$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: 54tp/Ye9Ds7X6jMhLM0pcY1bk+cn+6yGjhHEXpgZpXE= Subject key identifier: 90:51:62:4D:4B:9B:95:D1:ED:46:A0:C4:26:27:CC:22:F3:C4:9B:6F Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 0495 Signing time: Thu 21 Aug 2025 00:08:48 +0000 Manifest this update: Thu 21 Aug 2025 00:08:48 +0000 Manifest next update: Thu 28 Aug 2025 00:08:48 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: OPF9akZ+D34UJUck5JEyoSaKm/XYNfPr9nOkJ8h/n5A=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: M1i4rWrbGKWHBYp62z8SKmnQxpHNlWERMJQXrk6a0Go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Aug 21 00:08:48 2025 GMT Not After : Aug 28 00:08:48 2025 GMT Subject: CN=68a66390-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:53:ae:59:8e:7d:64:43:27:3e:9c:7a:a7: a2:9c:3c:8b:7a:6d:85:14:a5:9e:a7:a0:6d:0e:fe: 11:f7:61:eb:c9:54:aa:4d:d0:1b:80:39:b3:09:53: 8d:28:63:04:72:cc:5b:12:ee:92:35:a1:07:69:3a: 26:29:6c:f8:26:f6:d3:4a:f2:9d:66:fc:d6:8f:8d: a7:a1:b5:41:ee:f7:3d:fa:52:f9:b2:ca:ad:da:e6: c5:99:c7:a2:c0:15:ae:e5:5a:92:1e:7b:24:66:18: b2:e0:f0:5c:b4:8a:28:57:a2:28:75:90:c6:11:76: 78:12:3d:6a:00:d6:c0:f4:67:a8:63:8b:e7:31:53: 89:ce:65:b8:d1:f4:6a:9f:f5:f8:c7:50:bd:ad:01: 0e:d5:b7:59:aa:84:ef:c4:a2:c7:bc:0e:fc:c3:03: 83:1c:da:8b:82:bf:f1:2c:d0:8b:77:4f:c3:08:e9: 84:56:b1:f0:3e:42:8e:04:a4:da:2e:c8:69:0b:4f: cb:eb:4e:67:95:05:bd:c7:b6:1a:05:d9:e4:f6:90: 4e:3b:66:ae:ab:b8:62:6a:e5:68:83:4e:70:50:cf: 80:51:8b:63:89:c4:79:31:08:30:0b:61:07:41:e1: 60:d9:dd:17:2d:73:b7:65:66:93:11:d0:dd:d4:3e: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:51:62:4D:4B:9B:95:D1:ED:46:A0:C4:26:27:CC:22:F3:C4:9B:6F X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bb:66:97:46:29:d7:01:8d:7b:f9:2d:05:a5:22:b1:72:6c: 56:88:bb:99:04:ad:fc:93:69:cb:27:00:a7:e7:df:04:f3:58: f8:42:58:75:c3:8d:84:ec:83:a8:5b:a2:60:07:59:8e:b3:c5: 50:4e:8b:48:ea:e1:7c:b6:ce:3c:bc:e0:ad:f5:b8:76:86:ad: c1:3b:d2:af:d8:c4:27:9d:bf:05:59:f9:0f:b3:d7:97:08:35: 7a:42:2c:bd:5a:8f:2e:e8:1c:16:10:d4:32:27:53:78:69:2b: a9:0f:f6:55:60:ef:e5:b9:3d:81:e8:0e:a8:ab:46:70:2c:d7: 06:ec:63:c3:09:99:aa:c5:62:ce:7f:d9:c5:9d:9b:bd:3e:85: 52:82:6a:c4:e7:77:29:fc:69:e4:33:e0:72:50:b3:23:24:aa: 3a:c0:d5:12:c1:4a:ac:f5:1c:26:4f:da:25:c3:5a:20:12:b6: 3e:ad:6b:75:f5:cb:8b:59:ae:3b:15:2e:6a:35:7e:91:06:80: cb:a1:64:fd:1f:23:c4:04:48:5d:4a:67:9e:ce:54:cb:28:87: 88:61:fb:67:2c:0a:43:95:c2:a9:78:db:4e:67:37:45:7a:10: 05:28:75:82:a1:3e:d3:96:bf:09:6e:b1:16:08:ea:dd:63:fc: 1f:30:3f:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUwODIxMDAwODQ4WhcNMjUwODI4MDAwODQ4WjAYMRYwFAYD VQQDEw02OGE2NjM5MC1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRBTrlmOfWRDJz6ceqeinDyLem2FFKWep6BtDv4R92HryVSqTdAbgDmzCVON KGMEcsxbEu6SNaEHaTomKWz4JvbTSvKdZvzWj42nobVB7vc9+lL5ssqt2ubFmcei wBWu5VqSHnskZhiy4PBctIooV6IodZDGEXZ4Ej1qANbA9GeoY4vnMVOJzmW40fRq n/X4x1C9rQEO1bdZqoTvxKLHvA78wwODHNqLgr/xLNCLd0/DCOmEVrHwPkKOBKTa LshpC0/L605nlQW9x7YaBdnk9pBOO2auq7hiauVog05wUM+AUYtjicR5MQgwC2EH QeFg2d0XLXO3ZWaTEdDd1D4fRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBRYk1L m5XR7UagxCYnzCLzxJtvMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLu2aXRinXAY17+S0FpSKxcmxWiLuZBK38k2nLJwCn598E81j4Qlh1 w42E7IOoW6JgB1mOs8VQTotI6uF8ts48vOCt9bh2hq3BO9Kv2MQnnb8FWfkPs9eX CDV6Qiy9Wo8u6BwWENQyJ1N4aSupD/ZVYO/luT2B6A6oq0ZwLNcG7GPDCZmqxWLO f9nFnZu9PoVSgmrE53cp/GnkM+ByULMjJKo6wNUSwUqs9RwmT9olw1ogErY+rWt1 9cuLWa47FS5qNX6RBoDLoWT9HyPEBEhdSmeezlTLKIeIYftnLApDlcKpeNtOZzdF ehAFKHWCoT7Tlr8JbrEWCOrdY/wfMD/h -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:14 2025 by rpki-client