$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: iSdICtqt3jQx4/Mff1ImHRnx5YvXA6x6TGy1YmxV1lE= Subject key identifier: 8F:5E:53:54:32:6B:01:A9:AC:9B:63:62:1C:8F:FF:9D:A7:EB:AB:79 Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 06 Signing time: Sat 31 May 2025 07:43:26 +0000 Manifest this update: Sat 31 May 2025 07:43:25 +0000 Manifest next update: Sat 07 Jun 2025 07:43:25 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: BAjyYpx1E79LH8J9CTbhh4pS5i1zsjW/Iw/kKMS2bXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: May 31 07:43:25 2025 GMT Not After : Jun 7 07:43:25 2025 GMT Subject: CN=683ab31e-fd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:df:0f:91:7a:f8:1d:5a:92:28:81:14:ad: 8e:75:5d:f9:af:b1:0c:4f:ae:16:dc:d4:2c:66:1e: 75:d1:c1:ba:27:8c:25:13:3c:e2:00:f3:b0:7d:71: 32:c3:7f:45:38:9a:3c:7f:83:da:a0:93:ef:8f:95: 10:82:59:44:bc:33:f5:97:f2:6a:62:5e:da:b4:33: ff:db:19:ba:0b:df:ea:2a:66:1e:5c:05:c7:2e:0f: 2c:60:a3:bd:53:c4:5c:15:23:fd:a4:39:ae:6e:67: 8c:49:81:c4:aa:96:40:a7:fb:31:b4:ed:0c:6e:0b: 7f:1b:13:48:14:80:f6:ef:6d:d6:fc:fd:d6:81:71: 41:67:2d:0f:06:c4:00:ca:66:ea:d8:ff:74:cf:72: ec:e4:79:ec:a4:4b:61:f8:bb:8d:56:86:fb:b9:01: 84:54:ed:db:75:e5:88:c3:47:97:14:c1:f7:75:04: 6f:71:ab:66:6a:29:9d:e1:3b:96:90:11:14:16:13: 0f:c2:a1:75:ed:6d:f9:ee:2b:c4:ef:fd:ca:43:6b: 0c:96:f2:bd:f4:b9:b3:ca:11:e2:0b:95:fd:bf:64: 61:29:84:a4:fb:30:d8:ec:d6:6f:04:e5:96:d2:34: ab:21:80:46:73:05:3f:9f:12:98:f9:0f:11:86:b7: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5E:53:54:32:6B:01:A9:AC:9B:63:62:1C:8F:FF:9D:A7:EB:AB:79 X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:2a:e7:29:06:c6:db:7b:77:cc:32:fe:50:b5:28:28:b1: ea:14:ef:e0:72:23:b8:d7:b2:46:d4:b1:b2:e3:04:df:0e:91: 2b:fc:47:3c:b1:62:c2:2f:fc:71:63:4b:0d:21:63:12:a2:ed: e9:c8:7a:a9:c5:1d:36:3d:fb:ef:aa:7d:1c:bb:0d:80:c9:01: 20:40:5c:d2:c4:6f:cd:97:ee:4f:31:a6:b3:33:c6:7d:c2:f8: 5d:58:88:17:f0:fc:b6:66:b3:8a:29:94:15:28:49:9a:57:e9: 14:93:44:1a:cb:ff:2c:7d:7a:1b:11:e5:0c:c1:86:32:00:b7: 0a:89:30:9d:f5:bf:81:9a:6e:c8:ee:09:1f:ac:c2:ab:c6:c3: 82:02:99:65:ca:65:2b:66:38:11:68:cd:14:21:72:bc:3b:e3: 86:7f:d5:80:e0:89:b0:01:c9:1e:7c:71:1b:c0:97:0a:3b:ae: fb:73:e2:52:7d:70:2b:98:af:72:7e:6a:0e:19:72:8a:cb:83: b3:98:fe:84:49:33:3f:1e:3c:1e:55:f2:ea:5c:87:32:90:27: 81:a3:47:1d:70:6c:a5:7f:75:d7:73:58:69:09:11:23:d8:58: f5:df:2f:20:82:67:8f:d1:08:63:99:4f:5e:4f:9f:40:3c:1c: 15:28:00:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTA1MzEwNzQzMjVaFw0yNTA2MDcwNzQzMjVaMBgxFjAUBgNV BAMTDTY4M2FiMzFlLWZkODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Rt8PkXr4HVqSKIEUrY51XfmvsQxPrhbc1CxmHnXRwbonjCUTPOIA87B9cTLD f0U4mjx/g9qgk++PlRCCWUS8M/WX8mpiXtq0M//bGboL3+oqZh5cBccuDyxgo71T xFwVI/2kOa5uZ4xJgcSqlkCn+zG07QxuC38bE0gUgPbvbdb8/daBcUFnLQ8GxADK ZurY/3TPcuzkeeykS2H4u41Whvu5AYRU7dt15YjDR5cUwfd1BG9xq2ZqKZ3hO5aQ ERQWEw/CoXXtbfnuK8Tv/cpDawyW8r30ubPKEeILlf2/ZGEphKT7MNjs1m8E5ZbS NKshgEZzBT+fEpj5DxGGt0ChAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj15TVDJr Aamsm2NiHI//nafrq3kwHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7pKucpBsbbe3fMMv5QtSgoseoU7+ByI7jXskbUsbLjBN8OkSv8Rzyx YsIv/HFjSw0hYxKi7enIeqnFHTY9+++qfRy7DYDJASBAXNLEb82X7k8xprMzxn3C +F1YiBfw/LZms4oplBUoSZpX6RSTRBrL/yx9ehsR5QzBhjIAtwqJMJ31v4Gabsju CR+swqvGw4ICmWXKZStmOBFozRQhcrw744Z/1YDgibAByR58cRvAlwo7rvtz4lJ9 cCuYr3J+ag4ZcorLg7OY/oRJMz8ePB5V8upchzKQJ4GjRx1wbKV/dddzWGkJESPY WPXfLyCCZ4/RCGOZT15Pn0A8HBUoANs= -----END CERTIFICATE-----Generated at Sat May 31 16:28:48 2025 by rpki-client