$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: 0Z8ugeJudN8697XwqXe/vuWiaLW46Fq1Eq+giFMcdc0= Subject key identifier: 8D:6A:85:B2:32:B5:51:4C:07:74:33:E6:77:F7:70:CE:E5:B8:E0:79 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: 91 Signing time: Sat 09 Aug 2025 06:55:44 +0000 Manifest this update: Sat 09 Aug 2025 06:55:44 +0000 Manifest next update: Sat 16 Aug 2025 06:55:44 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: M5/lO4khjAa+tKOKshccjMJEVOutOJNxyywu2c9N4MI=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Aug 9 06:55:44 2025 GMT Not After : Aug 16 06:55:44 2025 GMT Subject: CN=6896f0f0-41ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1b:3b:ce:e2:25:6e:3a:3e:8b:51:a3:70:e7: 23:e4:be:75:ed:53:44:3e:2e:fb:68:e3:b6:61:6c: ba:40:47:0d:2e:ca:42:0f:47:96:89:2f:ca:69:d4: 9c:c9:ff:65:12:7c:f7:67:04:38:be:6c:b1:39:1c: 2c:74:e0:ac:e1:07:ee:e9:99:26:e5:bb:2f:82:67: 35:c3:9e:25:ae:69:17:72:9f:d6:cc:f6:fd:f0:27: 5f:01:08:8a:96:d7:03:6e:89:5d:2c:7b:2e:03:84: c5:a3:c6:29:ac:ad:2d:d2:aa:3a:a4:1c:71:13:86: bc:ab:a0:e0:03:27:71:0c:64:f7:ee:1d:72:60:e9: 14:49:00:8e:b9:48:b2:08:1a:69:8a:81:4d:03:b1: c3:ca:9b:39:2d:4a:22:9e:e4:fb:7a:5e:80:df:5d: fe:6a:21:e0:f6:ba:d4:3a:27:99:36:58:96:f5:34: 9d:c0:e0:db:ca:60:83:5a:e3:77:60:00:ae:99:b0: 33:df:cc:ec:34:84:e2:c0:60:b5:22:b0:a6:15:17: a6:db:da:7a:e3:e8:b3:ff:cd:47:6d:ae:60:c8:2e: 78:fb:be:3d:0d:88:78:a1:b7:33:62:16:14:26:15: c7:2d:4a:44:0c:b4:bf:56:71:b6:22:4e:1f:1c:f7: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:85:B2:32:B5:51:4C:07:74:33:E6:77:F7:70:CE:E5:B8:E0:79 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:0e:19:d4:62:76:11:20:7e:b3:6e:c3:f0:a0:92:c9:ab:35: 6d:12:18:e7:b0:f4:93:49:24:1d:c2:4a:dd:ca:37:98:ec:ab: 69:7d:b1:b9:3e:b1:8a:a6:c0:a8:77:70:49:60:f4:a8:25:03: b1:b3:3e:27:26:a4:ee:7d:d8:8c:36:37:65:d6:69:43:7b:1b: ea:0b:57:94:83:ee:cd:27:93:0f:18:f0:99:07:2c:80:c0:59: 0b:8d:9b:c4:78:9f:29:6c:14:68:b8:e3:69:49:5f:20:2b:fa: 13:b6:27:5a:00:99:aa:b4:62:fb:22:b5:38:7c:d4:b5:ad:5f: 24:4c:59:1b:68:01:1e:3c:fc:61:04:75:6c:eb:92:f0:75:82: c3:9e:ff:55:59:27:ce:6f:aa:e9:4e:84:7f:09:20:44:51:62: 2a:9e:ea:b9:d7:b0:6d:62:b9:1a:b2:ed:a7:18:2b:8a:80:59: 30:52:c8:49:00:94:84:8d:7e:e7:3b:5c:47:25:87:cf:26:c6: ef:f0:4f:30:fe:74:c7:dc:6e:81:b5:74:9b:14:54:05:81:00: 0b:47:83:50:1f:6f:8e:b4:e1:29:48:e1:90:84:4c:af:85:dd: f8:17:a2:8b:26:af:9e:f6:a8:e4:05:97:f2:a5:04:2e:30:c0: 47:42:5b:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKEQ0Njk2NEY5RjM3MzFGMkY2M0U2NzAwOEM5MUU1OUM3 RENDNzg1NTcwHhcNMjUwODA5MDY1NTQ0WhcNMjUwODE2MDY1NTQ0WjAYMRYwFAYD VQQDEw02ODk2ZjBmMC00MWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hs7zuIlbjo+i1GjcOcj5L517VNEPi77aOO2YWy6QEcNLspCD0eWiS/KadSc yf9lEnz3ZwQ4vmyxORwsdOCs4Qfu6Zkm5bsvgmc1w54lrmkXcp/WzPb98CdfAQiK ltcDboldLHsuA4TFo8YprK0t0qo6pBxxE4a8q6DgAydxDGT37h1yYOkUSQCOuUiy CBppioFNA7HDyps5LUoinuT7el6A313+aiHg9rrUOieZNliW9TSdwODbymCDWuN3 YACumbAz38zsNITiwGC1IrCmFRem29p64+iz/81Hba5gyC54+749DYh4obczYhYU JhXHLUpEDLS/VnG2Ik4fHPeuLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1qhbIy tVFMB3Qz5nf3cM7luOB5MB8GA1UdIwQYMBaAFNRpZPnzcx8vY+ZwCMkeWcfcx4VX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FOTI2RTkxMjlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5OWo1bkFJeVI1Wng5ekho VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FOTI2RTkxMjlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5 OWo1bkFJeVI1Wng5ekhoVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2DhnUYnYRIH6zbsPwoJLJqzVtEhjnsPSTSSQdwkrdyjeY7KtpfbG5 PrGKpsCod3BJYPSoJQOxsz4nJqTufdiMNjdl1mlDexvqC1eUg+7NJ5MPGPCZByyA wFkLjZvEeJ8pbBRouONpSV8gK/oTtidaAJmqtGL7IrU4fNS1rV8kTFkbaAEePPxh BHVs65LwdYLDnv9VWSfOb6rpToR/CSBEUWIqnuq517BtYrkasu2nGCuKgFkwUshJ AJSEjX7nO1xHJYfPJsbv8E8w/nTH3G6BtXSbFFQFgQALR4NQH2+OtOEpSOGQhEyv hd34F6KLJq+e9qjkBZfypQQuMMBHQlvg -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:44 2025 by rpki-client