$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: hLRKBJGIq9FtVpnOgqp5n1VVTjHvAvm5XeaZDhREQXc= Subject key identifier: FA:49:3A:30:13:47:C5:68:AD:E2:48:37:89:45:EF:45:E4:9E:F7:3D Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 34C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 34AD Signing time: Mon 16 Jun 2025 15:10:40 +0000 Manifest this update: Mon 16 Jun 2025 15:10:39 +0000 Manifest next update: Mon 23 Jun 2025 15:10:39 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: OoPQPpnWk/dGFGPdEfzNb6HkRaYlyfF2fdPVLMhaoX8=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: 24BjWAqe2qRsQURE8DMBPNk7l6vHhbx1QB6qiJta7cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Jun 16 15:10:39 2025 GMT Not After : Jun 23 15:10:39 2025 GMT Subject: CN=685033f0-7db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b7:a7:72:d5:cd:00:eb:c3:86:94:3c:5b:63: e1:db:b8:22:be:45:98:5f:79:46:7a:ba:61:83:89: fa:2b:bd:a9:20:71:bc:8f:62:69:68:42:51:fa:c3: 22:16:81:6f:10:b0:fd:8b:3b:76:99:f8:a6:3f:1b: 6d:ca:67:b8:77:22:fa:dc:aa:3c:a2:ba:02:14:69: ef:52:81:bb:7b:d3:54:b2:f0:a3:db:04:31:80:55: 46:e4:25:9d:3a:ce:b3:93:39:57:1f:29:b7:3b:fb: 0b:fa:fd:67:4e:26:8d:38:37:db:ed:cb:03:90:ce: c4:e5:51:cd:7b:d4:ba:08:ba:7e:f3:75:67:bf:95: 2d:8a:e9:c7:5f:99:e9:cf:6b:1b:96:df:fa:64:48: cd:5f:f8:a9:cf:d0:b5:43:6d:65:8f:ab:52:f8:f3: ff:11:b0:5e:59:e9:e2:4a:2d:71:f5:49:bd:86:91: fa:25:39:fd:58:b4:f0:b4:7b:29:0b:03:bb:d0:36: fe:3c:41:a1:d1:09:fe:73:2f:03:5b:98:f9:ea:75: 36:f6:a2:14:e4:07:d2:6c:92:0d:25:0c:8e:e5:ca: 1d:d8:62:bd:9e:87:c5:de:d5:5f:ae:59:ce:f8:92: ec:24:3a:72:ff:17:dd:63:0c:68:77:4b:a9:9a:c2: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:3A:30:13:47:C5:68:AD:E2:48:37:89:45:EF:45:E4:9E:F7:3D X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:47:a2:72:f3:4a:ee:5b:1a:b2:56:5f:1b:f9:7a:42:62:08: 62:f0:32:5c:83:06:a9:bd:94:66:2a:dc:61:81:0b:55:68:b4: 07:cd:8b:e1:c2:3c:c9:eb:a5:30:2a:d1:fa:e0:39:77:5c:4d: ac:6c:22:a4:95:6b:ea:f4:dd:4b:42:11:8a:c7:bc:a0:45:c3: ce:40:c3:d9:cf:9d:47:2d:0a:da:d5:4e:14:86:5f:ae:e6:4f: 96:c7:ec:62:2c:f2:a9:af:62:49:fc:63:4d:f6:40:11:3a:3c: 77:52:13:ad:3e:83:13:ed:1b:19:a3:c2:32:fa:3c:ca:a4:a6: d1:38:b7:1e:e5:6f:27:c7:a2:1a:1c:4e:b8:23:94:22:dc:63: df:4d:bd:ad:d9:b2:97:47:ad:65:89:32:b5:bc:af:4f:22:ad: bc:92:93:95:5f:6d:4d:3a:7b:e0:4b:cd:c1:8f:37:38:ac:8d: 89:2f:ee:6f:b8:28:ae:8d:05:ba:d8:cf:f0:c0:a0:37:d7:d6: 85:59:e2:48:9a:1c:f9:a6:0c:5e:f6:ad:ed:51:08:db:32:a9: fe:ac:ab:6f:d7:e2:c8:26:b6:0d:34:8e:9f:7f:e0:3a:9b:0f: db:77:4e:3f:bf:98:b5:9e:d2:23:a5:c8:87:69:54:38:bb:69: 33:ec:27:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUwNjE2MTUxMDM5WhcNMjUwNjIzMTUxMDM5WjAYMRYwFAYD VQQDEw02ODUwMzNmMC03ZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0renctXNAOvDhpQ8W2Ph27givkWYX3lGerphg4n6K72pIHG8j2JpaEJR+sMi FoFvELD9izt2mfimPxttyme4dyL63Ko8oroCFGnvUoG7e9NUsvCj2wQxgFVG5CWd Os6zkzlXHym3O/sL+v1nTiaNODfb7csDkM7E5VHNe9S6CLp+83Vnv5UtiunHX5np z2sblt/6ZEjNX/ipz9C1Q21lj6tS+PP/EbBeWeniSi1x9Um9hpH6JTn9WLTwtHsp CwO70Db+PEGh0Qn+cy8DW5j56nU29qIU5AfSbJINJQyO5cod2GK9nofF3tVfrlnO +JLsJDpy/xfdYwxod0upmsLXIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpJOjAT R8VoreJIN4lF70Xknvc9MB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrR6Jy80ruWxqyVl8b+XpCYghi8DJcgwapvZRmKtxhgQtVaLQHzYvh wjzJ66UwKtH64Dl3XE2sbCKklWvq9N1LQhGKx7ygRcPOQMPZz51HLQra1U4Uhl+u 5k+Wx+xiLPKpr2JJ/GNN9kAROjx3UhOtPoMT7RsZo8Iy+jzKpKbROLce5W8nx6Ia HE64I5Qi3GPfTb2t2bKXR61liTK1vK9PIq28kpOVX21NOnvgS83Bjzc4rI2JL+5v uCiujQW62M/wwKA319aFWeJImhz5pgxe9q3tUQjbMqn+rKtv1+LIJrYNNI6ff+A6 mw/bd04/v5i1ntIjpciHaVQ4u2kz7Cdr -----END CERTIFICATE-----Generated at Wed Jun 18 06:56:10 2025 by rpki-client