$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json) Hash identifier: EIxn39gosO6vC3XRSqIxjF9/GD8GCHpasWmdlrlZUrg= Subject key identifier: A5:7B:05:52:78:60:14:DC:94:5C:50:48:B5:BD:05:2B:8E:4B:0A:8F Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft Manifest number: 08 Signing time: Sat 31 May 2025 07:41:43 +0000 Manifest this update: Sat 31 May 2025 07:41:43 +0000 Manifest next update: Sat 07 Jun 2025 07:41:43 +0000 Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: wMAg2DIbZO+QI25enz1cRkQ1qDt3MRU84ByFAzY1dH4=) 2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Validity Not Before: May 31 07:41:43 2025 GMT Not After : Jun 7 07:41:43 2025 GMT Subject: CN=683ab2b7-a424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:08:5e:3e:3f:f1:64:a7:27:2e:a5:32:75: dc:e8:cf:00:e2:09:09:fa:a7:2f:39:79:7d:b6:74: 16:35:c2:f1:ee:ff:0d:31:44:ec:ea:f0:02:c8:30: 5b:05:7e:54:b4:a7:28:ca:44:83:51:65:e8:91:d2: e1:a8:09:1c:f3:8b:2d:fc:dd:f8:62:b8:a8:0c:c1: 13:7f:a7:20:d7:da:d6:dd:e1:55:24:5a:22:c9:ec: 49:37:af:c5:4a:6f:4a:a6:1b:b2:93:56:2c:38:1a: a6:94:3c:55:3b:c0:b1:23:fb:6a:59:4a:bd:d2:ec: 87:b9:92:89:bc:c5:36:46:80:d5:2c:df:87:ae:71: 8e:16:12:7d:83:45:8a:f8:48:b0:42:3b:8c:43:be: 2b:93:d4:2c:6b:94:63:55:8b:02:bd:a1:cd:d5:e9: 65:9b:a1:9d:6d:96:3c:9c:cd:ee:04:20:2d:b2:01: 15:52:07:7f:97:f8:1d:ea:78:ae:20:36:52:bd:84: 8b:ee:ba:6c:e6:25:11:6e:20:e5:24:49:3f:3f:2c: d0:c6:b9:47:c2:78:c8:fa:a0:b7:7b:e1:68:f6:50: 22:8e:cd:a9:6e:04:07:4c:fc:57:3c:3a:06:26:83: ef:f7:01:fb:71:e2:ea:62:87:62:67:8b:68:36:46: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7B:05:52:78:60:14:DC:94:5C:50:48:B5:BD:05:2B:8E:4B:0A:8F X509v3 Authority Key Identifier: keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fc:2b:1c:e6:ac:80:aa:a5:5d:a9:e4:6a:6a:0e:fe:4b:35: 55:17:75:ef:f4:f7:57:1c:cc:7a:77:ca:31:41:a7:72:6e:bc: 6e:ae:87:29:70:bf:32:ba:80:bd:db:db:78:e1:38:f1:a9:9f: b2:ab:b1:90:00:8f:af:f3:8a:68:87:28:82:3a:d0:08:47:69: f8:61:e4:dd:f8:38:b8:77:e8:8f:14:bf:0f:82:9b:07:ca:0f: 84:65:bc:3f:84:56:31:f3:c6:4c:6b:a9:0b:89:7e:66:9a:25: 0c:1b:6b:00:89:80:5f:94:58:c2:b4:32:42:b8:a1:34:28:b7: b0:2d:f3:ca:ce:0d:c3:33:be:9d:cb:46:bc:29:09:ac:58:90: ca:c8:e0:19:b1:13:15:da:6f:9b:e0:6f:c8:ca:38:36:76:1d: e2:81:32:1b:b5:af:81:7e:ec:c1:7b:76:74:90:fb:fc:30:82: 31:3d:a8:2c:8c:f4:10:19:49:d1:b2:8f:ea:b2:c6:98:69:c9: a6:c5:5d:58:92:b8:fc:89:2e:09:14:fd:5c:0b:e3:43:0c:68: a8:8b:2a:92:18:54:f0:0d:74:dc:fd:58:11:bf:0a:68:17:fb: 8b:f8:59:ba:de:7d:1d:fe:8f:29:45:ed:c6:7d:a3:61:84:6c: b5:44:82:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3 MzVDRUY0MDAeFw0yNTA1MzEwNzQxNDNaFw0yNTA2MDcwNzQxNDNaMBgxFjAUBgNV BAMTDTY4M2FiMmI3LWE0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTkwhePj/xZKcnLqUyddzozwDiCQn6py85eX22dBY1wvHu/w0xROzq8ALIMFsF flS0pyjKRINRZeiR0uGoCRzziy383fhiuKgMwRN/pyDX2tbd4VUkWiLJ7Ek3r8VK b0qmG7KTViw4GqaUPFU7wLEj+2pZSr3S7Ie5kom8xTZGgNUs34eucY4WEn2DRYr4 SLBCO4xDviuT1CxrlGNViwK9oc3V6WWboZ1tljycze4EIC2yARVSB3+X+B3qeK4g NlK9hIvuumzmJRFuIOUkST8/LNDGuUfCeMj6oLd74Wj2UCKOzaluBAdM/Fc8OgYm g+/3Aftx4upih2Jni2g2Ro8RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpXsFUnhg FNyUXFBItb0FK45LCo8wHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1 NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MzUyLzgyOTM4MDQ2MzE1NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVx N2JsUVVaVEw5RTNOYzcwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF78KxzmrICqpV2p5GpqDv5LNVUXde/091cczHp3yjFBp3JuvG6uhylw vzK6gL3b23jhOPGpn7KrsZAAj6/zimiHKII60AhHafhh5N34OLh36I8Uvw+CmwfK D4RlvD+EVjHzxkxrqQuJfmaaJQwbawCJgF+UWMK0MkK4oTQot7At88rODcMzvp3L RrwpCaxYkMrI4BmxExXab5vgb8jKODZ2HeKBMhu1r4F+7MF7dnSQ+/wwgjE9qCyM 9BAZSdGyj+qyxphpyabFXViSuPyJLgkU/VwL40MMaKiLKpIYVPANdNz9WBG/CmgX +4v4WbrefR3+jylF7cZ9o2GEbLVEgiI= -----END CERTIFICATE-----Generated at Sat May 31 16:55:03 2025 by rpki-client