$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json) Hash identifier: vE1QBJ0kw5Om3chWqRYgzmuesFIbboJAe+e5ugZgnYc= Subject key identifier: 20:9B:87:6B:D2:A7:8C:14:4B:5D:06:E5:AD:B6:72:8F:AF:79:96:86 Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft Manifest number: 042C Signing time: Fri 13 Jun 2025 00:07:18 +0000 Manifest this update: Fri 13 Jun 2025 00:07:17 +0000 Manifest next update: Fri 20 Jun 2025 00:07:17 +0000 Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: hhmpHYf7evPtcCpFSoBbL8FvFw2AecTEsOe6xjnJeck=) 2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: oVUb29+C/dpDmyrIQ/S9XmPyQiqyJJ84om1g2jTlU5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Validity Not Before: Jun 13 00:07:17 2025 GMT Not After : Jun 20 00:07:17 2025 GMT Subject: CN=684b6bb5-c691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:90:7d:e4:72:b2:f6:ae:22:36:72:89:8f: d4:e4:c6:21:08:04:11:85:56:51:9c:70:73:5f:1f: d2:f0:7d:97:27:0c:3d:11:93:0a:1f:53:8a:b1:1f: 9a:03:ab:cc:f3:c4:67:9a:f1:02:e1:88:0f:e5:56: e1:cb:56:0d:12:9d:ec:06:6b:a3:8c:c8:22:8a:a7: 38:f9:ec:e1:bd:b2:12:00:bb:d8:bc:93:b8:d2:b5: 9e:ba:db:d3:39:03:8a:4c:c6:0c:e0:09:61:93:5f: 6b:04:4c:7b:f1:c7:da:55:26:34:34:fb:7d:a0:ee: 9a:c1:a1:4d:ca:1e:c2:7a:24:3b:5b:24:7d:41:cd: 53:8b:69:f3:4d:40:4d:cc:87:62:a6:65:44:07:e5: 97:b8:83:b5:12:44:97:30:53:98:a6:cc:f4:fa:80: 05:78:35:57:47:9c:76:c4:97:2c:1d:f1:50:7c:5e: d5:55:2f:71:b0:57:5b:8b:29:9b:e8:e2:01:e8:28: e9:09:79:81:ac:55:5f:81:f7:d7:4a:fb:11:d8:dc: 74:cd:b6:e1:3b:60:cf:f2:8b:b6:b9:52:19:e7:46: 66:b6:08:cd:74:1c:4b:7a:62:77:c5:de:62:4e:15: 82:11:2e:5b:66:fe:7c:b0:19:73:08:e9:e2:1e:a0: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9B:87:6B:D2:A7:8C:14:4B:5D:06:E5:AD:B6:72:8F:AF:79:96:86 X509v3 Authority Key Identifier: keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:89:56:d0:78:c5:49:45:0c:68:14:9e:07:7a:af:6e:06:ee: e4:84:6d:7c:7d:b5:53:c8:a1:83:ae:72:3b:09:5f:cc:33:ee: 94:b8:78:f3:2f:cb:4b:4b:f6:fd:0d:8b:2f:97:5a:0d:70:ea: 84:5c:d8:cc:dc:dd:02:1e:81:dc:ea:c2:c7:0e:32:8d:fd:97: 51:a3:07:4e:d4:02:81:d0:aa:0a:bf:ff:af:6a:0e:ab:a3:83: 90:45:a1:9c:85:6c:34:6c:7c:b4:65:7e:10:0a:33:c8:cf:ae: f3:27:1c:8a:ed:0f:c3:44:16:fc:e3:09:57:da:fe:37:34:b8: d2:04:0e:8f:ba:51:0c:8c:11:eb:3d:0b:90:a3:b1:37:30:59: d8:c0:52:a8:8c:86:9c:53:93:fa:a0:07:74:83:8e:1b:50:d3: 6d:32:33:08:1c:44:7d:8f:41:57:92:81:4f:fc:12:43:c6:13: 35:9f:16:7f:80:77:5a:a2:74:0b:34:10:34:91:6a:4e:85:54: d1:0f:3b:1f:9d:50:ac:5d:96:63:4d:ed:a5:9c:35:d9:0d:55: 07:8a:cb:b4:97:7c:0c:46:38:79:eb:54:a4:c3:30:7e:55:5e: 39:49:72:92:0e:3d:8c:7b:8c:a7:07:01:73:a4:2b:11:5b:c0: 83:96:28:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUE4RDExMC8GA1UEBRMoODJEODE4ODYxREQ0QTcwRjc3MDhEMjA1RTRCODlFODUx NENBMUY2QzAeFw0yNTA2MTMwMDA3MTdaFw0yNTA2MjAwMDA3MTdaMBgxFjAUBgNV BAMTDTY4NGI2YmI1LWM2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMVZB95HKy9q4iNnKJj9TkxiEIBBGFVlGccHNfH9LwfZcnDD0RkwofU4qxH5oD q8zzxGea8QLhiA/lVuHLVg0SnewGa6OMyCKKpzj57OG9shIAu9i8k7jStZ6629M5 A4pMxgzgCWGTX2sETHvxx9pVJjQ0+32g7prBoU3KHsJ6JDtbJH1BzVOLafNNQE3M h2KmZUQH5Ze4g7USRJcwU5imzPT6gAV4NVdHnHbElywd8VB8XtVVL3GwV1uLKZvo 4gHoKOkJeYGsVV+B99dK+xHY3HTNtuE7YM/yi7a5UhnnRma2CM10HEt6YnfF3mJO FYIRLltm/nywGXMI6eIeoGdpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIJuHa9Kn jBRLXQblrbZyj695loYwHwYDVR0jBBgwFoAUgtgYhh3Upw93CNIF5LiehRTKH2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QThELzMyRjFGNEMyODNF OTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3RnWWhoM1VwdzkzQ05JRjVMaWVoUlRLSDJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5 M0NOSUY1TGllaFJUS0gydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHiJVtB4xUlFDGgUngd6r24G7uSEbXx9tVPIoYOucjsJX8wz7pS4ePMv y0tL9v0Niy+XWg1w6oRc2Mzc3QIegdzqwscOMo39l1GjB07UAoHQqgq//69qDquj g5BFoZyFbDRsfLRlfhAKM8jPrvMnHIrtD8NEFvzjCVfa/jc0uNIEDo+6UQyMEes9 C5CjsTcwWdjAUqiMhpxTk/qgB3SDjhtQ020yMwgcRH2PQVeSgU/8EkPGEzWfFn+A d1qidAs0EDSRak6FVNEPOx+dUKxdlmNN7aWcNdkNVQeKy7SXfAxGOHnrVKTDMH5V XjlJcpIOPYx7jKcHAXOkKxFbwIOWKKM= -----END CERTIFICATE-----Generated at Sat Jun 14 18:47:39 2025 by rpki-client