$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json) Hash identifier: VE2q8ZUyNNkucAO02PzSxY+81Yb4hftKSdTmtUCEwaY= Subject key identifier: 52:19:61:16:B2:78:9F:E4:EB:7D:33:9C:D0:64:BD:F0:DD:BF:9A:89 Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft Manifest number: 03B2 Signing time: Sat 21 Jun 2025 00:34:32 +0000 Manifest this update: Sat 21 Jun 2025 00:34:32 +0000 Manifest next update: Sat 28 Jun 2025 00:34:32 +0000 Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: SsQW2Gmj40uUwgs3Zyh7eBUo+3lfFiD8Z0yuswGY6KY=) 2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: 8BJmRiErzxldmGuPcVm3YUprnJm+HfKbTIGSnCrNI1I=) 3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: slEYVdAk6tIbZpblC8w7KpBF1oowZxGxHf1f2574AkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Validity Not Before: Jun 21 00:34:32 2025 GMT Not After : Jun 28 00:34:32 2025 GMT Subject: CN=6855fe18-d1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:73:11:4a:bd:1f:57:d7:40:ff:87:1d:1e:2c: 98:51:55:a9:d2:46:0c:57:6a:c3:44:48:75:96:53: 5c:e1:9d:14:52:84:b6:35:64:1f:4b:de:18:92:69: 2d:f0:e0:7c:98:cf:87:0b:31:9c:c4:e3:57:bb:e3: 05:b0:ee:e2:6d:9f:12:c4:a5:01:76:b7:6a:12:ff: c6:8b:10:72:1e:4f:d4:a9:d4:c2:17:65:fe:1d:4f: 08:62:20:dc:e1:c4:6e:bc:48:49:4a:56:87:23:f5: 7f:4f:27:2e:31:86:e5:1c:e5:4b:f4:55:05:ed:d1: 6f:10:e6:f1:95:44:20:c0:eb:16:6e:24:c7:86:d5: ef:4b:d4:f4:77:3b:a8:56:36:86:f0:99:f2:31:42: 1e:ac:e5:58:37:7c:e7:24:09:f4:9a:5f:f9:d9:dd: bb:5b:f4:07:b9:0c:d8:eb:ac:82:62:c6:04:05:3c: 33:22:c3:51:c6:1b:65:32:83:c5:53:fd:00:52:c5: 7d:c9:89:c8:78:64:f8:f3:85:1f:c3:ce:02:37:77: 3f:18:7a:da:2d:8b:8d:76:c0:e5:97:25:00:66:6f: 7f:8b:68:3f:7e:c7:1d:5c:0e:78:58:5b:9a:81:b1: 9c:24:08:23:82:9e:64:a7:ea:64:85:fe:7a:77:7f: c6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:61:16:B2:78:9F:E4:EB:7D:33:9C:D0:64:BD:F0:DD:BF:9A:89 X509v3 Authority Key Identifier: keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:db:f4:da:ce:b0:51:01:b0:86:96:93:0b:97:ed:c1:36:60: 28:1d:a4:c5:74:88:bc:47:c1:6a:3c:e7:bd:46:e2:f5:9a:6e: 15:cb:97:58:28:e6:91:78:fa:03:c1:a7:de:c3:22:c1:1f:82: 67:b7:1d:27:82:80:6d:d6:fd:73:ff:b0:55:73:27:c7:5b:fa: be:79:14:e6:58:0c:2b:02:21:c2:18:07:04:a1:8e:7f:1d:27: 5a:5a:f3:e2:ea:2f:a2:7e:8f:4f:a7:40:0f:1a:84:3e:38:79: b1:f7:8a:40:11:e3:61:c4:bb:ad:62:37:4b:e8:33:62:6b:89: 31:b2:4d:0b:cd:e4:39:b4:00:f2:88:f8:b0:f8:52:b3:74:4c: 7a:3b:29:38:a1:f6:d8:77:62:4b:26:ef:ce:19:15:06:30:e6: e4:bc:3b:22:17:e7:0a:3e:72:a4:a2:f3:7d:73:c8:23:4b:dd: 0c:93:74:22:5e:7c:f2:59:7a:ce:06:c3:18:c7:b5:1a:19:1d: 83:34:f7:d9:f3:3a:3b:fa:00:79:5d:0c:4c:da:ad:71:87:79: 4a:70:86:86:01:a9:f8:91:be:b7:40:47:e9:55:70:f5:d3:d0: 1e:a6:8c:d9:1e:09:00:72:29:25:97:fd:31:7a:43:02:74:6b: 0e:d3:12:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3MjAxMTAvBgNVBAUTKDFCMDM2QkZGODc4MDdDQkZDNkU5MTIzNkNCMDg2RDRG RTJCMDk5M0QwHhcNMjUwNjIxMDAzNDMyWhcNMjUwNjI4MDAzNDMyWjAYMRYwFAYD VQQDEw02ODU1ZmUxOC1kMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nMRSr0fV9dA/4cdHiyYUVWp0kYMV2rDREh1llNc4Z0UUoS2NWQfS94Ykmkt 8OB8mM+HCzGcxONXu+MFsO7ibZ8SxKUBdrdqEv/GixByHk/UqdTCF2X+HU8IYiDc 4cRuvEhJSlaHI/V/TycuMYblHOVL9FUF7dFvEObxlUQgwOsWbiTHhtXvS9T0dzuo VjaG8JnyMUIerOVYN3znJAn0ml/52d27W/QHuQzY66yCYsYEBTwzIsNRxhtlMoPF U/0AUsV9yYnIeGT484Ufw84CN3c/GHraLYuNdsDllyUAZm9/i2g/fscdXA54WFua gbGcJAgjgp5kp+pkhf56d3/GdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIZYRay eJ/k630znNBkvfDdv5qJMB8GA1UdIwQYMBaAFBsDa/+HgHy/xukSNssIbU/isJk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDcyMC8yMDlGOEI3NEE3 OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZMX0c2UkkyeXdodFQtS3dt VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3TnJfNGVBZkxfRzZSSTJ5d2h0VC1Ld21UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDcyMC8yMDlGOEI3NEE3OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZM X0c2UkkyeXdodFQtS3dtVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD2/TazrBRAbCGlpMLl+3BNmAoHaTFdIi8R8FqPOe9RuL1mm4Vy5dY KOaRePoDwafewyLBH4Jntx0ngoBt1v1z/7BVcyfHW/q+eRTmWAwrAiHCGAcEoY5/ HSdaWvPi6i+ifo9Pp0APGoQ+OHmx94pAEeNhxLutYjdL6DNia4kxsk0LzeQ5tADy iPiw+FKzdEx6Oyk4ofbYd2JLJu/OGRUGMObkvDsiF+cKPnKkovN9c8gjS90Mk3Qi XnzyWXrOBsMYx7UaGR2DNPfZ8zo7+gB5XQxM2q1xh3lKcIaGAan4kb63QEfpVXD1 09AepozZHgkAcikll/0xekMCdGsO0xIX -----END CERTIFICATE-----Generated at Sat Jun 21 01:49:30 2025 by rpki-client