$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json) Hash identifier: Zs47vlabVp5quAg/PoDREb+8vchhQHZotBbxA8bpW/Y= Subject key identifier: EA:41:9F:06:EE:66:A7:4F:05:8A:0E:AC:C9:E1:43:AC:B9:D9:85:42 Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 193A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft Manifest number: 1927 Signing time: Mon 16 Jun 2025 16:30:14 +0000 Manifest this update: Mon 16 Jun 2025 16:30:13 +0000 Manifest next update: Mon 23 Jun 2025 16:30:13 +0000 Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: 8KbxdkFpGM1+BudF4TsfUH48zjn6hAHXqWrecDPKhek=) 2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=) 3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6458 (0x193a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Validity Not Before: Jun 16 16:30:13 2025 GMT Not After : Jun 23 16:30:13 2025 GMT Subject: CN=68504696-4d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:e6:85:ab:f6:22:83:16:b2:62:04:22:f5: eb:e8:e1:6c:a2:e3:c8:08:5e:02:3c:8e:47:87:7a: 3f:f4:cb:8d:07:d0:80:b5:84:cd:c9:f3:b7:b2:84: 2f:db:50:33:f5:61:d3:d9:9c:83:24:bf:f7:19:8a: b5:c0:4a:65:4a:15:4e:12:c3:94:7c:01:2a:0c:a0: fa:a8:a9:13:e1:13:70:1c:9c:39:34:5b:25:9d:a6: 67:d8:07:19:26:88:10:dc:ae:5e:b2:21:e5:c1:1b: a6:42:77:51:32:4e:03:9e:a1:24:c6:99:e8:f0:e3: 19:96:a4:c4:d8:3d:f3:66:f4:f1:6d:77:9d:c6:9c: c8:1d:33:77:8c:45:32:9b:38:a7:3c:a8:37:aa:38: 41:38:38:d9:e9:2f:c2:18:33:43:3a:74:c8:46:47: 43:5d:09:e0:b4:29:a3:43:f9:35:43:b7:7a:57:a5: f7:77:65:b4:f0:e2:88:cb:ba:e3:2d:fe:46:1e:83: a2:8e:b9:ba:e2:1a:55:a9:7b:f3:96:33:2e:81:40: d9:3f:72:0d:1b:0d:c6:92:d9:a3:9b:4e:4c:30:fd: 6a:bb:f2:6f:6c:3b:47:6c:02:58:e2:1f:bd:12:c3: e8:1e:81:97:42:c3:88:9f:93:3e:ea:39:64:4e:14: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:41:9F:06:EE:66:A7:4F:05:8A:0E:AC:C9:E1:43:AC:B9:D9:85:42 X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:88:03:fb:65:1c:77:3b:cf:6a:c2:42:bf:93:72:9a:5b:91: a3:91:ba:72:0f:b1:2c:01:dc:92:96:8a:f1:60:df:b6:d6:6a: df:5f:25:35:ad:23:98:a8:7e:c2:88:e3:23:af:b6:72:c2:f7: f1:be:ce:c3:d3:1a:cb:a7:b6:48:0e:d2:b4:40:1b:fd:fa:46: aa:fa:cb:7f:2a:28:f8:41:69:8b:10:64:9d:d4:e8:1e:bc:11: 79:18:c3:4f:0f:a6:81:c3:73:1f:20:f5:44:64:d8:df:d6:e2: 2f:56:71:1c:83:69:d0:32:b9:e6:26:b0:9e:6e:7e:3d:18:c9: 57:0c:2a:80:19:08:c8:eb:78:a5:af:3c:fb:fb:2f:29:4f:7d: cd:b3:25:00:fc:fc:15:50:f5:4c:16:e7:f7:26:dc:00:bf:1b: d0:55:08:27:de:ee:09:99:e7:73:95:fb:01:0e:e0:58:6f:5d: 47:d9:73:62:ae:be:da:13:36:74:30:a3:9f:24:3a:27:12:93: 62:18:1d:be:59:f5:ee:ed:24:d4:22:b2:6d:6a:ee:06:34:1c: 61:4f:0d:3e:99:21:f5:dd:cd:35:fc:34:c6:31:4c:fa:2d:e0: f2:10:9c:28:86:87:19:fd:50:9a:f3:19:30:95:c7:d9:5a:c5: 92:56:41:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjUwNjE2MTYzMDEzWhcNMjUwNjIzMTYzMDEzWjAYMRYwFAYD VQQDEw02ODUwNDY5Ni00ZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03Tmhav2IoMWsmIEIvXr6OFsouPICF4CPI5Hh3o/9MuNB9CAtYTNyfO3soQv 21Az9WHT2ZyDJL/3GYq1wEplShVOEsOUfAEqDKD6qKkT4RNwHJw5NFslnaZn2AcZ JogQ3K5esiHlwRumQndRMk4DnqEkxpno8OMZlqTE2D3zZvTxbXedxpzIHTN3jEUy mzinPKg3qjhBODjZ6S/CGDNDOnTIRkdDXQngtCmjQ/k1Q7d6V6X3d2W08OKIy7rj Lf5GHoOijrm64hpVqXvzljMugUDZP3INGw3Gktmjm05MMP1qu/JvbDtHbAJY4h+9 EsPoHoGXQsOIn5M+6jlkThSb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpBnwbu ZqdPBYoOrMnhQ6y52YVCMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM OTFJMjdaYUdyazhBRlZfMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpiAP7ZRx3O89qwkK/k3KaW5GjkbpyD7EsAdySlorxYN+21mrfXyU1 rSOYqH7CiOMjr7Zywvfxvs7D0xrLp7ZIDtK0QBv9+kaq+st/Kij4QWmLEGSd1Oge vBF5GMNPD6aBw3MfIPVEZNjf1uIvVnEcg2nQMrnmJrCebn49GMlXDCqAGQjI63il rzz7+y8pT33NsyUA/PwVUPVMFuf3JtwAvxvQVQgn3u4JmedzlfsBDuBYb11H2XNi rr7aEzZ0MKOfJDonEpNiGB2+WfXu7STUIrJtau4GNBxhTw0+mSH13c01/DTGMUz6 LeDyEJwohocZ/VCa8xkwlcfZWsWSVkEb -----END CERTIFICATE-----Generated at Wed Jun 18 15:14:21 2025 by rpki-client