$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: EUb4AjLkKaxwQyzRcTeUE2Nt/E8/rhQ8AwppR9N5E/M= Subject key identifier: 9D:31:B7:F1:29:FA:46:E3:4E:E4:52:AF:38:39:2F:23:CA:66:6B:F6 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: 7A Signing time: Sun 15 Jun 2025 05:53:07 +0000 Manifest this update: Sun 15 Jun 2025 05:53:07 +0000 Manifest next update: Sun 22 Jun 2025 05:53:07 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: j+fUGg3+JBpvOOCHHnDKB0TosKje2IbdN7xOKPB862k=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: bSwFDk6awCLG4yCeUFAgFzFigutUzb6MBdN06ltlpqE=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: hHmJZ4kZTc3eByWyfovBTyBy7zoc4MRBKG9FMUzpQOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Jun 15 05:53:07 2025 GMT Not After : Jun 22 05:53:07 2025 GMT Subject: CN=684e5fc3-97f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c1:cf:1c:4a:57:9b:31:d7:31:70:32:e8:df: 12:db:63:67:ce:c0:63:73:5c:6b:16:e2:82:e9:f2: 29:47:f0:d9:61:1a:96:f3:9e:8e:8f:b7:0d:e1:ab: 22:07:e5:10:40:71:f4:12:a1:69:c8:63:52:d3:3c: ed:ce:35:7e:36:ef:7a:9c:ba:5d:45:a3:38:6a:58: 59:0d:56:a5:58:a6:93:c3:0b:49:8b:f5:e6:1c:49: 9e:16:ea:91:8a:8a:a5:e5:ba:5f:60:2b:4c:10:ef: 7d:2a:35:5d:0b:4b:99:d7:2c:6b:eb:dc:6b:82:ab: 08:ae:91:49:0a:4e:c5:cc:20:de:73:05:c3:d2:75: 97:3f:80:0b:56:16:a5:6b:39:f9:d1:0d:02:55:8c: 6f:b9:62:7c:7c:21:fa:2f:15:12:32:62:b4:18:f1: 6b:d4:64:a1:8e:24:a7:40:48:63:04:cc:d9:cf:5d: 16:8a:7b:03:dd:a5:d3:0b:ff:4a:7c:66:ef:1a:bd: 13:bf:3b:ba:86:6f:a7:ad:ce:72:8c:96:dc:5c:33: 44:f3:b3:01:21:d4:24:54:08:e5:e8:f4:12:23:22: 5d:09:25:5b:e4:eb:c7:f2:7d:64:b4:70:49:dc:32: 43:cb:d0:cf:3d:de:fa:6c:5b:ec:3a:21:e9:be:02: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:31:B7:F1:29:FA:46:E3:4E:E4:52:AF:38:39:2F:23:CA:66:6B:F6 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2b:18:ab:08:3b:2a:f5:ed:08:86:be:c4:b9:d6:2e:ff:d7: 42:e9:73:5a:60:3f:bc:ad:48:49:b1:f3:66:6c:5e:a2:ec:b3: 28:a8:c0:49:ca:70:83:6f:e7:84:82:3e:82:8f:a4:b5:24:d5: d4:74:f5:30:1e:fa:98:85:72:70:56:48:e7:7e:29:02:84:ca: d6:e3:ee:fe:cf:0a:1a:d2:5b:36:07:fb:4a:50:98:81:32:2c: 73:e7:d3:63:13:93:49:c2:71:c6:31:2a:3d:4a:e9:65:f4:62: 0f:c3:2d:ef:cb:6a:8f:62:2d:26:e0:69:ef:17:bb:1f:61:28: 2a:c2:ba:85:1d:60:52:bc:77:2b:da:da:f1:69:eb:25:41:0b: 5e:4a:76:71:ac:6b:c4:9b:3e:74:51:5b:83:88:04:e3:f9:d6: a6:5a:c6:57:a7:41:c1:f9:31:1d:82:ae:e9:31:3f:ad:83:d4: 77:4f:6c:a6:48:54:07:e3:fc:bb:8c:3c:eb:1e:e7:10:9c:01: ea:e1:66:92:ad:14:41:d3:fc:77:2c:e7:51:cb:ea:55:e4:cd: 02:56:e8:9e:03:5e:1d:1e:ea:e7:fd:4b:92:d2:d4:a3:14:24: 9a:8e:c8:b9:94:81:90:b5:68:07:e9:f2:34:37:17:33:3d:40: 13:cd:3d:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzhGMDExMC8GA1UEBRMoODMxN0ZDN0E4MkIwRUU4NjUyMERGMThGRkQ1NzI5NTEx NkRBNURGMjAeFw0yNTA2MTUwNTUzMDdaFw0yNTA2MjIwNTUzMDdaMBgxFjAUBgNV BAMTDTY4NGU1ZmMzLTk3ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTwc8cSlebMdcxcDLo3xLbY2fOwGNzXGsW4oLp8ilH8NlhGpbzno6Ptw3hqyIH 5RBAcfQSoWnIY1LTPO3ONX4273qcul1FozhqWFkNVqVYppPDC0mL9eYcSZ4W6pGK iqXlul9gK0wQ730qNV0LS5nXLGvr3GuCqwiukUkKTsXMIN5zBcPSdZc/gAtWFqVr OfnRDQJVjG+5Ynx8IfovFRIyYrQY8WvUZKGOJKdASGMEzNnPXRaKewPdpdML/0p8 Zu8avRO/O7qGb6etznKMltxcM0TzswEh1CRUCOXo9BIjIl0JJVvk68fyfWS0cEnc MkPL0M893vpsW+w6Iem+AosvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnTG38Sn6 RuNO5FKvODkvI8pma/YwHwYDVR0jBBgwFoAUgxf8eoKw7oZSDfGP/VcpURbaXfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzOEYwLzBBNzcxQTM2OTNB RTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3hmOGVvS3c3b1pTRGZHUF9WY3BVUmJhWGZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz OEYwLzBBNzcxQTM2OTNBRTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29a U0RmR1BfVmNwVVJiYVhmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsrGKsIOyr17QiGvsS51i7/10Lpc1pgP7ytSEmx82ZsXqLssyiowEnK cINv54SCPoKPpLUk1dR09TAe+piFcnBWSOd+KQKEytbj7v7PChrSWzYH+0pQmIEy LHPn02MTk0nCccYxKj1K6WX0Yg/DLe/Lao9iLSbgae8Xux9hKCrCuoUdYFK8dyva 2vFp6yVBC15KdnGsa8SbPnRRW4OIBOP51qZaxlenQcH5MR2CrukxP62D1HdPbKZI VAfj/LuMPOse5xCcAerhZpKtFEHT/Hcs51HL6lXkzQJW6J4DXh0e6uf9S5LS1KMU JJqOyLmUgZC1aAfp8jQ3FzM9QBPNPbM= -----END CERTIFICATE-----Generated at Sun Jun 15 09:34:27 2025 by rpki-client