$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: kqFdiWyju08mEYrQoX1UuYOnqFsv4s4Tyoq04jAFNXQ= Subject key identifier: 3C:A0:9D:7D:4D:A3:CE:57:2F:CC:EC:3B:F0:28:2B:70:CE:6F:BB:2A Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 01AF Signing time: Wed 18 Jun 2025 17:33:52 +0000 Manifest this update: Wed 18 Jun 2025 17:33:51 +0000 Manifest next update: Wed 25 Jun 2025 17:33:51 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: CqeL1gCFE4Kmto0Cpj1mHpxpSnSeZSXv5dAiLDrtAK8=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Jun 18 17:33:51 2025 GMT Not After : Jun 25 17:33:51 2025 GMT Subject: CN=6852f87f-c992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:73:4a:43:15:c4:31:73:ca:35:83:cb:df: dd:5c:0f:5b:59:0b:ac:8d:98:e8:f4:47:74:63:7c: 72:7a:88:b4:77:fa:70:e8:cd:71:3e:24:57:b4:71: 90:1d:f5:ce:2f:9f:40:c1:9d:b6:1e:9d:60:86:c5: ec:56:e1:9b:a1:8c:11:2e:d7:a6:4e:c2:33:41:9c: 26:29:d4:ee:91:62:e3:67:0c:28:cb:cf:94:99:36: ab:4d:50:aa:e7:1e:5f:84:4e:7d:86:13:da:1c:06: e6:20:ec:41:7a:58:da:b0:d9:8d:88:05:74:bc:97: e7:7b:8a:4c:0e:44:50:fa:30:a7:29:bd:a2:73:7c: 3c:c7:69:ac:8e:fb:6a:96:2c:2e:70:e1:cd:28:66: a2:7e:fe:bb:f9:92:11:82:45:e1:9b:68:c8:64:d7: cc:f7:cf:f4:d5:a1:47:f8:aa:e5:5c:26:54:29:42: 3c:f1:4b:a2:a9:c1:7d:f1:5f:e2:b0:f7:33:3d:f5: 5d:1e:3e:b1:c2:bc:c9:8d:b2:3f:5d:d5:56:e5:fa: 30:a6:98:30:6b:a4:c2:9c:a9:10:5b:29:fe:4f:f0: e8:2e:18:a0:37:28:78:49:e1:ed:83:b3:1d:a6:1e: 88:d3:d8:e1:26:48:1c:b6:94:c6:27:5c:cc:fc:56: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A0:9D:7D:4D:A3:CE:57:2F:CC:EC:3B:F0:28:2B:70:CE:6F:BB:2A X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:10:fb:bb:a5:5b:0a:2c:20:50:1d:f7:ac:27:e6:2c:bd:58: 1d:e8:32:42:d4:24:85:a1:da:8b:40:89:e3:03:50:fd:4d:06: 1f:48:3c:92:b7:a3:1f:96:c7:50:85:56:60:2f:e7:b2:6d:8c: 2c:3f:9d:d4:03:0d:5e:ab:b5:1c:ab:59:62:bf:c6:a3:6a:10: d3:45:d4:a2:87:36:8a:4f:9b:05:ad:83:00:74:63:4a:1e:c4: 5f:b5:80:67:8b:38:d5:2f:ab:5c:98:41:54:9d:ef:58:aa:1b: a9:4e:95:22:0f:af:9e:1b:f2:aa:f9:dd:d7:f9:f2:8b:3c:c8: 7b:16:61:ef:6d:ff:d8:b5:f1:79:99:cf:4e:04:ca:94:9a:cf: a2:68:6e:4a:e0:5c:d1:bb:97:46:de:53:78:4e:1e:b5:8b:9d: 97:15:92:43:d5:dc:73:71:83:ad:ba:b3:39:62:cc:9f:2d:10: c6:85:14:49:21:5a:a8:63:21:56:4e:6b:2f:ba:0e:ce:41:39: e2:f9:dc:5b:d1:8c:28:e9:f3:a7:ab:68:66:a0:83:db:ad:1c: 87:94:3b:07:b5:c5:cf:b8:7f:c1:2e:e6:fa:b2:62:5e:c9:66: b7:b2:d2:04:84:19:64:bd:d0:c1:d0:3c:ec:a1:3b:ca:8a:8a: 01:bf:cc:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUwNjE4MTczMzUxWhcNMjUwNjI1MTczMzUxWjAYMRYwFAYD VQQDEw02ODUyZjg3Zi1jOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRFzSkMVxDFzyjWDy9/dXA9bWQusjZjo9Ed0Y3xyeoi0d/pw6M1xPiRXtHGQ HfXOL59AwZ22Hp1ghsXsVuGboYwRLtemTsIzQZwmKdTukWLjZwwoy8+UmTarTVCq 5x5fhE59hhPaHAbmIOxBeljasNmNiAV0vJfne4pMDkRQ+jCnKb2ic3w8x2msjvtq liwucOHNKGaifv67+ZIRgkXhm2jIZNfM98/01aFH+KrlXCZUKUI88UuiqcF98V/i sPczPfVdHj6xwrzJjbI/XdVW5fowppgwa6TCnKkQWyn+T/DoLhigNyh4SeHtg7Md ph6I09jhJkgctpTGJ1zM/FYLfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDygnX1N o85XL8zsO/AoK3DOb7sqMB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAEPu7pVsKLCBQHfesJ+YsvVgd6DJC1CSFodqLQInjA1D9TQYfSDyS t6MflsdQhVZgL+eybYwsP53UAw1eq7Ucq1liv8ajahDTRdSihzaKT5sFrYMAdGNK HsRftYBnizjVL6tcmEFUne9YqhupTpUiD6+eG/Kq+d3X+fKLPMh7FmHvbf/YtfF5 mc9OBMqUms+iaG5K4FzRu5dG3lN4Th61i52XFZJD1dxzcYOturM5YsyfLRDGhRRJ IVqoYyFWTmsvug7OQTni+dxb0Ywo6fOnq2hmoIPbrRyHlDsHtcXPuH/BLub6smJe yWa3stIEhBlkvdDB0DzsoTvKiooBv8wY -----END CERTIFICATE-----Generated at Thu Jun 19 23:17:02 2025 by rpki-client