$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json) Hash identifier: vgYH9dAQMqZQzHNmFXEqR3CFkTUr76q/yaSXWrs5axM= Subject key identifier: C8:92:13:70:ED:5F:60:BC:60:51:51:46:89:55:C5:98:98:64:FE:2C Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft Manifest number: 02D1 Signing time: Sun 15 Jun 2025 01:04:19 +0000 Manifest this update: Sun 15 Jun 2025 01:04:19 +0000 Manifest next update: Sun 22 Jun 2025 01:04:19 +0000 Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: thSKRBySvsxdWaxsN0Rql79jgWO0vKm4z7qO3RIlbJE=) 2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: rj+UC+zA9sE5Q8EazPPN8LHfCTVfMALfkukIKXKN97M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Validity Not Before: Jun 15 01:04:19 2025 GMT Not After : Jun 22 01:04:19 2025 GMT Subject: CN=684e1c13-a85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:be:af:1a:1b:c9:8f:8f:05:68:2f:e2:66: 62:c3:2c:32:c4:96:92:4b:5f:e9:ca:0e:a9:ec:9a: ea:c4:a7:09:4b:ff:14:9b:9d:ce:eb:78:30:f3:44: 74:95:3d:99:5c:9d:1d:df:c5:f3:a4:1c:9c:97:60: 04:5f:d1:03:78:2f:a8:cd:48:1e:ab:9e:bf:c9:7c: 9b:2f:a4:b0:ac:98:4d:4c:10:c1:00:d3:e5:9d:76: a7:46:a7:c9:2c:66:9c:fb:04:60:c6:57:5d:e5:c0: e6:88:dc:93:8c:eb:54:70:10:70:42:4e:ef:7e:ae: 63:06:c2:06:6c:28:9d:79:24:f4:3f:4b:6e:6b:ee: 72:a4:ae:40:4d:b3:f8:ad:3a:17:e1:5c:2d:e4:7e: 7b:89:e0:fb:90:d0:c1:79:f2:b7:10:b0:1d:f7:76: 30:ce:c5:f7:c5:52:4c:68:4d:cd:22:74:f4:d7:81: 53:14:b3:b0:42:d8:11:4e:1d:6b:0b:28:f9:cf:96: bc:14:f7:5d:95:2b:04:fa:f0:11:55:16:2c:10:1d: 23:0b:c5:08:d6:56:6a:ec:eb:53:5f:60:53:35:d7: 48:47:dc:48:9b:2e:8e:38:de:96:fc:7f:db:50:f9: 6e:8b:4b:f6:73:59:75:c3:c0:d1:90:4b:fa:e2:33: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:92:13:70:ED:5F:60:BC:60:51:51:46:89:55:C5:98:98:64:FE:2C X509v3 Authority Key Identifier: keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6d:0a:94:01:88:c6:5f:28:77:b6:2c:02:16:1b:f9:8c:e5: fd:27:e1:19:2f:b9:01:73:41:62:29:10:9f:7c:74:60:c9:b3: 48:b7:08:6e:ba:ca:01:e0:d4:8e:fc:d0:61:74:f0:df:fd:4c: c6:ad:79:f2:31:4d:43:a0:15:ed:1d:28:de:3e:14:52:4c:a0: 8c:a1:b5:df:03:5f:b5:35:56:e7:eb:98:86:e8:3c:cb:0f:cc: 57:46:9d:77:ae:c5:30:a6:b6:64:b6:6f:fa:f6:6a:f3:77:d1: 84:e2:49:76:86:89:6a:d1:df:2a:cc:cd:3d:57:e9:9e:2d:d6: 29:8f:9e:07:d4:39:22:d8:f7:5c:f3:8b:bf:5c:5e:88:6d:c9: 0d:e2:21:e3:42:50:9b:18:54:77:6f:6c:3a:85:3f:28:aa:49: d0:a8:07:1c:a4:43:27:3b:47:9e:ac:82:02:76:ae:19:b6:dd: 22:b7:f1:37:a0:7b:61:9e:16:f7:23:85:d3:24:82:64:0e:25: e1:27:6f:1d:93:2c:b3:6b:4b:9a:db:a5:47:0f:5f:a3:f1:59: 7d:71:5b:ae:0e:42:78:73:13:65:c9:1d:f6:a2:4c:51:0a:d5: 4f:32:a8:37:18:71:eb:07:88:b0:a9:98:ac:a6:b0:14:10:a1: 09:cb:e7:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RTYxMTAvBgNVBAUTKDgxNUJGMEVFMjBBNURDQkEzMDU3QzNEMzVCNThFQzE0 NzcyRThGRUYwHhcNMjUwNjE1MDEwNDE5WhcNMjUwNjIyMDEwNDE5WjAYMRYwFAYD VQQDEw02ODRlMWMxMy1hODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2v2+rxobyY+PBWgv4mZiwywyxJaSS1/pyg6p7JrqxKcJS/8Um53O63gw80R0 lT2ZXJ0d38XzpBycl2AEX9EDeC+ozUgeq56/yXybL6SwrJhNTBDBANPlnXanRqfJ LGac+wRgxldd5cDmiNyTjOtUcBBwQk7vfq5jBsIGbCideST0P0tua+5ypK5ATbP4 rToX4Vwt5H57ieD7kNDBefK3ELAd93YwzsX3xVJMaE3NInT014FTFLOwQtgRTh1r Cyj5z5a8FPddlSsE+vARVRYsEB0jC8UI1lZq7OtTX2BTNddIR9xImy6OON6W/H/b UPlui0v2c1l1w8DRkEv64jMRbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiSE3Dt X2C8YFFRRolVxZiYZP4sMB8GA1UdIwQYMBaAFIFb8O4gpdy6MFfD01tY7BR3Lo/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFNi8zMjQ2RkU2RUVE NDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNMb3dWOFBUVzFqc0ZIY3Vq LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dWdnc3aUNsM0xvd1Y4UFRXMWpzRkhjdWotOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFNi8zMjQ2RkU2RUVENDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNM b3dWOFBUVzFqc0ZIY3VqLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpbQqUAYjGXyh3tiwCFhv5jOX9J+EZL7kBc0FiKRCffHRgybNItwhu usoB4NSO/NBhdPDf/UzGrXnyMU1DoBXtHSjePhRSTKCMobXfA1+1NVbn65iG6DzL D8xXRp13rsUwprZktm/69mrzd9GE4kl2holq0d8qzM09V+meLdYpj54H1Dki2Pdc 84u/XF6IbckN4iHjQlCbGFR3b2w6hT8oqknQqAccpEMnO0eerIICdq4Ztt0it/E3 oHthnhb3I4XTJIJkDiXhJ28dkyyza0ua26VHD1+j8Vl9cVuuDkJ4cxNlyR32okxR CtVPMqg3GHHrB4iwqZisprAUEKEJy+c8 -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:43 2025 by rpki-client