$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: 1tcbWo89T/Meyj1gcJs1bfh287Dv5mvPrkdjsitMF/o= Subject key identifier: E3:F4:82:46:58:B5:01:32:15:C7:A9:BB:4E:41:1E:6D:5B:4D:09:EB Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: CF Signing time: Sun 15 Jun 2025 04:48:08 +0000 Manifest this update: Sun 15 Jun 2025 04:48:07 +0000 Manifest next update: Sun 22 Jun 2025 04:48:07 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: uHElfPOcUO80McD6BleWee5QhWc8j0zWVbJsMQqY4lE=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Jun 15 04:48:07 2025 GMT Not After : Jun 22 04:48:07 2025 GMT Subject: CN=684e5088-7ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:f8:f5:48:61:ef:0f:d2:01:10:ca:0e:50: 29:9f:81:6e:88:b6:a0:98:bc:4a:1f:43:3c:f7:b7: 5f:80:97:f5:f0:5a:3e:0c:c2:68:dc:75:d3:18:d7: 05:de:f5:f0:53:32:9b:f7:6b:40:c1:32:87:38:86: de:24:ad:60:53:8b:bd:c2:be:62:9e:67:d1:66:27: 25:fd:7d:c6:5f:0c:49:94:b4:c9:cc:c8:4c:77:4c: cd:8d:c0:e2:97:16:8c:eb:e0:68:34:69:fd:3c:2e: 75:19:f7:89:dc:c4:d2:a2:01:b0:2b:f6:f6:32:1f: 20:37:76:58:11:8c:aa:dc:ed:6c:24:91:2a:8b:56: b8:9f:6b:71:88:49:c5:1a:38:c6:57:0c:b4:0d:36: db:1c:7b:a8:16:11:90:44:4a:30:9d:f1:fb:4a:b2: f2:af:4e:9f:ae:b1:c4:0a:30:bb:17:cc:c3:20:af: 3f:70:df:dc:39:cd:22:08:61:04:f1:3d:ec:fa:fe: 9c:a0:2e:7e:5d:f1:b9:96:0e:c3:f5:36:39:c3:2e: 0a:d8:20:e0:f5:3f:15:ec:34:eb:12:98:b5:78:3c: 2d:b4:e3:bd:7d:6b:72:38:94:79:bb:86:d7:f4:3f: 7a:77:d8:98:20:e7:69:57:ee:c8:2b:05:b3:37:55: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F4:82:46:58:B5:01:32:15:C7:A9:BB:4E:41:1E:6D:5B:4D:09:EB X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fd:e3:88:0e:df:10:97:9f:2f:1f:69:87:2b:c2:9a:5b:56: 74:5a:a0:4b:bd:6c:96:f3:57:af:cb:c9:59:f9:b6:d8:74:8c: a0:c8:ea:dc:86:79:f3:1f:7b:5f:02:94:4b:07:7c:bb:b5:38: 81:f8:bc:b0:40:e0:b9:38:07:0f:b2:0e:d5:80:dc:3a:85:09: 17:4e:95:50:32:c4:fd:f8:d0:c0:6c:42:24:28:66:36:89:68: 86:54:b1:e8:cc:df:71:c7:aa:5e:3a:7b:7e:2a:44:39:e6:55: eb:63:dc:cd:ca:9a:9e:07:e0:85:c7:79:94:a7:06:62:1f:60: d0:6c:7b:0b:fe:96:31:7f:7f:03:e5:70:d8:a3:2c:f7:5c:7f: b2:fb:ed:5f:f2:e6:a7:cf:ab:eb:ae:f9:54:d8:57:6c:9d:c1: 7e:aa:9e:b9:6b:17:37:6a:f5:81:ac:5f:c8:52:d6:de:da:97: 93:2b:c9:53:6c:58:c0:30:8c:9d:fc:2c:a4:2f:74:07:7d:fa: d8:02:86:da:cc:91:83:93:d9:fe:cf:00:be:78:2a:53:de:17: f5:2b:47:fd:1e:17:f4:3c:36:e4:b5:4b:4d:2b:84:d4:d4:2f: 1c:34:1d:98:24:5d:58:44:e7:89:f1:e0:0c:7c:73:05:00:e1: 31:3e:7c:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUwNjE1MDQ0ODA3WhcNMjUwNjIyMDQ0ODA3WjAYMRYwFAYD VQQDEw02ODRlNTA4OC03Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo/49Uhh7w/SARDKDlApn4FuiLagmLxKH0M897dfgJf18Fo+DMJo3HXTGNcF 3vXwUzKb92tAwTKHOIbeJK1gU4u9wr5inmfRZicl/X3GXwxJlLTJzMhMd0zNjcDi lxaM6+BoNGn9PC51GfeJ3MTSogGwK/b2Mh8gN3ZYEYyq3O1sJJEqi1a4n2txiEnF GjjGVwy0DTbbHHuoFhGQREownfH7SrLyr06frrHECjC7F8zDIK8/cN/cOc0iCGEE 8T3s+v6coC5+XfG5lg7D9TY5wy4K2CDg9T8V7DTrEpi1eDwttOO9fWtyOJR5u4bX 9D96d9iYIOdpV+7IKwWzN1VWEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP0gkZY tQEyFcepu05BHm1bTQnrMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO/eOIDt8Ql58vH2mHK8KaW1Z0WqBLvWyW81evy8lZ+bbYdIygyOrc hnnzH3tfApRLB3y7tTiB+LywQOC5OAcPsg7VgNw6hQkXTpVQMsT9+NDAbEIkKGY2 iWiGVLHozN9xx6peOnt+KkQ55lXrY9zNypqeB+CFx3mUpwZiH2DQbHsL/pYxf38D 5XDYoyz3XH+y++1f8uanz6vrrvlU2FdsncF+qp65axc3avWBrF/IUtbe2peTK8lT bFjAMIyd/CykL3QHffrYAobazJGDk9n+zwC+eCpT3hf1K0f9Hhf0PDbktUtNK4TU 1C8cNB2YJF1YROeJ8eAMfHMFAOExPnzb -----END CERTIFICATE-----Generated at Sun Jun 15 09:37:45 2025 by rpki-client