$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: oWB9xCCkHM8gfHd59yNOtrItwOTrcL/4ZlhfHyxBrSA= Subject key identifier: 8A:FB:F5:17:8C:D7:50:6A:73:19:05:76:EA:8F:D9:DC:0F:6D:EE:EC Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 01E5 Signing time: Mon 09 Jun 2025 01:46:31 +0000 Manifest this update: Mon 09 Jun 2025 01:46:30 +0000 Manifest next update: Mon 16 Jun 2025 01:46:30 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: DbSIl2WM8V/iWgK6NNQrVTksZjS0IOW1kcJaPOPJQXk=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: Jun 9 01:46:30 2025 GMT Not After : Jun 16 01:46:30 2025 GMT Subject: CN=68463cf7-9887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c7:88:90:1f:ca:18:b7:16:b6:c8:a7:b4:5b: 9e:88:92:c7:3a:8e:97:24:52:dd:80:ab:b7:08:61: db:00:7c:c8:53:b6:46:43:21:40:93:86:35:2d:52: b0:55:fe:4c:09:c5:d5:da:b6:3e:52:f2:0c:81:52: 5b:1e:e2:a1:e8:95:99:14:f9:23:6a:8a:27:b5:8c: 1c:49:af:4e:a7:9a:59:6e:37:c2:d0:2b:9c:a4:2d: ae:14:b7:b2:ab:a3:75:f4:d4:ed:f5:f3:0f:15:08: e7:18:eb:7f:f2:92:0f:2f:63:57:d6:73:c7:53:26: fd:73:17:98:de:f2:cb:23:50:3a:3d:7b:97:2b:4d: 30:a1:23:b4:8b:23:c2:7d:c7:9d:02:48:2e:c0:af: bc:90:16:db:0f:95:56:fb:eb:94:87:40:1f:64:3a: 79:65:ba:7b:5d:ac:7d:a3:42:5c:c2:2e:b0:27:1b: db:2f:b9:16:c3:b8:f9:c4:6f:ff:4e:78:63:69:9b: 89:4e:2e:cd:54:0f:7f:79:7b:c8:c9:39:f5:1b:e2: 12:96:65:80:27:9c:7d:ff:9c:22:0a:32:1a:8d:11: d4:61:49:bc:2d:3b:5a:ab:59:ff:7a:4e:07:09:dd: 95:5d:60:7c:fb:36:cb:43:32:0e:1a:21:bd:94:06: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FB:F5:17:8C:D7:50:6A:73:19:05:76:EA:8F:D9:DC:0F:6D:EE:EC X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ba:0b:2d:0d:ac:b4:76:21:9e:47:56:b1:76:90:5a:18:a4: c5:0a:36:b6:60:17:33:d6:a0:c8:7c:f2:7b:13:da:e9:19:5c: ba:f0:75:59:dd:fd:df:59:61:72:f3:d8:e1:44:d6:02:e4:73: 0e:86:97:8d:80:d7:74:f2:e2:e2:6a:ce:d7:de:af:4d:b1:af: bf:b6:3e:97:af:83:b6:be:d6:1a:d9:f5:c9:b5:a3:bb:fd:cd: bb:4d:09:85:ac:ef:0a:1f:ff:df:98:d6:4f:30:04:b8:94:7d: 17:44:3f:6b:ac:87:f8:b3:59:7d:84:2f:a2:77:28:e2:1a:78: ca:92:c4:d0:73:bc:07:83:bd:e3:82:c8:65:80:11:04:90:90: 97:97:09:cd:71:f4:1a:24:db:ed:4c:0a:76:6e:1c:19:9d:d5: f9:2d:60:91:7a:61:05:f9:26:c1:60:93:e0:ca:d1:d0:8d:e9: 19:0f:ab:0b:91:d1:5c:48:94:83:92:93:58:1e:3a:09:4e:ee: 4b:5c:dc:06:a1:20:33:34:99:f3:37:08:4c:77:91:1e:86:29: 83:2c:33:d7:ea:d4:73:90:13:ee:49:d0:f4:94:ce:35:1b:8c: e9:dd:74:48:0e:fc:3f:fd:ed:d7:b6:c1:47:75:05:6c:50:d8: 5a:b9:21:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjUwNjA5MDE0NjMwWhcNMjUwNjE2MDE0NjMwWjAYMRYwFAYD VQQDEw02ODQ2M2NmNy05ODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28eIkB/KGLcWtsintFueiJLHOo6XJFLdgKu3CGHbAHzIU7ZGQyFAk4Y1LVKw Vf5MCcXV2rY+UvIMgVJbHuKh6JWZFPkjaoontYwcSa9Op5pZbjfC0CucpC2uFLey q6N19NTt9fMPFQjnGOt/8pIPL2NX1nPHUyb9cxeY3vLLI1A6PXuXK00woSO0iyPC fcedAkguwK+8kBbbD5VW++uUh0AfZDp5Zbp7Xax9o0Jcwi6wJxvbL7kWw7j5xG// TnhjaZuJTi7NVA9/eXvIyTn1G+ISlmWAJ5x9/5wiCjIajRHUYUm8LTtaq1n/ek4H Cd2VXWB8+zbLQzIOGiG9lAbEcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr79ReM 11BqcxkFduqP2dwPbe7sMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ugstDay0diGeR1axdpBaGKTFCja2YBcz1qDIfPJ7E9rpGVy68HVZ 3f3fWWFy89jhRNYC5HMOhpeNgNd08uLias7X3q9Nsa+/tj6Xr4O2vtYa2fXJtaO7 /c27TQmFrO8KH//fmNZPMAS4lH0XRD9rrIf4s1l9hC+idyjiGnjKksTQc7wHg73j gshlgBEEkJCXlwnNcfQaJNvtTAp2bhwZndX5LWCRemEF+SbBYJPgytHQjekZD6sL kdFcSJSDkpNYHjoJTu5LXNwGoSAzNJnzNwhMd5EehimDLDPX6tRzkBPuSdD0lM41 G4zp3XRIDvw//e3XtsFHdQVsUNhauSFe -----END CERTIFICATE-----Generated at Mon Jun 9 17:54:29 2025 by rpki-client