$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: O32QQl6U9XFWSWwLXFbBNiektdY1UZHLpn8VO7uq2Ko= Subject key identifier: 89:88:9B:FB:69:9E:9C:FB:C0:CC:6B:DF:FE:05:FA:CD:01:C7:A0:52 Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: C5 Signing time: Thu 07 Aug 2025 06:21:26 +0000 Manifest this update: Thu 07 Aug 2025 06:21:25 +0000 Manifest next update: Thu 14 Aug 2025 06:21:25 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: U9VbY4Vjo8XEiv4mu44rfiFacjC5HmM5/xfgPV+8GzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Aug 7 06:21:25 2025 GMT Not After : Aug 14 06:21:25 2025 GMT Subject: CN=689445e6-36fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:48:0f:d9:cd:3b:6b:34:37:78:c1:e2:c4: fd:a9:36:05:bb:d5:37:49:4e:01:08:e4:37:ce:78: b7:06:e9:e5:90:cc:b6:d2:e1:f1:fd:da:00:e2:fe: 6a:a4:5e:37:4b:ff:7a:55:2e:1f:9f:a5:b4:35:a6: 69:ea:13:50:98:e4:56:5c:ee:b8:e6:18:54:e1:e9: 59:cb:69:5a:e1:60:fc:88:05:4e:2f:36:05:03:63: f4:1e:cd:f9:49:3c:55:12:0f:45:5a:66:45:5a:6c: 92:a6:13:79:48:cf:a0:89:c3:e3:97:80:55:cf:b2: 9f:08:34:c4:51:a4:e9:57:07:35:2b:c5:fa:26:dd: bc:66:4f:ea:da:76:0e:ee:a4:e5:8b:7f:62:a7:eb: 7a:22:c8:60:e0:28:db:ed:9c:00:c7:a6:e3:6f:78: b8:95:87:af:63:ee:7d:45:7f:2d:ca:c5:bd:6e:41: 51:8a:fa:3b:91:f7:e1:c6:53:ec:c5:16:12:c0:cb: 72:01:01:2d:87:d6:32:d7:c3:4c:74:b4:c0:f5:7a: da:06:c9:e3:6d:d1:78:9c:76:19:3a:b5:78:0d:e6: 91:7f:e9:b5:34:bc:0e:3e:3f:41:fe:02:7c:bf:a1: 25:58:25:67:49:cf:a7:a1:a1:07:ee:61:0e:41:79: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:88:9B:FB:69:9E:9C:FB:C0:CC:6B:DF:FE:05:FA:CD:01:C7:A0:52 X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:16:a3:76:c7:c9:90:e1:ea:14:69:8d:9d:da:00:70:0d:cc: 71:56:ce:05:1a:78:1e:bf:8c:7b:d3:df:0a:c9:4f:dc:2d:5d: f2:9e:80:98:b0:7f:74:9a:16:5c:8a:88:31:e2:91:10:21:87: a3:d4:95:e2:0c:a5:d6:fe:df:cc:74:dd:ea:88:c0:37:1f:49: d2:e9:64:0d:9c:f2:46:68:fa:1b:d5:0a:86:17:19:ab:f8:3d: e4:d0:4a:4d:98:9d:36:b9:28:b4:08:80:a9:3e:9c:e8:b3:78: ca:d4:e2:20:a1:e8:e0:b8:13:d6:fd:0a:45:cc:e1:0d:77:67: 99:ee:af:59:5b:73:70:3f:4a:11:97:8c:f2:16:40:99:55:19: 56:fc:b1:c7:8a:30:6f:a4:bd:de:52:2c:62:6f:3c:9c:bb:78: 43:dd:16:bf:fc:87:12:26:b3:37:a9:40:a7:fe:e8:06:00:de: 3a:af:3b:c8:d5:4a:bb:78:c1:0a:61:fd:ed:52:e1:74:f1:03: 3b:62:11:0e:1e:8a:65:a9:6c:a9:0b:3d:2e:ea:7d:17:ee:78: 10:7a:d7:0e:eb:b8:a0:c9:1f:1f:95:ca:5c:79:ee:36:53:f0: 60:72:4e:e8:8a:f8:78:92:dc:b1:c1:9b:81:ea:09:8c:d8:fb: 87:f7:33:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjUwODA3MDYyMTI1WhcNMjUwODE0MDYyMTI1WjAYMRYwFAYD VQQDEw02ODk0NDVlNi0zNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3a5ID9nNO2s0N3jB4sT9qTYFu9U3SU4BCOQ3zni3BunlkMy20uHx/doA4v5q pF43S/96VS4fn6W0NaZp6hNQmORWXO645hhU4elZy2la4WD8iAVOLzYFA2P0Hs35 STxVEg9FWmZFWmySphN5SM+gicPjl4BVz7KfCDTEUaTpVwc1K8X6Jt28Zk/q2nYO 7qTli39ip+t6Ishg4Cjb7ZwAx6bjb3i4lYevY+59RX8tysW9bkFRivo7kffhxlPs xRYSwMtyAQEth9Yy18NMdLTA9XraBsnjbdF4nHYZOrV4DeaRf+m1NLwOPj9B/gJ8 v6ElWCVnSc+noaEH7mEOQXlrjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImIm/tp npz7wMxr3/4F+s0Bx6BSMB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8FqN2x8mQ4eoUaY2d2gBwDcxxVs4FGngev4x7098KyU/cLV3ynoCY sH90mhZciogx4pEQIYej1JXiDKXW/t/MdN3qiMA3H0nS6WQNnPJGaPob1QqGFxmr +D3k0EpNmJ02uSi0CICpPpzos3jK1OIgoejguBPW/QpFzOENd2eZ7q9ZW3NwP0oR l4zyFkCZVRlW/LHHijBvpL3eUixibzycu3hD3Ra//IcSJrM3qUCn/ugGAN46rzvI 1Uq7eMEKYf3tUuF08QM7YhEOHoplqWypCz0u6n0X7ngQetcO67igyR8flcpcee42 U/Bgck7oivh4ktyxwZuB6gmM2PuH9zNo -----END CERTIFICATE-----Generated at Sat Aug 9 05:47:35 2025 by rpki-client