$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json) Hash identifier: KJRwdq6ea3zbT8LDFXKmi2nf8k3ssOiIIvOgu3etTJE= Subject key identifier: D4:70:33:47:C3:3A:19:6A:88:62:B5:2C:54:6C:34:16:81:42:07:15 Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft Manifest number: 0292 Signing time: Sat 09 Aug 2025 02:10:58 +0000 Manifest this update: Sat 09 Aug 2025 02:10:57 +0000 Manifest next update: Sat 16 Aug 2025 02:10:57 +0000 Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: XZIQ3ucMq8HROxSQXkd9DVnXP2BUSYbJ3/Hn1y7rFBM=) 2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: e8WAY0Y3CoS5+B8mQdHDLApUCt8COdKCwX61EjEYzJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Validity Not Before: Aug 9 02:10:57 2025 GMT Not After : Aug 16 02:10:57 2025 GMT Subject: CN=6896ae32-c1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:a2:70:90:ad:9b:b8:9e:4a:95:7c:49:ea: f3:fd:8a:21:65:b3:d1:11:45:60:2f:3d:41:60:94: 3d:96:81:57:1f:25:c8:58:69:8e:5c:aa:db:4c:70: f0:c3:78:97:eb:74:70:53:0b:f3:91:43:fd:ab:30: 6a:10:00:96:c5:62:67:26:7a:30:7b:26:37:27:f8: ee:60:74:e3:18:20:7d:13:a5:6b:0a:08:6b:44:a5: 7d:1a:29:f5:ff:b8:af:52:4b:e2:46:0b:77:bc:f2: 19:db:b7:e2:da:76:e3:b2:45:48:03:1d:47:cb:01: b0:b1:92:11:53:86:b1:9b:2e:d4:08:c0:05:e4:b3: 2a:8e:07:6a:2d:29:57:5e:00:7e:d3:1b:6c:81:f4: 4a:39:de:4f:cc:b1:8a:98:03:7f:ea:17:52:d4:16: fa:76:79:4a:62:3a:2b:ce:02:7b:99:a5:77:aa:fb: 79:b7:ff:e0:d3:fb:cb:71:45:71:26:a6:74:5c:0a: 59:01:5a:17:68:c3:5d:97:80:d2:84:c3:52:de:85: 61:6b:1a:21:33:e2:e1:40:d1:cd:cf:a1:73:75:2f: df:6c:4a:7b:ca:8c:78:3e:52:66:70:42:2f:23:28: 09:f1:14:4a:81:b1:96:d8:f4:18:e1:c7:38:9b:24: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:70:33:47:C3:3A:19:6A:88:62:B5:2C:54:6C:34:16:81:42:07:15 X509v3 Authority Key Identifier: keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:27:f2:be:f9:1b:c4:e8:4d:df:31:cb:ee:3a:ec:8a:b1:82: d0:e5:46:a5:f9:bd:51:7a:a9:33:89:2a:be:96:7a:33:91:02: 3e:a2:c5:6a:45:47:d8:42:0c:4d:a0:1e:9e:be:08:1c:bf:c8: b5:dd:f6:94:fa:a2:33:5c:00:8b:5b:96:7a:34:31:c8:e4:d4: 58:b0:c3:e8:71:c7:83:6b:29:7c:38:f5:6b:89:3c:66:ed:df: 52:09:0b:5a:c9:d1:7b:c0:9b:0c:ee:65:21:00:2d:af:d2:ec: 50:26:3d:c4:5e:46:16:be:87:4d:64:6b:5b:41:36:23:8f:5b: a9:27:47:dc:15:52:93:db:30:cc:87:c5:b3:9d:97:35:5a:5d: 19:75:bb:cd:37:03:0d:3b:c8:e8:f6:65:10:4e:09:b7:7b:8e: 9b:f7:99:3f:d9:d4:fd:91:2c:09:a9:ab:b7:e2:23:56:15:83: 50:76:8d:a1:8e:8b:73:bd:5d:8c:57:46:b7:00:3c:85:6e:24: 35:f5:44:b0:30:47:ef:e9:8d:b5:bb:f8:1c:f7:98:1e:83:e8: ae:3a:34:a2:7c:ab:6c:80:fe:4d:f6:66:28:bf:8e:56:22:fa: a7:cc:69:59:11:4e:d0:35:79:39:a8:69:57:67:57:cc:a4:43: eb:09:e2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2 MjMwMDU5RTgwHhcNMjUwODA5MDIxMDU3WhcNMjUwODE2MDIxMDU3WjAYMRYwFAYD VQQDEw02ODk2YWUzMi1jMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNeicJCtm7ieSpV8Serz/YohZbPREUVgLz1BYJQ9loFXHyXIWGmOXKrbTHDw w3iX63RwUwvzkUP9qzBqEACWxWJnJnoweyY3J/juYHTjGCB9E6VrCghrRKV9Gin1 /7ivUkviRgt3vPIZ27fi2nbjskVIAx1HywGwsZIRU4axmy7UCMAF5LMqjgdqLSlX XgB+0xtsgfRKOd5PzLGKmAN/6hdS1Bb6dnlKYjorzgJ7maV3qvt5t//g0/vLcUVx JqZ0XApZAVoXaMNdl4DShMNS3oVhaxohM+LhQNHNz6FzdS/fbEp7yox4PlJmcEIv IygJ8RRKgbGW2PQY4cc4mySW+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRwM0fD OhlqiGK1LFRsNBaBQgcVMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L T20xSXp3UWp4YlJpTUFXZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+J/K++RvE6E3fMcvuOuyKsYLQ5Ual+b1ReqkziSq+lnozkQI+osVq RUfYQgxNoB6evggcv8i13faU+qIzXACLW5Z6NDHI5NRYsMPocceDayl8OPVriTxm 7d9SCQtaydF7wJsM7mUhAC2v0uxQJj3EXkYWvodNZGtbQTYjj1upJ0fcFVKT2zDM h8WznZc1Wl0ZdbvNNwMNO8jo9mUQTgm3e46b95k/2dT9kSwJqau34iNWFYNQdo2h jotzvV2MV0a3ADyFbiQ19USwMEfv6Y21u/gc95geg+iuOjSifKtsgP5N9mYov45W IvqnzGlZEU7QNXk5qGlXZ1fMpEPrCeKH -----END CERTIFICATE-----Generated at Sat Aug 9 14:33:11 2025 by rpki-client