$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: 9D+KUvvxc2agQ3J2YTu7fx657vRVtN2jGOGDlYgoTQQ= Subject key identifier: 68:CD:FD:01:86:C4:C1:9A:0A:8F:FD:B0:C9:C0:A9:8B:E8:0D:0C:A9 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: 74 Signing time: Fri 13 Jun 2025 05:44:23 +0000 Manifest this update: Fri 13 Jun 2025 05:44:23 +0000 Manifest next update: Fri 20 Jun 2025 05:44:23 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: zgkMw/NpKEfYj/uRl31FRkJszDtDR79i2IrKOd3kfUI=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Jun 13 05:44:23 2025 GMT Not After : Jun 20 05:44:23 2025 GMT Subject: CN=684bbab7-eb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a2:81:14:c2:b8:1a:bc:76:22:72:09:2e:a7: 84:df:40:ad:d1:de:af:f6:0e:74:84:8b:11:46:e6: 97:57:79:50:28:70:dd:99:42:14:5c:98:10:a1:1e: e6:32:c5:11:7a:dd:12:27:7a:a0:4c:66:5d:5e:14: 06:f9:ec:87:b9:03:82:44:40:f1:ea:09:3d:65:d4: 98:9a:39:89:b8:c6:d5:56:57:cc:e6:36:58:e9:c4: 9c:a8:13:32:a7:8e:28:29:1a:5c:45:3c:7d:1f:a2: 06:09:12:f3:fa:f7:07:6a:f7:08:18:90:bf:d7:74: bd:7d:ae:ff:f8:24:44:8b:c5:e4:16:2d:b2:46:44: 46:e3:e4:a0:27:32:25:8a:4e:85:08:90:1c:75:35: fc:a1:ff:fd:d0:82:ff:d7:95:6c:98:c0:7d:f6:d4: b7:fa:d0:9d:72:e0:ec:c2:b1:77:61:f6:b7:42:19: 4a:09:77:13:97:f7:0e:c4:fa:79:20:51:77:17:53: 2e:9e:ec:5c:8f:4a:aa:17:46:f7:49:0b:e7:e0:2c: 55:0b:81:a7:15:a1:01:bb:db:72:6a:58:7c:b5:ae: 29:57:e7:88:e1:97:a6:5a:c8:17:67:3b:cb:1c:c6: 25:ff:c9:a3:8f:99:e1:12:34:cd:47:51:d9:14:66: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:FD:01:86:C4:C1:9A:0A:8F:FD:B0:C9:C0:A9:8B:E8:0D:0C:A9 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:aa:5f:95:04:3c:c2:eb:f5:a5:40:1d:8a:e8:69:eb:29:c2: 71:b8:c7:09:3c:c3:f7:40:ba:13:60:e3:a7:cc:42:77:d4:38: d4:6c:d1:b8:ae:99:2a:da:85:df:b3:44:ff:36:77:74:42:86: 4d:8f:11:7d:f7:f5:a3:38:50:16:b3:37:69:9b:be:44:a5:1a: 5b:df:d2:44:c4:ff:4d:b5:78:fb:bd:07:0d:67:fe:fe:ec:74: d7:28:7d:f2:b1:8c:d2:06:b7:5b:24:b2:fe:b8:c0:8e:22:30: 78:30:02:a1:2e:fd:42:e9:67:99:2a:a7:35:22:79:3b:fa:0c: d6:8e:41:3a:b0:64:8e:45:83:6f:d7:56:d3:ba:f7:13:9c:0e: 1e:6b:dc:26:38:a1:bd:28:3c:4a:5e:06:39:79:4e:82:7b:b9: 58:47:9a:3f:90:bc:56:92:ef:53:83:55:79:db:48:ee:76:d5: ea:32:ba:a9:20:0a:3d:f4:7c:1e:85:da:52:4b:4a:24:4d:0f: e4:30:f7:20:65:e7:28:24:fc:9b:12:85:4c:b0:ab:78:d3:a9: 30:c7:66:28:5d:23:22:bd:23:4a:1b:95:56:3c:40:4b:86:a4: 2d:27:b6:21:9f:76:61:22:da:1f:6c:2d:79:9e:e7:71:21:dc: 38:1b:36:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEYxMTExMC8GA1UEBRMoRDQ2OTY0RjlGMzczMUYyRjYzRTY3MDA4QzkxRTU5QzdE Q0M3ODU1NzAeFw0yNTA2MTMwNTQ0MjNaFw0yNTA2MjAwNTQ0MjNaMBgxFjAUBgNV BAMTDTY4NGJiYWI3LWViMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnooEUwrgavHYicgkup4TfQK3R3q/2DnSEixFG5pdXeVAocN2ZQhRcmBChHuYy xRF63RIneqBMZl1eFAb57Ie5A4JEQPHqCT1l1JiaOYm4xtVWV8zmNljpxJyoEzKn jigpGlxFPH0fogYJEvP69wdq9wgYkL/XdL19rv/4JESLxeQWLbJGREbj5KAnMiWK ToUIkBx1Nfyh//3Qgv/XlWyYwH321Lf60J1y4OzCsXdh9rdCGUoJdxOX9w7E+nkg UXcXUy6e7FyPSqoXRvdJC+fgLFULgacVoQG723JqWHy1rilX54jhl6ZayBdnO8sc xiX/yaOPmeESNM1HUdkUZuefAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaM39AYbE wZoKj/2wycCpi+gNDKkwHwYDVR0jBBgwFoAU1Glk+fNzHy9j5nAIyR5Zx9zHhVcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRjExL0U5MjZFOTEyOUE3 QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhW Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUdsay1mTnpIeTlqNW5BSXlSNVp4OXpIaFZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RjExL0U5MjZFOTEyOUE3QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5 ajVuQUl5UjVaeDl6SGhWYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL6qX5UEPMLr9aVAHYroaespwnG4xwk8w/dAuhNg46fMQnfUONRs0biu mSrahd+zRP82d3RChk2PEX339aM4UBazN2mbvkSlGlvf0kTE/021ePu9Bw1n/v7s dNcoffKxjNIGt1sksv64wI4iMHgwAqEu/ULpZ5kqpzUieTv6DNaOQTqwZI5Fg2/X VtO69xOcDh5r3CY4ob0oPEpeBjl5ToJ7uVhHmj+QvFaS71ODVXnbSO521eoyuqkg Cj30fB6F2lJLSiRND+Qw9yBl5ygk/JsShUywq3jTqTDHZihdIyK9I0oblVY8QEuG pC0ntiGfdmEi2h9sLXme53Eh3DgbNmU= -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:31 2025 by rpki-client