$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: viROjBYk178x1RagBJAQrjvlvr8tPMjabgUvM+GHMGA= Subject key identifier: 00:47:83:A4:34:CE:B5:DB:AD:7D:79:F0:EA:56:D4:2A:ED:FE:2F:18 Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 069A Signing time: Mon 02 Jun 2025 20:55:26 +0000 Manifest this update: Mon 02 Jun 2025 20:55:25 +0000 Manifest next update: Mon 09 Jun 2025 20:55:25 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: aEEIz5TVRXnmLGdeBCqeaYSOmw3COmD722pvT6MzdDQ=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: lAVQxnaIpb4+FR/69nne2013Hk4eswtCR3VSmU3tbJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Jun 2 20:55:25 2025 GMT Not After : Jun 9 20:55:25 2025 GMT Subject: CN=683e0fbe-1f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:e3:9e:66:4c:a0:86:be:42:2f:28:7d:15: 1a:63:3b:51:a8:55:b4:2d:ed:14:3a:6d:ca:bb:00: 6b:87:91:eb:6a:6a:55:2a:95:84:aa:d8:1f:28:ab: 8d:28:98:c0:8d:3e:ab:12:81:83:68:c7:f3:5e:8d: 37:5a:8b:6e:68:32:69:98:a8:73:12:6e:6a:9a:59: df:34:30:fe:59:26:1f:54:26:c5:46:e3:3d:46:b9: d5:f9:ee:62:ba:d4:fd:0e:0b:20:d1:90:97:a6:8d: 82:16:58:e4:97:a5:5b:4a:c2:59:2b:6f:be:70:85: 0d:fc:e0:38:2d:1c:e7:d5:7c:93:cd:a8:90:b5:08: ab:56:24:cc:29:dc:36:b9:0b:2f:d2:87:1f:8f:25: 91:2f:76:69:ca:35:ef:76:e6:0b:70:da:c4:03:ea: 5e:20:18:b1:95:f1:e8:ca:4c:62:77:bd:54:48:fb: 3f:c2:3d:57:aa:57:f4:b9:f4:70:dc:27:92:c8:ca: 78:7d:a7:e7:91:ae:76:39:bc:38:58:bf:f8:bd:d8: fa:07:68:21:85:aa:74:a5:6f:6e:e5:74:ab:7e:5f: 69:12:ec:de:12:06:06:c7:be:55:ca:06:08:ab:02: 27:e0:98:af:5a:07:e0:cf:3d:06:f1:c0:49:2b:5b: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:47:83:A4:34:CE:B5:DB:AD:7D:79:F0:EA:56:D4:2A:ED:FE:2F:18 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:95:cb:e0:8a:b9:da:56:a6:6b:c1:b6:d7:64:13:5e:56:b5: f9:b1:eb:e0:f7:42:66:9b:9a:82:76:12:55:b0:a9:c6:56:02: be:b0:bc:81:35:4e:f3:12:de:9a:94:92:87:6d:f2:46:e7:dd: 62:93:98:5e:90:3f:0f:31:3a:7b:4d:0f:b1:81:4b:e3:b0:09: 72:7e:c2:5e:36:40:88:6e:7c:54:72:dd:34:62:89:af:82:6e: f3:5d:51:2d:5e:74:41:3e:20:cb:e7:b5:94:27:d7:b0:92:d6: 53:9e:7c:d6:9a:fd:ba:33:b8:7d:4a:74:82:1a:70:54:5c:d0: e6:4c:0b:90:3b:33:94:4c:d5:9c:95:b0:82:c6:41:08:44:b9: fe:56:a0:c5:af:48:81:36:74:83:2f:6e:a5:b8:4f:10:94:0c: 85:37:6d:e3:8f:98:ca:d0:ce:cc:5a:41:04:d7:06:4e:d5:80: 62:79:6d:1a:17:42:3f:d7:57:70:54:32:25:dd:4e:f1:24:32: ad:b1:7e:e8:bb:42:52:7c:b8:23:30:c6:30:5e:b1:60:c2:ad: da:77:2b:32:61:30:d1:c8:04:c4:a0:82:ec:9a:d8:1f:bd:53: 58:05:28:63:e3:56:0e:a8:18:f4:21:89:2d:86:e1:91:d2:c2: 84:fa:29:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUwNjAyMjA1NTI1WhcNMjUwNjA5MjA1NTI1WjAYMRYwFAYD VQQDEw02ODNlMGZiZS0xZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmejjnmZMoIa+Qi8ofRUaYztRqFW0Le0UOm3KuwBrh5HrampVKpWEqtgfKKuN KJjAjT6rEoGDaMfzXo03WotuaDJpmKhzEm5qmlnfNDD+WSYfVCbFRuM9RrnV+e5i utT9Dgsg0ZCXpo2CFljkl6VbSsJZK2++cIUN/OA4LRzn1XyTzaiQtQirViTMKdw2 uQsv0ocfjyWRL3ZpyjXvduYLcNrEA+peIBixlfHoykxid71USPs/wj1Xqlf0ufRw 3CeSyMp4fafnka52Obw4WL/4vdj6B2ghhap0pW9u5XSrfl9pEuzeEgYGx75VygYI qwIn4JivWgfgzz0G8cBJK1tHfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABHg6Q0 zrXbrX158OpW1Crt/i8YMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxlcvgirnaVqZrwbbXZBNeVrX5sevg90Jmm5qCdhJVsKnGVgK+sLyB NU7zEt6alJKHbfJG591ik5hekD8PMTp7TQ+xgUvjsAlyfsJeNkCIbnxUct00Yomv gm7zXVEtXnRBPiDL57WUJ9ewktZTnnzWmv26M7h9SnSCGnBUXNDmTAuQOzOUTNWc lbCCxkEIRLn+VqDFr0iBNnSDL26luE8QlAyFN23jj5jK0M7MWkEE1wZO1YBieW0a F0I/11dwVDIl3U7xJDKtsX7ou0JSfLgjMMYwXrFgwq3adysyYTDRyATEoILsmtgf vVNYBShj41YOqBj0IYkthuGR0sKE+inl -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:51 2025 by rpki-client