$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: etne1ilrPKSmpyte7LcJj1i+sA4mj8df5/s+9N2DzxA= Subject key identifier: BB:7A:02:F2:AA:30:A3:40:1C:98:69:CF:46:5A:F4:60:BA:7A:9B:68 Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0CCE Signing time: Fri 08 Aug 2025 18:19:14 +0000 Manifest this update: Fri 08 Aug 2025 18:19:14 +0000 Manifest next update: Fri 15 Aug 2025 18:19:14 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: j+lhGU2Nf2b/4PuWDebGE9AbKZTBUxcGutKJb/Vww50=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: Wr1nIVXklBpPXHRfvPiRNdEC8EzroDNqpMylbn6Uxs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Aug 8 18:19:14 2025 GMT Not After : Aug 15 18:19:14 2025 GMT Subject: CN=68963fa2-d0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:eb:c8:5e:6d:47:c1:59:8b:26:cc:d5:12: c7:8d:1c:e5:38:95:b5:94:83:ec:a2:f0:3a:22:8e: 90:fa:90:bc:dd:86:5d:4b:41:f3:5f:ea:7a:2a:a2: bf:6c:58:27:3a:34:d3:09:9a:4f:6b:8d:1f:82:9a: 29:b1:05:21:9f:2e:35:42:28:60:53:95:cc:74:86: d2:80:3c:7f:a9:2f:d9:15:3a:b9:08:d4:89:68:5c: 28:00:bb:e0:ae:84:9b:71:78:86:23:9d:87:be:13: ea:44:77:80:38:e8:80:c3:9a:d1:81:43:65:e2:f8: f3:b7:42:84:5a:92:9b:5f:ce:ef:e8:24:10:8f:24: 01:12:a9:43:1f:01:4d:74:bf:c8:b9:20:40:de:01: df:0d:bf:c7:8f:2c:91:3b:2b:4a:9e:b8:13:ab:f5: 8d:ca:d5:46:09:23:b7:8e:90:33:9b:0e:ce:a0:30: 00:90:a8:39:fd:b4:70:cd:37:6e:e6:77:de:22:a8: 8b:85:0c:0a:62:a7:9b:9b:10:86:b2:fa:ae:91:f2: af:67:f4:f9:20:c3:02:f3:0c:4e:82:f9:36:f5:d4: 14:79:43:36:48:e7:2e:f0:39:10:19:3b:ac:60:f0: 3f:13:59:85:1f:a8:95:aa:87:6d:d1:62:0f:51:41: b9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:02:F2:AA:30:A3:40:1C:98:69:CF:46:5A:F4:60:BA:7A:9B:68 X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0b:37:c1:41:66:d8:52:cd:92:ef:9a:88:a8:c8:5e:25:e8: 48:50:0d:dc:5f:6f:f6:32:9e:0e:5d:27:0e:a3:ef:ad:9e:af: 59:6a:a2:11:ff:d0:43:3f:db:79:45:1e:11:e8:1c:1d:6e:07: cb:2c:87:55:88:d1:2b:fd:11:35:d9:71:61:8a:ab:43:c1:1d: 82:a3:1c:36:d3:c8:68:26:3a:7e:71:52:14:dc:46:89:df:be: d7:1d:f4:3b:b0:a7:dd:16:77:50:81:2b:ee:a5:10:91:fc:9b: ad:9f:35:9b:99:49:96:1b:a0:31:da:80:e8:a4:31:51:e5:90: 04:17:91:3d:0f:79:ee:ca:1e:79:a9:e2:ef:c1:b6:a3:f0:0d: 60:e4:16:d7:49:09:f0:98:db:2f:43:72:22:1e:c3:d8:20:2b: 34:b2:ce:cd:26:da:8c:90:8d:66:5c:0f:01:d9:11:34:db:92: 74:d3:c3:a8:41:89:3a:e6:b7:c3:bf:46:a4:f5:cc:99:85:31: 2c:cb:a3:6b:5c:db:75:6f:90:c9:d7:6b:f8:ae:64:79:5f:4a: 6c:b1:88:5a:c7:07:36:31:4e:64:56:c0:d4:be:ec:a7:9f:f9: 89:8c:e3:40:58:12:c2:ee:53:14:61:57:83:84:bd:de:3a:d5: ff:b1:e7:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjUwODA4MTgxOTE0WhcNMjUwODE1MTgxOTE0WjAYMRYwFAYD VQQDEw02ODk2M2ZhMi1kMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NvryF5tR8FZiybM1RLHjRzlOJW1lIPsovA6Io6Q+pC83YZdS0HzX+p6KqK/ bFgnOjTTCZpPa40fgpopsQUhny41QihgU5XMdIbSgDx/qS/ZFTq5CNSJaFwoALvg roSbcXiGI52HvhPqRHeAOOiAw5rRgUNl4vjzt0KEWpKbX87v6CQQjyQBEqlDHwFN dL/IuSBA3gHfDb/HjyyROytKnrgTq/WNytVGCSO3jpAzmw7OoDAAkKg5/bRwzTdu 5nfeIqiLhQwKYqebmxCGsvqukfKvZ/T5IMMC8wxOgvk29dQUeUM2SOcu8DkQGTus YPA/E1mFH6iVqodt0WIPUUG50wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt6AvKq MKNAHJhpz0Za9GC6eptoMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCACzfBQWbYUs2S75qIqMheJehIUA3cX2/2Mp4OXScOo++tnq9ZaqIR /9BDP9t5RR4R6BwdbgfLLIdViNEr/RE12XFhiqtDwR2Coxw208hoJjp+cVIU3EaJ 377XHfQ7sKfdFndQgSvupRCR/JutnzWbmUmWG6Ax2oDopDFR5ZAEF5E9D3nuyh55 qeLvwbaj8A1g5BbXSQnwmNsvQ3IiHsPYICs0ss7NJtqMkI1mXA8B2RE025J008Oo QYk65rfDv0ak9cyZhTEsy6NrXNt1b5DJ12v4rmR5X0pssYhaxwc2MU5kVsDUvuyn n/mJjONAWBLC7lMUYVeDhL3eOtX/sed7 -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:53 2025 by rpki-client