$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft File: GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json) Hash identifier: Lp+ViNLYiYF1gteadcCyyvh57XJzrW44ZY5gXLIIh9I= Subject key identifier: B1:40:8D:87:17:4C:1C:C4:D2:09:FF:F7:91:53:8F:CB:AE:D0:35:C3 Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF Certificate issuer: /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft Manifest number: 0159 Signing time: Fri 13 Jun 2025 03:03:34 +0000 Manifest this update: Fri 13 Jun 2025 03:03:34 +0000 Manifest next update: Fri 20 Jun 2025 03:03:34 +0000 Files and hashes: 1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: C4crku+/5AiTQUdUkXQw5EvklNtKtqxg8wANnfckHOo=) 2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: ++SEuifHIWAk3FJLbuooJEG4UII9ZGtzJgkMFEUrXTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB35A, serialNumber=1A60725AE4045896E304083003213EEA95267ECF Validity Not Before: Jun 13 03:03:34 2025 GMT Not After : Jun 20 03:03:34 2025 GMT Subject: CN=684b9506-69b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:58:fd:aa:69:e1:a4:ba:43:76:11:07:0a: 9f:e3:b3:fe:a3:b6:88:d0:f4:39:e7:9e:67:82:41: 83:63:15:d9:eb:92:88:6a:82:79:21:41:31:1a:fe: fb:d4:7e:6a:74:99:e4:24:83:60:f7:11:ef:24:17: ca:4d:e5:44:20:c6:70:5d:50:c5:dc:de:97:fb:ab: 52:27:d5:35:fd:fb:e9:b6:08:88:94:fc:ed:8f:96: 92:d1:fd:f9:10:cf:f8:fb:2b:13:5e:c2:0d:bb:66: e1:ec:90:c7:83:92:cf:fc:6e:1b:c2:b9:09:3b:db: 7a:4a:4e:45:c0:4d:1f:86:7f:e3:03:a6:2f:b8:21: fc:a5:2e:ff:8b:27:58:a8:09:af:10:d0:67:28:a3: 8e:96:28:94:a8:75:f3:a9:fc:3d:53:c6:7f:df:8e: 39:36:b5:62:6e:5b:65:94:3f:c7:64:59:af:e1:d3: 45:7c:35:e5:81:9a:85:be:8d:da:10:16:45:a4:86: 72:ae:f5:9b:f0:f4:80:ad:dd:c7:11:51:06:a7:9a: 81:99:85:b7:50:0d:60:26:29:61:bc:f5:90:3f:d7: 63:d4:5e:55:57:f8:ce:97:64:4b:1a:43:5f:cb:5e: 63:80:d5:f3:17:81:a1:4d:13:f4:20:6e:c9:b3:e5: 91:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:8D:87:17:4C:1C:C4:D2:09:FF:F7:91:53:8F:CB:AE:D0:35:C3 X509v3 Authority Key Identifier: keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6f:32:77:87:7d:5b:cd:81:cd:35:8b:fc:1c:89:c4:d6:25: 37:bc:6e:b0:cd:ef:9d:0d:cf:b4:02:2b:64:2e:a1:c1:3f:22: b6:a7:b0:5b:78:67:21:d9:a7:3f:20:38:2a:f1:07:19:5d:eb: 5a:b7:4a:bc:a1:6d:79:03:05:8d:ae:eb:57:c0:23:a8:05:7d: 74:87:0e:ae:37:77:72:c1:10:6a:57:a8:44:2c:92:de:0d:b0: 7e:a4:96:83:40:7a:65:7e:2a:cd:62:d8:63:bd:94:59:5a:f1: 0d:5e:32:fb:f8:c6:58:a4:3e:ca:de:4a:da:9e:9a:13:37:48: 35:c5:63:c2:dd:b8:76:1f:86:72:9a:94:17:82:0f:01:9e:17: ab:82:52:09:ad:8b:3e:68:f3:6d:c4:02:40:be:ea:ac:ff:20: 9e:b1:cf:df:69:17:5f:79:2c:53:c2:5c:8d:73:ec:04:47:22: bd:ae:19:42:0d:b8:c5:c6:fe:a9:31:90:11:16:45:f4:76:23: 74:7d:80:3c:42:89:f2:6b:ea:0d:dc:b9:eb:bb:65:80:18:af: 51:ae:4b:31:21:b6:27:c1:2e:5b:65:e1:15:34:59:e7:43:0a: 09:27:b7:41:c5:a9:60:fd:77:39:49:6c:ce:ad:ca:5c:4f:ca: b2:7a:29:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIzNUExMTAvBgNVBAUTKDFBNjA3MjVBRTQwNDU4OTZFMzA0MDgzMDAzMjEzRUVB OTUyNjdFQ0YwHhcNMjUwNjEzMDMwMzM0WhcNMjUwNjIwMDMwMzM0WjAYMRYwFAYD VQQDEw02ODRiOTUwNi02OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCpY/app4aS6Q3YRBwqf47P+o7aI0PQ5555ngkGDYxXZ65KIaoJ5IUExGv77 1H5qdJnkJINg9xHvJBfKTeVEIMZwXVDF3N6X+6tSJ9U1/fvptgiIlPztj5aS0f35 EM/4+ysTXsINu2bh7JDHg5LP/G4bwrkJO9t6Sk5FwE0fhn/jA6YvuCH8pS7/iydY qAmvENBnKKOOliiUqHXzqfw9U8Z/3445NrVibltllD/HZFmv4dNFfDXlgZqFvo3a EBZFpIZyrvWb8PSArd3HEVEGp5qBmYW3UA1gJilhvPWQP9dj1F5VV/jOl2RLGkNf y15jgNXzF4GhTRP0IG7Js+WRHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFAjYcX TBzE0gn/95FTj8uu0DXDMB8GA1UdIwQYMBaAFBpgclrkBFiW4wQIMAMhPuqVJn7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjM1QS8wMDZDRDk0QTNC MjExMUVFODA0QzYzODNDNEY5QUUwMi9HbUJ5V3VRRVdKYmpCQWd3QXlFLTZwVW1m czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtQnlXdVFFV0piakJBZ3dBeUUtNnBVbWZzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjM1QS8wMDZDRDk0QTNCMjExMUVFODA0QzYzODNDNEY5QUUwMi9HbUJ5V3VRRVdK YmpCQWd3QXlFLTZwVW1mczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMbzJ3h31bzYHNNYv8HInE1iU3vG6wze+dDc+0AitkLqHBPyK2p7Bb eGch2ac/IDgq8QcZXetat0q8oW15AwWNrutXwCOoBX10hw6uN3dywRBqV6hELJLe DbB+pJaDQHplfirNYthjvZRZWvENXjL7+MZYpD7K3kranpoTN0g1xWPC3bh2H4Zy mpQXgg8BnherglIJrYs+aPNtxAJAvuqs/yCesc/faRdfeSxTwlyNc+wERyK9rhlC DbjFxv6pMZARFkX0diN0fYA8Qonya+oN3Lnru2WAGK9RrksxIbYnwS5bZeEVNFnn QwoJJ7dBxalg/Xc5SWzOrcpcT8qyeimz -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:31 2025 by rpki-client