$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: xOSTETz+6Bjm1S8QwcToh3bbvnv6aDyL5O3jRI2OSGM= Subject key identifier: 51:AE:3C:8B:E7:5F:D6:35:EE:B9:63:15:BB:15:72:A4:98:80:9A:10 Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 028E Signing time: Sat 07 Jun 2025 01:38:45 +0000 Manifest this update: Sat 07 Jun 2025 01:38:45 +0000 Manifest next update: Sat 14 Jun 2025 01:38:45 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: TDujnP2mDz8gNMNnFT97RVs/Jeutq2bdL0w2jCT3ArM=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: kMCJJ8NAnniqHWPJmFXYj+p1oepcYEa7mi3n3n8XfS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Jun 7 01:38:45 2025 GMT Not After : Jun 14 01:38:45 2025 GMT Subject: CN=68439825-8297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:db:65:12:48:05:9d:7c:e2:d4:2e:ee:28: cd:41:5f:86:91:bf:7b:b7:e8:7c:0b:61:c7:c5:0f: e9:87:70:af:00:35:0b:61:bf:52:02:87:fa:c5:87: 4a:bd:8f:e3:30:c4:63:83:b8:81:03:12:6d:e9:a0: 63:32:7c:a5:67:19:57:cc:7a:03:90:8b:8a:75:b6: 11:2e:66:64:92:cd:66:ca:3e:5a:8c:1f:ec:1d:8b: a1:a2:bc:95:07:e6:39:3c:47:bd:a1:59:5f:a0:b0: 95:80:f5:a9:0f:61:7f:1f:b7:6b:73:2a:2a:61:a5: 86:c8:3d:bf:86:aa:4c:17:02:f6:18:b6:d5:2f:29: 03:c2:03:2f:97:e5:95:28:fd:58:6e:f4:41:19:39: dd:9e:f0:7b:8c:ef:67:74:84:0e:76:28:9f:4a:59: 82:8c:68:66:bf:20:8e:22:b3:cd:78:b5:3b:d9:18: 98:85:45:ed:bb:46:c0:8a:72:25:ff:64:2b:4e:d8: 99:aa:9e:c6:07:45:26:24:9f:f3:fe:31:62:88:9b: ed:8f:63:65:89:70:f0:cd:2c:c6:6a:97:bf:d2:e7: ae:99:27:fd:06:79:12:60:84:08:07:c2:6d:04:19: 2d:fa:0f:89:8d:34:cb:98:f1:72:87:e4:5d:5e:c0: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AE:3C:8B:E7:5F:D6:35:EE:B9:63:15:BB:15:72:A4:98:80:9A:10 X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:d9:30:97:a7:be:75:ec:56:e4:63:92:e1:44:58:7b:5f:b6: fa:7d:66:22:80:d6:e6:c1:42:66:8a:fc:66:10:3e:0c:38:78: 17:6d:5b:af:3e:a6:44:54:ce:14:91:e3:af:15:d5:e9:fe:68: 1d:71:6b:39:37:93:6d:21:e2:4f:7f:ef:ef:69:01:06:21:1f: 96:46:25:82:9c:06:c6:b7:47:cd:79:61:f4:7c:e7:b7:ac:2c: 7f:20:79:ee:e9:02:c0:57:f2:2f:08:47:7b:6f:5a:98:27:45: 53:ac:cb:53:1a:20:3d:66:62:64:07:78:c0:26:b8:84:45:64: 3d:91:6b:3e:11:2e:e9:cd:3c:6d:6d:d7:46:91:f4:f6:e0:50: 7a:0e:ca:5c:5c:4d:7d:68:da:26:e1:7f:39:32:45:8e:4f:25: 15:c7:4d:55:85:ef:b8:90:0f:55:a8:96:2b:65:ce:aa:16:04: 20:75:66:89:cc:22:9a:80:fd:7f:0b:da:a8:8f:96:04:bf:46: 4a:3c:29:43:50:00:bf:45:b6:91:a3:53:e4:d7:6b:b8:07:d5: 5d:6f:26:77:8b:92:bc:ce:a4:52:2c:e8:15:e5:2b:49:19:65: 71:ee:6d:44:10:e1:37:7a:4b:23:21:b0:9a:77:f8:0f:50:22: 24:c8:74:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUwNjA3MDEzODQ1WhcNMjUwNjE0MDEzODQ1WjAYMRYwFAYD VQQDEw02ODQzOTgyNS04Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ijbZRJIBZ184tQu7ijNQV+Gkb97t+h8C2HHxQ/ph3CvADULYb9SAof6xYdK vY/jMMRjg7iBAxJt6aBjMnylZxlXzHoDkIuKdbYRLmZkks1myj5ajB/sHYuhoryV B+Y5PEe9oVlfoLCVgPWpD2F/H7drcyoqYaWGyD2/hqpMFwL2GLbVLykDwgMvl+WV KP1YbvRBGTndnvB7jO9ndIQOdiifSlmCjGhmvyCOIrPNeLU72RiYhUXtu0bAinIl /2QrTtiZqp7GB0UmJJ/z/jFiiJvtj2NliXDwzSzGape/0ueumSf9BnkSYIQIB8Jt BBkt+g+JjTTLmPFyh+RdXsBmuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGuPIvn X9Y17rljFbsVcqSYgJoQMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDb2TCXp7517FbkY5LhRFh7X7b6fWYigNbmwUJmivxmED4MOHgXbVuv PqZEVM4UkeOvFdXp/mgdcWs5N5NtIeJPf+/vaQEGIR+WRiWCnAbGt0fNeWH0fOe3 rCx/IHnu6QLAV/IvCEd7b1qYJ0VTrMtTGiA9ZmJkB3jAJriERWQ9kWs+ES7pzTxt bddGkfT24FB6DspcXE19aNom4X85MkWOTyUVx01Vhe+4kA9VqJYrZc6qFgQgdWaJ zCKagP1/C9qoj5YEv0ZKPClDUAC/RbaRo1Pk12u4B9VdbyZ3i5K8zqRSLOgV5StJ GWVx7m1EEOE3eksjIbCad/gPUCIkyHTO -----END CERTIFICATE-----Generated at Sun Jun 8 23:20:38 2025 by rpki-client