$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: ohNkcGbr943sKSTipWfadXS5fcJ81zoWfbDLDtxwhGM= Subject key identifier: 1F:7C:58:6B:C3:9A:5D:01:C5:90:29:64:DB:A5:54:9B:B5:B3:F8:60 Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 2C Signing time: Fri 13 Jun 2025 06:46:49 +0000 Manifest this update: Fri 13 Jun 2025 06:46:48 +0000 Manifest next update: Fri 20 Jun 2025 06:46:48 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: s8N56TeuErOPqt7U8+iXjumyG2DdUxEyMo2RlYDn8iU=) 2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=) 3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=) 4: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=) 5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=) 6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=) 7: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=) 8: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=) 9: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: Jun 13 06:46:48 2025 GMT Not After : Jun 20 06:46:48 2025 GMT Subject: CN=684bc959-cfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f5:e3:df:12:34:73:52:25:c1:72:26:51:fb: f8:a8:86:11:86:63:f2:93:fa:cb:3f:ab:ee:80:b3: 7e:65:8d:80:73:90:8f:1d:df:af:87:98:40:70:a0: f8:03:71:c8:90:72:a2:ee:30:1d:23:e0:24:e9:b5: 47:3c:65:09:56:e3:61:e1:c2:2a:a5:3b:04:4b:a6: d0:0f:1c:86:41:03:96:b2:7d:c9:23:d9:36:1b:d1: 03:41:07:5e:65:39:91:f0:5c:99:f4:d0:9d:2c:77: 7d:d7:4e:ce:de:c3:05:5f:b8:80:15:2e:89:ea:35: 9d:2b:02:4b:7e:34:c0:3b:21:1a:b6:5e:56:ba:fd: c1:cd:94:de:2f:54:7d:54:82:12:ee:8b:67:72:9b: d0:34:a6:36:24:81:70:8b:7f:b9:b6:ad:91:e9:8b: db:b4:0c:e0:3e:e2:85:36:47:18:52:a0:33:56:96: 24:69:eb:52:db:67:ce:96:b9:e4:6d:72:bf:d9:fc: 32:bd:ab:3b:94:e3:94:53:04:d0:2e:b8:46:33:ca: 70:8d:48:f0:50:91:46:10:a1:62:fc:88:99:ee:a4: c5:d4:c9:30:27:b5:65:db:d9:2d:fa:65:c9:0e:49: 1f:3d:e6:f2:4a:6f:fb:94:25:05:d1:a7:2a:15:fe: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7C:58:6B:C3:9A:5D:01:C5:90:29:64:DB:A5:54:9B:B5:B3:F8:60 X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:aa:e6:cc:72:85:21:2d:1c:75:f2:70:2e:15:ed:52:ea:57: 35:94:a0:0d:0b:e9:07:13:d1:77:a9:96:a6:66:70:d6:31:73: cb:83:c1:bd:63:f2:fa:19:c6:9a:ca:8f:ba:0a:8c:00:de:1e: 63:0c:18:d5:9f:21:b9:97:98:c9:2e:54:62:a6:1c:5c:52:69: d4:0d:54:34:57:d4:ac:3f:92:27:48:e2:45:0a:ef:95:e5:7d: 9a:15:22:b4:bc:37:e5:1b:cc:1c:49:0f:b2:2c:ca:0b:05:49: 39:0f:1d:56:f3:93:6a:ba:1e:5a:f5:db:0c:4e:a8:a6:fc:3e: 95:36:ee:8a:da:45:b2:4b:6e:c5:4c:28:43:ea:16:ce:27:9a: 1d:30:4b:67:8d:a6:1f:53:59:c9:8d:96:5c:fc:56:ae:b4:56: 0a:3f:9d:95:4d:71:89:f4:c7:0a:60:ad:47:d1:d8:d2:0b:d6: c7:5a:af:4b:3f:8d:a2:8e:72:f3:ea:19:85:a6:49:5f:11:4b: b9:85:14:85:41:ec:a2:75:71:d9:a7:84:87:75:32:76:8d:c5: 9f:b1:d7:50:28:90:3b:ef:af:b4:16:79:8a:c3:ba:8e:07:34: 75:06:6b:dc:4d:09:40:68:2c:6d:be:1d:80:fd:13:c0:dc:8f: ff:0c:ee:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzRjExMC8GA1UEBRMoMTg5NjdEQ0RCNzI0QTg0QTcxNzExRTY3OEFBQjFEMkU3 MjIxNUQ2QzAeFw0yNTA2MTMwNjQ2NDhaFw0yNTA2MjAwNjQ2NDhaMBgxFjAUBgNV BAMTDTY4NGJjOTU5LWNmYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw9ePfEjRzUiXBciZR+/iohhGGY/KT+ss/q+6As35ljYBzkI8d36+HmEBwoPgD cciQcqLuMB0j4CTptUc8ZQlW42HhwiqlOwRLptAPHIZBA5ayfckj2TYb0QNBB15l OZHwXJn00J0sd33XTs7ewwVfuIAVLonqNZ0rAkt+NMA7IRq2Xla6/cHNlN4vVH1U ghLui2dym9A0pjYkgXCLf7m2rZHpi9u0DOA+4oU2RxhSoDNWliRp61LbZ86WueRt cr/Z/DK9qzuU45RTBNAuuEYzynCNSPBQkUYQoWL8iJnupMXUyTAntWXb2S36ZckO SR895vJKb/uUJQXRpyoV/gKDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH3xYa8Oa XQHFkClk26VUm7Wz+GAwHwYDVR0jBBgwFoAUGJZ9zbckqEpxcR5niqsdLnIhXWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDNGL0Q2ODRGQzJFMUE4 QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0paOXpiY2txRXB4Y1I1bmlxc2RMbkloWFd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDNGL0Q2ODRGQzJFMUE4QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVw eGNSNW5pcXNkTG5JaFhXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMaq5sxyhSEtHHXycC4V7VLqVzWUoA0L6QcT0XeplqZmcNYxc8uDwb1j 8voZxprKj7oKjADeHmMMGNWfIbmXmMkuVGKmHFxSadQNVDRX1Kw/kidI4kUK75Xl fZoVIrS8N+UbzBxJD7IsygsFSTkPHVbzk2q6Hlr12wxOqKb8PpU27oraRbJLbsVM KEPqFs4nmh0wS2eNph9TWcmNllz8Vq60Vgo/nZVNcYn0xwpgrUfR2NIL1sdar0s/ jaKOcvPqGYWmSV8RS7mFFIVB7KJ1cdmnhId1MnaNxZ+x11AokDvvr7QWeYrDuo4H NHUGa9xNCUBoLG2+HYD9E8Dcj/8M7sc= -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:36 2025 by rpki-client