$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: maelZEvc1voW3Mc90Qut0Dgg3/QYPltHA80EZ/5EMhE= Subject key identifier: D2:5A:1D:A8:77:F8:F2:F1:B6:F0:0B:62:7C:71:28:EB:46:68:96:E4 Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0CB0 Signing time: Sat 14 Jun 2025 18:01:32 +0000 Manifest this update: Sat 14 Jun 2025 18:01:32 +0000 Manifest next update: Sat 21 Jun 2025 18:01:32 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: ZItmQb11d/t1zMqApCGgY66nKPBeesegP/f9A8ncU2M=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: sDU0CzCwuoT0jsGzITGNqVvjEqL0/qHnbm4MS2vPAPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Jun 14 18:01:32 2025 GMT Not After : Jun 21 18:01:32 2025 GMT Subject: CN=684db8fc-02de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:a3:08:bb:5a:6e:fd:8b:74:61:8d:72:19: 2d:c2:72:52:97:8a:63:fa:6f:34:de:f2:1c:7f:8c: 77:e1:73:4c:f2:58:3b:88:99:cf:b3:2c:d5:8d:11: b9:ed:fe:03:5a:0b:25:f5:d5:5c:3b:0d:d0:54:9f: b3:74:7d:4c:6c:c4:e2:fb:34:d7:8f:89:85:82:2d: 1c:77:f1:da:c7:f4:5b:21:4e:16:fe:0b:c5:a7:e5: 4f:92:c5:e6:46:07:10:74:78:f4:f8:2f:cd:53:06: e5:19:9f:a9:99:2b:56:d2:10:f5:09:e1:7d:88:9c: 8c:3a:fb:12:d7:d5:7c:9b:d3:49:d6:a6:6e:05:7b: 95:f0:90:40:eb:d9:d5:cf:29:06:d5:8c:7c:41:29: 1e:8b:e2:13:53:1c:93:e4:4a:6d:49:84:0d:33:b2: 78:a3:73:1d:47:28:72:15:b3:42:d8:ee:dc:e2:0d: b6:0c:d8:f3:38:83:c0:2d:41:a9:91:e3:77:fd:bd: 77:08:7f:3a:2b:5e:07:d1:d8:6a:3b:04:c5:f6:4e: 1b:2e:1d:d2:e3:83:80:12:95:a2:11:a2:b2:6c:b5: 53:53:58:e6:73:35:e0:bf:9d:ae:b5:a3:73:84:fb: 7f:12:88:5c:97:54:21:fe:96:bd:51:fb:3f:fc:5c: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5A:1D:A8:77:F8:F2:F1:B6:F0:0B:62:7C:71:28:EB:46:68:96:E4 X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7c:d1:88:a7:41:c0:a2:b1:c1:30:12:c5:a3:8d:c1:67:e4: d7:db:b4:9f:d3:72:c3:cd:90:3d:b5:45:13:15:e1:e3:0b:d1: d4:7c:4a:45:b6:e1:6a:8f:0c:9b:94:98:1f:82:08:6f:59:17: d6:0c:f1:3b:86:54:e1:78:86:c8:30:78:7c:86:f0:fd:b0:60: 6f:0f:5a:95:db:86:43:bb:71:17:0c:ca:96:75:e3:45:61:d8: dd:2e:4f:19:b1:72:73:bd:f3:cd:b3:58:e7:f5:69:89:11:68: 38:a0:fd:51:ad:87:33:bf:34:08:5c:31:93:22:c9:4d:f9:d7: 12:67:73:3e:c4:a4:41:58:35:be:f8:dd:e9:ff:e2:fa:76:3c: 1f:84:1f:07:4e:c9:8a:fc:2c:6a:6f:31:c1:bf:22:e6:e8:0d: bd:00:c0:a9:42:43:97:81:fb:b2:c6:67:58:e5:7c:b4:52:65: e8:91:93:35:5d:08:22:b4:09:78:ff:fb:59:f3:d5:91:11:2b: 1d:f8:4e:55:66:cc:9f:13:a4:fc:2e:ea:c5:2f:48:0d:46:8a: df:63:3d:b1:53:4d:d2:b3:48:0e:20:18:d9:a6:47:11:09:91: 2a:d0:56:7a:d8:71:45:19:58:98:2b:91:15:11:7c:94:f4:67: 2c:70:99:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjUwNjE0MTgwMTMyWhcNMjUwNjIxMTgwMTMyWjAYMRYwFAYD VQQDEw02ODRkYjhmYy0wMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qCjCLtabv2LdGGNchktwnJSl4pj+m803vIcf4x34XNM8lg7iJnPsyzVjRG5 7f4DWgsl9dVcOw3QVJ+zdH1MbMTi+zTXj4mFgi0cd/Hax/RbIU4W/gvFp+VPksXm RgcQdHj0+C/NUwblGZ+pmStW0hD1CeF9iJyMOvsS19V8m9NJ1qZuBXuV8JBA69nV zykG1Yx8QSkei+ITUxyT5EptSYQNM7J4o3MdRyhyFbNC2O7c4g22DNjzOIPALUGp keN3/b13CH86K14H0dhqOwTF9k4bLh3S44OAEpWiEaKybLVTU1jmczXgv52utaNz hPt/Eohcl1Qh/pa9Ufs//Fwi/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJaHah3 +PLxtvALYnxxKOtGaJbkMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjfNGIp0HAorHBMBLFo43BZ+TX27Sf03LDzZA9tUUTFeHjC9HUfEpF tuFqjwyblJgfgghvWRfWDPE7hlTheIbIMHh8hvD9sGBvD1qV24ZDu3EXDMqWdeNF YdjdLk8ZsXJzvfPNs1jn9WmJEWg4oP1RrYczvzQIXDGTIslN+dcSZ3M+xKRBWDW+ +N3p/+L6djwfhB8HTsmK/CxqbzHBvyLm6A29AMCpQkOXgfuyxmdY5Xy0UmXokZM1 XQgitAl4//tZ89WRESsd+E5VZsyfE6T8LurFL0gNRorfYz2xU03Ss0gOIBjZpkcR CZEq0FZ62HFFGViYK5EVEXyU9GcscJlA -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:00 2025 by rpki-client