$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: EOzrTIFs+QmK8AgjT7rUXOwSpMxR/RZNtvDqMEXmCbw= Subject key identifier: 3A:1E:88:0C:24:2A:D8:E0:10:4F:63:6C:80:33:46:EE:3E:EB:57:D4 Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 01C9 Signing time: Fri 08 Aug 2025 17:48:06 +0000 Manifest this update: Fri 08 Aug 2025 17:48:06 +0000 Manifest next update: Fri 15 Aug 2025 17:48:06 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: zrakqFb5Wf8jujR7WP/YEY5U5rZ0H02OsVclDayNg/s=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Aug 8 17:48:06 2025 GMT Not After : Aug 15 17:48:06 2025 GMT Subject: CN=68963856-7271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1d:6c:fd:b8:f5:36:6b:19:a6:cb:b4:68:37: b4:83:da:04:45:5b:fa:ce:71:58:9e:7c:b5:54:16: 31:86:a3:de:f5:8d:c3:91:17:71:1c:0f:8a:10:ea: 48:2d:ca:f1:2f:d1:d4:ed:ff:0f:2a:29:e1:db:be: 13:3f:4c:fe:52:d2:e3:0c:9b:de:9d:1f:50:8b:69: 1d:2b:17:cf:36:60:61:9b:43:02:d7:56:ac:58:4d: 00:bf:ba:ea:6e:8e:f9:63:21:7a:c1:89:7d:cb:a6: b8:a2:9d:3d:cc:a1:e6:e8:29:b7:9b:f3:2e:92:2a: a1:5b:2d:52:0d:aa:17:7a:c1:dd:1f:67:85:ac:25: 04:dc:81:a6:fd:dd:df:a6:3b:83:86:f3:7e:c7:e0: bd:03:39:3c:e8:09:d7:21:1f:5c:5e:92:31:15:87: 5a:07:69:bb:fa:a3:96:3b:63:9c:46:a9:01:ca:7e: 1b:c5:1b:12:38:c3:ae:11:81:9d:29:ee:53:28:00: c2:53:be:23:f3:2b:34:71:3a:7d:ca:c9:45:c5:e1: 46:33:45:bd:0e:f3:2f:9c:2b:4e:f3:c9:52:ce:3a: f3:34:3b:f7:d0:a6:0c:2c:b8:30:33:8d:40:55:89: 87:56:0b:2c:fa:0f:be:46:c2:a1:79:60:55:bb:6d: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1E:88:0C:24:2A:D8:E0:10:4F:63:6C:80:33:46:EE:3E:EB:57:D4 X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d2:0c:72:39:ef:75:cd:33:6f:0a:1d:cf:57:16:13:13:2d: e7:c6:02:66:20:0a:f6:c8:f3:37:35:94:88:6b:f8:df:d7:f9: 96:15:5d:d1:46:99:84:44:c3:91:e9:a6:8d:db:8a:21:45:56: 66:92:a9:88:08:27:22:70:73:a5:46:fb:bc:da:20:86:dd:68: ef:86:31:98:a4:1a:1d:ee:10:a0:95:f7:99:1a:0b:9a:97:66: 92:2a:81:b0:fa:71:ef:0b:2a:1d:56:eb:fc:6c:61:0c:d4:de: c6:04:11:ce:10:b2:f8:d2:2a:89:07:58:ce:0f:33:4a:6f:24: 5f:a7:be:3a:e4:ae:48:5c:ec:ed:c8:0f:39:bb:8b:b2:83:1c: 22:3a:7f:58:39:8e:ca:db:e6:ad:15:f4:d7:76:9b:1e:fa:a7: 5f:bd:1a:bb:dc:73:39:d8:45:f3:5d:55:4e:f2:fd:a3:f6:e1: bc:6e:72:d6:4c:aa:fd:41:85:27:f2:f5:4c:e1:17:3e:f3:4b: 19:fc:2f:6b:2a:64:d5:b2:f5:75:33:b0:d2:51:5f:ee:af:bc: b1:41:23:c0:33:74:a8:e0:31:b7:08:d2:56:46:6e:02:35:ef: 19:47:87:2c:94:b6:7d:2e:cb:43:6b:89:d8:63:59:11:da:d2: 47:82:c7:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUwODA4MTc0ODA2WhcNMjUwODE1MTc0ODA2WjAYMRYwFAYD VQQDEw02ODk2Mzg1Ni03MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5B1s/bj1NmsZpsu0aDe0g9oERVv6znFYnny1VBYxhqPe9Y3DkRdxHA+KEOpI LcrxL9HU7f8PKinh274TP0z+UtLjDJvenR9Qi2kdKxfPNmBhm0MC11asWE0Av7rq bo75YyF6wYl9y6a4op09zKHm6Cm3m/MukiqhWy1SDaoXesHdH2eFrCUE3IGm/d3f pjuDhvN+x+C9Azk86AnXIR9cXpIxFYdaB2m7+qOWO2OcRqkByn4bxRsSOMOuEYGd Ke5TKADCU74j8ys0cTp9yslFxeFGM0W9DvMvnCtO88lSzjrzNDv30KYMLLgwM41A VYmHVgss+g++RsKheWBVu20lBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoeiAwk KtjgEE9jbIAzRu4+61fUMB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV0gxyOe91zTNvCh3PVxYTEy3nxgJmIAr2yPM3NZSIa/jf1/mWFV3R RpmERMOR6aaN24ohRVZmkqmICCcicHOlRvu82iCG3WjvhjGYpBod7hCglfeZGgua l2aSKoGw+nHvCyodVuv8bGEM1N7GBBHOELL40iqJB1jODzNKbyRfp7465K5IXOzt yA85u4uygxwiOn9YOY7K2+atFfTXdpse+qdfvRq73HM52EXzXVVO8v2j9uG8bnLW TKr9QYUn8vVM4Rc+80sZ/C9rKmTVsvV1M7DSUV/ur7yxQSPAM3So4DG3CNJWRm4C Ne8ZR4cslLZ9LstDa4nYY1kR2tJHgsfZ -----END CERTIFICATE-----Generated at Sun Aug 10 10:35:47 2025 by rpki-client