$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json) Hash identifier: IDhRqQyM1K4ajz8l8nAY3ry+xYtlOToDdDUsgwonjnc= Subject key identifier: A9:52:C6:75:81:4B:61:9E:06:50:C0:65:EF:2D:C0:9C:82:DA:61:EB Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Certificate serial: 031F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft Manifest number: 031A Signing time: Tue 05 Aug 2025 01:47:28 +0000 Manifest this update: Tue 05 Aug 2025 01:47:27 +0000 Manifest next update: Tue 12 Aug 2025 01:47:27 +0000 Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: Ss7F8gY5HNy0X58aVR+w4luHsRzOf5VjnekteHg00Sw=) 2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: 4Q9eSoyybwKkbe+OvPprVAkVlq22srO6Z2iGnnSJ3hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Validity Not Before: Aug 5 01:47:27 2025 GMT Not After : Aug 12 01:47:27 2025 GMT Subject: CN=689162b0-4980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:b5:ac:6e:1e:0a:dc:23:88:7f:74:02:3f: 14:36:08:d5:3d:3a:19:0b:1d:44:2e:78:fd:f3:67: 53:d9:9e:b1:11:fa:4c:94:9c:78:4e:9f:df:d8:91: 98:0c:29:79:b0:4f:db:7a:78:56:0f:11:56:d4:e1: cc:82:62:99:59:f2:c3:d0:5c:b7:c7:78:52:b8:6b: 75:6e:a2:81:15:c7:51:e4:9a:3c:ed:a5:e2:4e:bd: 70:54:84:1b:9c:26:53:8f:c1:3a:43:a3:0e:3b:1d: 7f:89:4b:54:3d:eb:18:65:89:5c:33:42:f4:7f:2c: 53:ef:6a:35:dc:a0:9c:9f:5c:83:26:4e:9e:6c:d2: f1:a9:dd:77:ed:6e:14:67:07:06:c7:5a:25:48:38: 39:c1:85:ff:45:99:be:bb:c8:0f:3f:1a:4d:bd:2e: 33:c9:77:d2:57:b6:ac:a6:50:ec:9f:c3:d4:bb:72: a5:ca:76:0d:fc:19:a3:f3:82:3a:1c:27:cd:9d:bd: fe:7a:8b:60:7f:3b:26:d7:06:83:68:39:e9:74:c9: f1:ae:25:7f:4b:f5:c1:91:c2:e7:c7:13:2b:ca:1b: ab:be:a0:27:07:54:34:f3:44:08:15:76:13:e8:4f: 4d:ce:45:61:0b:ca:7f:05:88:5b:8d:4b:37:1a:d1: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:52:C6:75:81:4B:61:9E:06:50:C0:65:EF:2D:C0:9C:82:DA:61:EB X509v3 Authority Key Identifier: keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:88:ed:54:73:96:75:e2:dd:f4:58:6a:fe:5a:83:08:51:51: 51:cc:00:e8:79:31:69:a9:53:ad:71:aa:af:6c:80:3b:da:88: eb:35:c0:b0:b9:5e:84:45:0e:ba:47:e7:19:ea:16:9b:bc:dd: 33:b2:2b:60:e9:f6:61:55:71:36:46:75:9d:b9:6d:ad:d9:66: 34:90:cd:0a:16:0d:f1:20:13:3e:87:53:39:a4:55:5c:2b:a2: 07:5e:a5:a6:8c:90:0b:a8:42:e2:21:05:0c:73:b9:57:a8:3b: fd:b5:63:0b:3d:ab:2d:b0:ba:2d:4d:7d:93:36:7a:ec:a3:54: d5:6e:ea:96:23:92:d6:5f:2b:ea:6d:a3:fb:de:08:70:d6:c2: b2:f0:e7:06:96:50:d3:a9:e1:76:1f:f2:e1:6e:92:14:3a:98: 57:d2:71:36:b0:48:f4:f7:70:f2:2c:f3:7e:e4:47:fe:a7:2c: 59:00:be:8f:45:1e:1c:94:83:ac:cf:49:90:f1:48:af:56:3e: a9:79:f2:6d:4d:ec:ad:89:4e:49:f2:d3:71:ae:ea:81:72:54: 3f:67:bf:20:e8:15:2f:7c:7c:3d:1f:67:a6:96:5c:da:ff:b0: 8d:57:8a:46:a2:02:7d:01:bf:1d:9e:51:9f:de:1f:db:da:03: ca:22:06:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE NDk1QUIzMzIwHhcNMjUwODA1MDE0NzI3WhcNMjUwODEyMDE0NzI3WjAYMRYwFAYD VQQDEw02ODkxNjJiMC00OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL+1rG4eCtwjiH90Aj8UNgjVPToZCx1ELnj982dT2Z6xEfpMlJx4Tp/f2JGY DCl5sE/benhWDxFW1OHMgmKZWfLD0Fy3x3hSuGt1bqKBFcdR5Jo87aXiTr1wVIQb nCZTj8E6Q6MOOx1/iUtUPesYZYlcM0L0fyxT72o13KCcn1yDJk6ebNLxqd137W4U ZwcGx1olSDg5wYX/RZm+u8gPPxpNvS4zyXfSV7asplDsn8PUu3KlynYN/Bmj84I6 HCfNnb3+eotgfzsm1waDaDnpdMnxriV/S/XBkcLnxxMryhurvqAnB1Q080QIFXYT 6E9NzkVhC8p/BYhbjUs3GtFLOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlSxnWB S2GeBlDAZe8twJyC2mHrMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG NEQ1d3BnWEpsTVhVbGFzekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmiO1Uc5Z14t30WGr+WoMIUVFRzADoeTFpqVOtcaqvbIA72ojrNcCw uV6ERQ66R+cZ6habvN0zsitg6fZhVXE2RnWduW2t2WY0kM0KFg3xIBM+h1M5pFVc K6IHXqWmjJALqELiIQUMc7lXqDv9tWMLPastsLotTX2TNnrso1TVbuqWI5LWXyvq baP73ghw1sKy8OcGllDTqeF2H/LhbpIUOphX0nE2sEj093DyLPN+5Ef+pyxZAL6P RR4clIOsz0mQ8UivVj6pefJtTeytiU5J8tNxruqBclQ/Z78g6BUvfHw9H2emllza /7CNV4pGogJ9Ab8dnlGf3h/b2gPKIgZj -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:26 2025 by rpki-client