LSow0RbHlGAZdXjZY5JGch+SN5fhq/BLNeP tTgsk/Fnv6Sp8RnQyUC/NBdb0/081Ys062oJBrph4rgwNMwkeyU6HNyTKV1z4aE4 gRwZ2gV0f9+t2tgBcAtg9qZCPFpzM83ZvLCQ5Q+rXGEDvaVD8VhzTaR+pkvSSlbC w7/obWBbcUnU/QDVJPIvExqAeZcK+MpbCV9V9l983/Dm8XI8vBjoDWC/6D3ctdwC R8NHFMiJHtIo3Y3D1k67S7OFLIZeYn0mzF2LkHDejP9L9Eq/agCRWp1ZsmDNPP+H mMg5dzZHwofVh6/JXJXI9pDsaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPybSFrV 6HBCbHI6CKAwOxmj7VYLMB8GA1UdIwQYMBaAFIGZSTrSZa0txzOW9roLbtbMQeEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREMzMi8wRjA5Mjg1NDVB REUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJTM0hNNWIydWd0dTFzeEI0 UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJT M0hNNWIydWd0dTFzeEI0UXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrNLtgcO034WhaDV7WElsX3XE8uoUxPMY4nUOjKTAjpuBa9NeDkl1k ky81r1f7v5FmzhovmJujWMW+GCZ4qqDuwP49RlUM3DF6ZNLIfSWlGEP9m12V8Uuk hCVeeU9zCY/H2C+9zH5a/M3nKbOnN6vMPR755ADgWKkagf0O0ke3cXitzn8h5JSs KBpH4X6URzfVE0lPVI4WSbT6V1yOnqXFhV1htKKZATeku01mLhp5T37JOmIMwcAK UwN5O+qnsl0qb0lgfdUwbSDSMTy/1QyWRxIESxIqngBcoMpBpT2MHOvHVJKmuRSO gAZdPZTpIOFY2Rt4ESUOowebQ6+lzDcb -----END CERTIFICATE-----Generated at Sat May 31 17:18:56 2025 by rpki-client