$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: Hnq+vILM5a46x9pJyyQb7EVysSbNcnHQtVq8j1MAgg0= Subject key identifier: C5:17:20:DC:B6:BB:39:B6:85:AB:EA:2C:B3:D4:5E:2B:F4:C9:AA:E3 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 22E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 22A4 Signing time: Sat 14 Jun 2025 15:50:00 +0000 Manifest this update: Sat 14 Jun 2025 15:49:59 +0000 Manifest next update: Sat 21 Jun 2025 15:49:59 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: PhIX1689KcplC0w+stPUYSI/02aUEaN5dkUKjLTB1Hk=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: 2SAdCKQcIWqABPUcECk5L/zG6WToDQOSztNZtA6yviw=) 3: A163C5C869A111ECA4837D28C4F9AE02.roa (hash: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8=) 4: E57A64AA165C11EABB13924AC4F9AE02.roa (hash: Kp1L9OUEsepRZk0KKmtB6S8OnLO2gE492T0DeYXHR/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8934 (0x22e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Jun 14 15:49:59 2025 GMT Not After : Jun 21 15:49:59 2025 GMT Subject: CN=684d9a28-7cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:ba:29:5d:71:da:5b:7c:b4:1d:12:9d:de: bb:59:6c:4e:ca:22:a9:45:4b:ea:57:e0:24:c2:86: 8a:be:55:62:69:59:45:d8:4b:a8:6b:bf:d7:99:39: e4:12:23:59:5a:01:0d:24:4d:fd:67:b7:46:4e:c6: 42:91:62:49:25:e9:79:e8:45:2e:85:7a:f0:c8:b0: ee:c2:9b:a6:f4:f9:a1:bf:78:6d:8e:c7:37:97:44: f7:5c:d3:47:2f:f5:64:5b:90:ca:55:16:4d:d7:8c: 17:11:cc:84:f9:c4:8a:4e:61:6c:bb:5c:94:72:76: 21:f1:22:17:20:86:c6:90:aa:97:d8:27:93:e6:5a: 6e:39:4b:c6:c7:e5:d9:82:10:5f:13:b3:23:cf:8e: 77:64:70:fd:fb:98:14:8a:50:ac:4b:ef:62:1d:36: b9:27:17:d7:fc:d3:58:a3:66:ee:e8:f7:de:81:a4: 72:7c:e5:77:82:b7:07:f4:d6:01:7a:2c:10:86:ab: fe:3a:4a:17:f5:6b:df:40:b8:d9:14:4b:81:05:a6: 7a:24:03:9e:8e:7d:cb:19:24:2a:1d:68:c7:9c:f6: 59:dc:65:d5:f8:e3:9e:99:78:c3:de:82:f7:5a:3c: 0e:27:7b:7a:2c:25:69:d5:fc:8c:67:03:4f:8f:12: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:17:20:DC:B6:BB:39:B6:85:AB:EA:2C:B3:D4:5E:2B:F4:C9:AA:E3 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ef:99:de:e9:ea:f8:c1:df:4d:ab:2f:b9:5f:55:f1:33:da: a1:36:9d:d0:00:1f:05:9b:d9:22:a4:f1:ce:44:21:ae:24:78: 39:20:68:4e:7b:ea:d1:97:a4:16:c8:e3:2b:a4:50:ef:f6:9e: 9c:07:a8:54:b7:7b:69:23:80:b0:4a:42:11:19:15:5c:8a:ae: 7b:4d:72:6f:1d:ef:b6:4d:3c:24:06:ed:04:f6:4b:53:88:ea: 68:c4:8a:32:57:9d:af:34:80:e1:18:01:e3:9b:51:f9:fd:56: 07:a9:f3:bd:7c:13:84:89:e1:30:a2:13:01:f9:8f:41:d6:4c: 33:7b:c7:15:46:de:38:51:d7:15:d9:66:6f:fa:3c:77:84:39: 61:20:8e:4a:9b:17:91:8d:34:8f:9d:f3:96:40:94:17:55:01: ad:37:e0:ae:8e:4b:7d:90:90:c9:e7:22:46:5e:1e:71:4d:58: 5e:c5:07:23:b7:cd:6d:8d:97:3e:9d:e6:55:c8:4b:f4:02:0c: a8:bc:76:ed:ae:ed:c6:94:1d:64:7a:82:a7:67:a9:5c:d4:79: 43:c7:2c:d6:dd:d7:d5:85:83:a3:c3:24:69:0a:c6:24:47:78: d3:6d:27:08:9f:81:5c:54:55:09:ee:73:da:43:d7:9a:89:f3: 9c:25:21:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUwNjE0MTU0OTU5WhcNMjUwNjIxMTU0OTU5WjAYMRYwFAYD VQQDEw02ODRkOWEyOC03Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSu6KV1x2lt8tB0Snd67WWxOyiKpRUvqV+AkwoaKvlViaVlF2Euoa7/XmTnk EiNZWgENJE39Z7dGTsZCkWJJJel56EUuhXrwyLDuwpum9Pmhv3htjsc3l0T3XNNH L/VkW5DKVRZN14wXEcyE+cSKTmFsu1yUcnYh8SIXIIbGkKqX2CeT5lpuOUvGx+XZ ghBfE7Mjz453ZHD9+5gUilCsS+9iHTa5JxfX/NNYo2bu6PfegaRyfOV3grcH9NYB eiwQhqv+OkoX9WvfQLjZFEuBBaZ6JAOejn3LGSQqHWjHnPZZ3GXV+OOemXjD3oL3 WjwOJ3t6LCVp1fyMZwNPjxLEPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUXINy2 uzm2havqLLPUXiv0yarjMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM75ne6er4wd9Nqy+5X1XxM9qhNp3QAB8Fm9kipPHORCGuJHg5IGhO e+rRl6QWyOMrpFDv9p6cB6hUt3tpI4CwSkIRGRVciq57TXJvHe+2TTwkBu0E9ktT iOpoxIoyV52vNIDhGAHjm1H5/VYHqfO9fBOEieEwohMB+Y9B1kwze8cVRt44UdcV 2WZv+jx3hDlhII5KmxeRjTSPnfOWQJQXVQGtN+Cujkt9kJDJ5yJGXh5xTVhexQcj t81tjZc+neZVyEv0AgyovHbtru3GlB1keoKnZ6lc1HlDxyzW3dfVhYOjwyRpCsYk R3jTbScIn4FcVFUJ7nPaQ9eaifOcJSHT -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:47 2025 by rpki-client