$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: SNkV76KOhfhKd5RyP13eSHcqQFUzTgSWxHrDLZgw1Uo= Subject key identifier: B0:AA:67:A9:70:A8:C5:B5:19:3B:13:EB:37:58:F6:59:17:7A:71:CA Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 0431 Signing time: Sat 07 Jun 2025 00:23:01 +0000 Manifest this update: Sat 07 Jun 2025 00:23:01 +0000 Manifest next update: Sat 14 Jun 2025 00:23:00 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: 0aHf1XgiCdd8yfl2tV/PsYZN4eIZpV7QTh7Y/s7S860=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Jun 7 00:23:01 2025 GMT Not After : Jun 14 00:23:00 2025 GMT Subject: CN=68438665-3c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:9b:59:7b:20:f7:e2:d5:e5:a5:32:8c:4b: 58:a6:a9:22:0f:8e:94:14:a2:05:5e:ca:f5:fb:20: c3:20:cd:ee:99:af:45:ff:71:63:80:7e:86:f1:8b: d1:e1:46:dd:65:c6:60:a1:c7:b1:d4:0d:17:8d:c1: ab:9d:4b:52:43:e5:b0:52:ea:3f:72:24:7d:55:17: b7:f9:a2:13:e2:30:3f:8a:08:31:ad:e5:a7:71:e9: 45:3e:7a:8e:44:71:42:d7:cd:70:7d:8b:63:72:d1: 6c:50:38:63:af:7c:8d:90:58:c9:f5:ea:09:04:33: 5f:6f:f1:52:20:e3:83:ef:00:b7:83:be:3b:f2:61: ef:ef:49:0d:e6:38:da:bc:7e:7d:71:f3:fd:74:d7: f1:a4:9d:06:98:ba:06:84:fb:c6:f4:b2:29:5d:ec: a7:44:4e:50:ea:5e:48:c0:db:64:30:47:03:b5:e9: 58:3a:bb:87:f0:e7:b4:25:6e:93:fc:9e:ad:b3:b9: 74:e7:c8:65:96:a6:a7:c3:53:7e:80:47:66:bf:76: 71:53:dd:d4:d5:1d:5b:19:61:ae:93:d8:ca:fd:ef: 12:20:98:2e:83:1d:46:24:5c:33:59:e0:e1:0f:ad: a4:dd:73:27:99:e9:7a:e3:99:fa:fa:3b:5d:da:b7: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AA:67:A9:70:A8:C5:B5:19:3B:13:EB:37:58:F6:59:17:7A:71:CA X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:25:96:f5:87:8f:6b:97:79:c2:c5:6e:fe:8d:5c:cb:a4:94: 90:aa:4f:6b:70:7a:f1:58:71:9a:5b:81:9a:64:ff:08:1c:5f: 27:cc:6c:3b:54:e8:4a:5a:a6:99:6b:95:0a:90:d1:09:cd:19: 60:38:bf:42:93:df:a3:2c:4d:62:98:a1:c9:d2:a8:51:77:0e: de:2d:a4:8c:43:0f:85:75:4a:79:7f:23:9a:7c:7b:69:16:e2: fa:6f:f0:f4:b5:5f:12:8c:65:b5:f4:4d:26:1b:17:64:74:6b: 60:e2:bb:83:5b:8d:31:58:81:b4:ef:8c:5a:c0:5f:1c:e9:e3: af:3d:de:bb:bb:d5:23:82:f8:89:19:4f:9b:15:81:97:c8:b8: 6d:24:ce:ad:1c:a9:a0:ec:0b:dc:a3:07:bc:10:2c:d3:19:5b: f6:9f:97:78:ed:6b:af:b5:9e:0b:6a:6e:3b:52:bf:e7:66:2e: 68:aa:c7:40:ca:15:79:13:70:46:f0:b0:57:df:41:9c:7f:14: ae:dc:21:5f:9a:32:a6:06:cf:6e:01:fe:8c:29:8f:92:b2:8a: c5:6c:4f:58:77:0b:70:fe:72:e6:d2:9d:76:46:41:23:9a:91: 08:b4:b7:bb:6a:78:7e:49:fa:79:81:22:96:75:a4:7d:76:9b: d8:46:97:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUwNjA3MDAyMzAxWhcNMjUwNjE0MDAyMzAwWjAYMRYwFAYD VQQDEw02ODQzODY2NS0zYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+qbWXsg9+LV5aUyjEtYpqkiD46UFKIFXsr1+yDDIM3uma9F/3FjgH6G8YvR 4UbdZcZgocex1A0XjcGrnUtSQ+WwUuo/ciR9VRe3+aIT4jA/iggxreWncelFPnqO RHFC181wfYtjctFsUDhjr3yNkFjJ9eoJBDNfb/FSIOOD7wC3g7478mHv70kN5jja vH59cfP9dNfxpJ0GmLoGhPvG9LIpXeynRE5Q6l5IwNtkMEcDtelYOruH8Oe0JW6T /J6ts7l058hllqanw1N+gEdmv3ZxU93U1R1bGWGuk9jK/e8SIJgugx1GJFwzWeDh D62k3XMnmel645n6+jtd2rcAuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCqZ6lw qMW1GTsT6zdY9lkXenHKMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrJZb1h49rl3nCxW7+jVzLpJSQqk9rcHrxWHGaW4GaZP8IHF8nzGw7 VOhKWqaZa5UKkNEJzRlgOL9Ck9+jLE1imKHJ0qhRdw7eLaSMQw+FdUp5fyOafHtp FuL6b/D0tV8SjGW19E0mGxdkdGtg4ruDW40xWIG074xawF8c6eOvPd67u9UjgviJ GU+bFYGXyLhtJM6tHKmg7Avcowe8ECzTGVv2n5d47WuvtZ4Lam47Ur/nZi5oqsdA yhV5E3BG8LBX30GcfxSu3CFfmjKmBs9uAf6MKY+SsorFbE9Ydwtw/nLm0p12RkEj mpEItLe7anh+Sfp5gSKWdaR9dpvYRpfi -----END CERTIFICATE-----Generated at Sun Jun 8 16:00:40 2025 by rpki-client