$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json) Hash identifier: Fgah58ytkGGmJZRzHObjbYUy4hNU5Vos9kpRYBWFxYw= Subject key identifier: 32:04:8A:B6:79:AB:F7:A5:C6:39:BB:BE:89:D8:23:BB:B9:8D:F0:B4 Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft Manifest number: 0620 Signing time: Mon 30 Jun 2025 23:09:32 +0000 Manifest this update: Mon 30 Jun 2025 23:09:31 +0000 Manifest next update: Mon 07 Jul 2025 23:09:31 +0000 Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: OxXQzcY3a0dpI2mQwlbQm7DQMWFwtEH9Xrgu0kn46Ow=) 2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: ol3uXw4dkWIdxcKjMSPB1+hf827QNdo9sA61mKaXk78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Validity Not Before: Jun 30 23:09:31 2025 GMT Not After : Jul 7 23:09:31 2025 GMT Subject: CN=6863192c-f2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:cf:4d:26:7e:84:f6:8c:1d:4d:3a:88:2a: 7a:56:2c:71:f1:3c:ab:39:86:81:55:b8:b5:27:22: be:91:43:c3:f9:2f:04:fe:13:42:b2:3c:e4:24:95: c3:b3:a0:13:16:76:3a:75:e2:64:8c:d9:cb:3c:af: 1a:bb:6c:03:45:69:eb:61:aa:a1:e7:b3:e5:1b:19: 8d:fb:49:c0:38:b5:df:da:77:aa:07:cd:28:c4:8c: 60:3c:32:3f:31:56:f8:42:52:1d:7e:dd:cb:33:83: b4:de:cf:34:46:7b:84:ce:88:be:a7:35:d8:89:b5: c2:b2:5c:a5:de:b2:8e:e7:d6:8d:89:d1:d2:69:e8: d0:94:b3:14:a9:56:89:76:77:6c:1c:f1:66:99:a1: eb:22:95:91:3e:92:a3:eb:ff:dd:68:96:31:ff:95: 95:d3:5d:b3:78:fb:67:a2:2c:15:ab:0f:a0:15:3c: ef:18:d7:40:b7:b2:7e:2b:b4:05:bc:39:4d:2c:6e: e0:a0:2e:79:fb:ef:56:78:65:da:12:00:57:d1:9b: 21:18:93:d5:b9:fb:95:dc:47:cb:e3:69:b4:b9:a0: c5:f0:28:6e:1e:bd:3b:bc:3a:56:74:af:bf:8a:85: 47:03:15:79:72:c4:0d:e3:c7:42:52:0c:ba:4d:b4: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:04:8A:B6:79:AB:F7:A5:C6:39:BB:BE:89:D8:23:BB:B9:8D:F0:B4 X509v3 Authority Key Identifier: keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:43:8d:31:b3:57:1e:a7:91:0a:8a:fc:68:c7:de:25:13:32: be:25:8f:93:f6:7e:ab:df:95:cc:99:86:8b:af:0b:10:ad:3d: 96:34:71:25:d2:82:8b:7a:93:51:41:79:c7:43:e4:d2:86:fa: 18:9e:b1:8d:85:d6:d2:7d:5a:90:e2:e1:c5:a5:16:09:67:62: c8:1f:0b:70:41:65:05:af:48:db:db:9b:a5:c7:8a:1f:9a:8e: 8f:22:a6:b2:7d:08:75:dc:42:cc:d7:45:66:f2:ef:4b:1c:de: 11:69:fa:ef:b4:d9:d8:ab:bd:3f:8d:38:4e:7a:e0:df:d5:ad: c5:30:f1:17:2e:88:a3:0d:54:e3:74:d3:61:de:5b:e3:a2:34: c5:2b:9b:eb:96:13:2e:c2:8b:1d:e1:03:39:01:55:08:2c:cb: d3:3c:05:51:c6:60:59:ed:0c:1b:8f:8c:3b:6f:d3:b5:bf:94: f5:4a:95:b7:f1:58:bc:f2:c7:a5:25:c6:bc:fb:28:64:dd:9e: 57:03:5d:dd:63:05:a5:f4:39:2c:eb:8e:41:f9:d6:ec:c5:f4: a0:6c:7a:b5:17:0b:01:9b:14:d0:e5:2c:92:cb:3f:1c:c7:c9: 55:b4:99:8e:ae:ac:ed:84:0c:09:f1:14:de:7a:56:80:2e:18: a0:2e:d2:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCQUQxMTAvBgNVBAUTKDgxRkZGMjE1MDA1REExQUZBQzVFMjRBQkJDQzAzQ0E3 MEY2NjRCNTYwHhcNMjUwNjMwMjMwOTMxWhcNMjUwNzA3MjMwOTMxWjAYMRYwFAYD VQQDEw02ODYzMTkyYy1mMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wLPTSZ+hPaMHU06iCp6Vixx8TyrOYaBVbi1JyK+kUPD+S8E/hNCsjzkJJXD s6ATFnY6deJkjNnLPK8au2wDRWnrYaqh57PlGxmN+0nAOLXf2neqB80oxIxgPDI/ MVb4QlIdft3LM4O03s80RnuEzoi+pzXYibXCslyl3rKO59aNidHSaejQlLMUqVaJ dndsHPFmmaHrIpWRPpKj6//daJYx/5WV012zePtnoiwVqw+gFTzvGNdAt7J+K7QF vDlNLG7goC55++9WeGXaEgBX0ZshGJPVufuV3EfL42m0uaDF8ChuHr07vDpWdK+/ ioVHAxV5csQN48dCUgy6TbSHLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIEirZ5 q/elxjm7vonYI7u5jfC0MB8GA1UdIwQYMBaAFIH/8hUAXaGvrF4kq7zAPKcPZktW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUJBRC81MEQ5MUU2NkEz NDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9hLXNYaVNydk1BOHB3OW1T MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmX3lGUUJkb2Etc1hpU3J2TUE4cHc5bVMxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUJBRC81MEQ5MUU2NkEzNDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9h LXNYaVNydk1BOHB3OW1TMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzQ40xs1cep5EKivxox94lEzK+JY+T9n6r35XMmYaLrwsQrT2WNHEl 0oKLepNRQXnHQ+TShvoYnrGNhdbSfVqQ4uHFpRYJZ2LIHwtwQWUFr0jb25ulx4of mo6PIqayfQh13ELM10Vm8u9LHN4RafrvtNnYq70/jThOeuDf1a3FMPEXLoijDVTj dNNh3lvjojTFK5vrlhMuwosd4QM5AVUILMvTPAVRxmBZ7Qwbj4w7b9O1v5T1SpW3 8Vi88selJca8+yhk3Z5XA13dYwWl9Dks645B+dbsxfSgbHq1FwsBmxTQ5SySyz8c x8lVtJmOrqzthAwJ8RTeelaALhigLtLG -----END CERTIFICATE-----Generated at Wed Jul 2 01:49:29 2025 by rpki-client