$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json) Hash identifier: VMGKq67WCcDa6K2iZwCD4JPn0vEYt+T456QUSp/7h5E= Subject key identifier: C7:2C:C5:EC:AA:9D:9E:27:99:22:D2:F8:A2:28:EA:B1:55:2C:B3:B5 Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 06E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft Manifest number: 06DD Signing time: Sat 14 Jun 2025 21:47:01 +0000 Manifest this update: Sat 14 Jun 2025 21:47:01 +0000 Manifest next update: Sat 21 Jun 2025 21:47:01 +0000 Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: Vg7zPkATceTZ3MfYdJiD+TyPc3AwgG9csMG8p8l0xck=) 2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1763 (0x6e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: Jun 14 21:47:01 2025 GMT Not After : Jun 21 21:47:01 2025 GMT Subject: CN=684dedd5-7684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5b:0b:01:57:77:36:4a:40:35:20:99:0e:84: 96:ff:82:86:8a:3c:1d:f1:8c:11:b9:9f:0d:e0:96: 67:26:d1:36:31:3a:0d:25:29:5c:c7:23:fe:d4:89: cf:b5:c8:e4:d1:ea:e5:9e:08:17:de:b7:3a:a8:e2: 05:af:a2:4b:de:76:67:1a:99:e2:e4:9c:a8:77:1c: 1a:a4:43:4c:20:6b:14:20:fa:d2:78:68:32:39:8c: b1:ec:6f:7f:21:60:c0:3a:4a:69:be:b5:a1:3d:b8: ef:7e:bb:6d:b9:ab:10:ad:d0:3d:28:83:43:4b:90: 6b:05:4f:7f:f9:f9:fc:51:70:42:8f:19:34:85:d3: ba:c9:3f:1d:c7:ef:16:13:23:de:fb:eb:1d:5c:28: 6a:cc:a1:75:c0:4c:26:4e:88:92:d6:4c:f6:0a:18: c2:52:ca:21:e9:58:1d:6a:f2:66:32:35:1b:ed:50: b4:de:f7:8c:13:8d:7e:d3:ff:42:b7:72:85:33:63: ce:61:e3:ca:4e:40:01:b3:68:50:bf:b9:28:a6:c3: a6:24:86:39:f2:76:b4:e1:64:3a:d9:70:06:99:9f: e4:aa:d8:84:3f:c8:8f:cf:74:29:3c:60:db:70:14: 2e:b7:bb:47:0e:e4:73:55:a3:03:d5:08:0e:13:41: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2C:C5:EC:AA:9D:9E:27:99:22:D2:F8:A2:28:EA:B1:55:2C:B3:B5 X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d9:be:41:84:df:7b:0a:eb:31:06:6c:c5:8c:9b:e5:df:d1: 49:19:3a:a2:4e:7f:01:66:0b:d3:10:6b:8f:4f:c7:11:72:ef: 10:99:4f:49:a7:57:65:92:0c:85:92:0f:c4:cc:c4:f7:87:f9: 8f:47:d0:32:fd:f6:b5:b7:41:c5:3c:12:fe:13:c4:4c:60:77: f8:d5:ac:5c:64:76:f1:0b:db:e9:2c:28:65:7c:41:06:84:41: 2e:72:58:ba:dc:d9:05:59:8e:3e:b5:7c:33:00:59:eb:00:cd: ec:18:5e:46:2f:2d:5e:32:9d:6e:88:6b:aa:7d:03:da:0a:19: 32:aa:14:fe:3f:b7:ae:21:f3:f3:6f:0e:38:53:ac:ed:80:74: ac:85:ab:cc:12:f7:72:dc:ed:20:a7:cb:c6:df:9b:ba:be:1a: d1:ae:64:bf:80:28:0e:ca:cb:b1:31:3a:2b:fb:f0:3a:eb:08: 7f:38:82:f3:a9:9f:8b:fb:93:ef:cd:71:6a:ec:72:14:ba:f7: 12:3a:07:25:e0:dd:34:fe:3c:d2:21:48:1b:c4:61:da:0c:b7: ca:ee:91:8d:8b:d1:9c:f0:09:ca:78:83:49:b3:05:66:7d:cd: 1b:b5:26:ed:62:0d:0a:79:2e:a5:1d:47:0d:81:94:6c:c9:11: f3:f3:63:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjUwNjE0MjE0NzAxWhcNMjUwNjIxMjE0NzAxWjAYMRYwFAYD VQQDEw02ODRkZWRkNS03Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81sLAVd3NkpANSCZDoSW/4KGijwd8YwRuZ8N4JZnJtE2MToNJSlcxyP+1InP tcjk0erlnggX3rc6qOIFr6JL3nZnGpni5JyodxwapENMIGsUIPrSeGgyOYyx7G9/ IWDAOkppvrWhPbjvfrttuasQrdA9KINDS5BrBU9/+fn8UXBCjxk0hdO6yT8dx+8W EyPe++sdXChqzKF1wEwmToiS1kz2ChjCUsoh6VgdavJmMjUb7VC03veME41+0/9C t3KFM2POYePKTkABs2hQv7kopsOmJIY58na04WQ62XAGmZ/kqtiEP8iPz3QpPGDb cBQut7tHDuRzVaMD1QgOE0GfdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcsxeyq nZ4nmSLS+KIo6rFVLLO1MB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ dERfVlExaVRqZEh6R2hhUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL2b5BhN97CusxBmzFjJvl39FJGTqiTn8BZgvTEGuPT8cRcu8QmU9J p1dlkgyFkg/EzMT3h/mPR9Ay/fa1t0HFPBL+E8RMYHf41axcZHbxC9vpLChlfEEG hEEucli63NkFWY4+tXwzAFnrAM3sGF5GLy1eMp1uiGuqfQPaChkyqhT+P7euIfPz bw44U6ztgHSshavMEvdy3O0gp8vG35u6vhrRrmS/gCgOysuxMTor+/A66wh/OILz qZ+L+5PvzXFq7HIUuvcSOgcl4N00/jzSIUgbxGHaDLfK7pGNi9Gc8AnKeINJswVm fc0btSbtYg0KeS6lHUcNgZRsyRHz82PV -----END CERTIFICATE-----Generated at Mon Jun 16 07:46:39 2025 by rpki-client