$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json) Hash identifier: DFVWkH6uAwFyy2SzqByFuCFu03Jm9bKcmnt+2VYkc8A= Subject key identifier: CA:63:9D:D0:18:B8:87:01:E4:5F:28:02:9E:CC:1D:2B:25:A5:2D:0B Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft Manifest number: 0467 Signing time: Thu 07 Aug 2025 01:01:17 +0000 Manifest this update: Thu 07 Aug 2025 01:01:16 +0000 Manifest next update: Thu 14 Aug 2025 01:01:16 +0000 Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: tuTmra5l+wFI0v8ylEwGGYuX/jFSr29ELvZraTGtt54=) 2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: O1MkwGdKDfVHdsOhHQrlU/aFTqc21EnEwMBW12Asebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Validity Not Before: Aug 7 01:01:16 2025 GMT Not After : Aug 14 01:01:16 2025 GMT Subject: CN=6893fadd-49c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:58:67:df:4d:cd:fa:fe:3f:9e:1f:d2:9a:6c: f4:b0:6a:0e:54:c0:36:13:53:1e:40:b6:ed:67:54: 12:02:c0:92:ec:90:90:a5:a9:d9:78:8d:82:bf:8c: a6:b0:a9:b7:9e:40:f7:4c:59:3a:da:a5:5b:5e:75: 9d:8a:11:a1:db:e2:19:85:9c:fe:a6:10:5b:e5:fd: f1:40:d5:97:80:43:ed:c6:27:bd:6c:fe:ee:81:c5: 35:22:cb:ec:4e:ff:af:7a:e9:f5:fa:e6:b7:03:c4: 43:3e:31:94:85:6b:d0:d4:e6:1e:a8:c2:5c:d9:e9: d7:dd:26:76:c1:3d:5b:b7:f1:25:a4:03:da:82:df: 7c:7f:d6:23:37:58:6d:a2:4b:9c:02:7a:9d:d4:c7: d4:bc:9a:38:1a:fe:0f:3f:02:16:db:b5:23:81:e7: 30:54:c3:04:11:09:1d:8e:c9:3e:f9:60:3c:91:39: a0:15:2f:ba:0b:a6:86:a4:06:ec:d5:a1:95:15:65: ae:17:97:a4:37:84:e5:2f:61:67:a9:75:c7:b6:1c: 2c:ae:a8:6d:68:a0:c7:de:cb:82:c5:54:59:26:71: 31:78:f4:67:cd:c5:28:f2:85:c5:1d:32:c0:ad:5f: 6d:54:81:2d:e0:e9:c3:f7:45:45:2f:2e:85:dd:a2: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:9D:D0:18:B8:87:01:E4:5F:28:02:9E:CC:1D:2B:25:A5:2D:0B X509v3 Authority Key Identifier: keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:71:8e:e5:c4:d8:82:fb:39:cd:0a:2e:9e:7a:69:44:8c:06: 1f:b7:73:8c:1a:ec:10:d7:aa:41:cb:b7:1a:23:2d:13:d4:65: 7c:fc:14:3c:50:a0:1d:2b:1e:47:99:0d:89:a2:f7:ca:32:3a: 52:c7:20:67:a3:0b:d6:a8:4d:b3:36:5f:47:e5:10:bf:5d:d2: a9:e5:f7:05:a6:2b:c5:80:07:f6:cd:61:3e:b5:05:6b:b2:75: 7c:b4:29:49:6d:34:44:a6:d5:8e:c1:d7:91:67:17:26:d7:5e: 5d:91:8a:4c:72:e4:34:04:37:f6:17:4d:a5:0d:bc:de:c2:65: 05:5a:db:a0:b1:3f:59:4b:e4:1d:fb:d9:5e:18:94:7a:a3:1b: 87:6d:ab:7b:a7:1f:b7:d2:12:c9:19:f9:75:33:25:14:72:99: e7:6e:45:50:99:57:2c:43:24:74:db:11:1d:94:08:a8:47:ec: e4:21:1e:68:b9:5c:35:cd:9c:85:d9:be:3e:2f:2b:11:f4:89: b0:8a:d5:42:72:c5:f8:e4:2f:b4:07:7e:a5:d2:ab:de:74:aa: 8e:28:21:ec:8d:aa:9b:37:11:fa:e2:5a:52:0a:a9:7b:c8:8b: 11:a2:9a:53:3d:00:5a:8a:fc:c1:3c:9e:42:ca:ac:26:25:c8: 8a:74:24:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUE4RDExMC8GA1UEBRMoODJEODE4ODYxREQ0QTcwRjc3MDhEMjA1RTRCODlFODUx NENBMUY2QzAeFw0yNTA4MDcwMTAxMTZaFw0yNTA4MTQwMTAxMTZaMBgxFjAUBgNV BAMTDTY4OTNmYWRkLTQ5YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKWGffTc36/j+eH9KabPSwag5UwDYTUx5Atu1nVBICwJLskJClqdl4jYK/jKaw qbeeQPdMWTrapVtedZ2KEaHb4hmFnP6mEFvl/fFA1ZeAQ+3GJ71s/u6BxTUiy+xO /6966fX65rcDxEM+MZSFa9DU5h6owlzZ6dfdJnbBPVu38SWkA9qC33x/1iM3WG2i S5wCep3Ux9S8mjga/g8/AhbbtSOB5zBUwwQRCR2OyT75YDyROaAVL7oLpoakBuzV oZUVZa4Xl6Q3hOUvYWepdce2HCyuqG1ooMfey4LFVFkmcTF49GfNxSjyhcUdMsCt X21UgS3g6cP3RUUvLoXdov9hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUymOd0Bi4 hwHkXygCnswdKyWlLQswHwYDVR0jBBgwFoAUgtgYhh3Upw93CNIF5LiehRTKH2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QThELzMyRjFGNEMyODNF OTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3RnWWhoM1VwdzkzQ05JRjVMaWVoUlRLSDJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5 M0NOSUY1TGllaFJUS0gydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIpxjuXE2IL7Oc0KLp56aUSMBh+3c4wa7BDXqkHLtxojLRPUZXz8FDxQ oB0rHkeZDYmi98oyOlLHIGejC9aoTbM2X0flEL9d0qnl9wWmK8WAB/bNYT61BWuy dXy0KUltNESm1Y7B15FnFybXXl2Rikxy5DQEN/YXTaUNvN7CZQVa26CxP1lL5B37 2V4YlHqjG4dtq3unH7fSEskZ+XUzJRRymeduRVCZVyxDJHTbER2UCKhH7OQhHmi5 XDXNnIXZvj4vKxH0ibCK1UJyxfjkL7QHfqXSq950qo4oIeyNqps3EfriWlIKqXvI ixGimlM9AFqK/ME8nkLKrCYlyIp0JEs= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:56 2025 by rpki-client