$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: p6iCJXeKut6yx/jTHJ5vsedUaiE5tochg/WgzGEGDCU= Subject key identifier: C6:40:13:F4:5C:2E:EB:11:C2:D2:13:EB:66:E5:89:76:56:AE:83:FD Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A09 Signing time: Wed 18 Jun 2025 16:23:10 +0000 Manifest this update: Wed 18 Jun 2025 16:23:10 +0000 Manifest next update: Wed 25 Jun 2025 16:23:10 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: 9uQaTKm7clN3h2hHVdvL4/iZt5UtMRMLkxUiwzaVYqU=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: zSKXyhNbfFoYNCqEVuHbtopb0K0RjSYVs5+6fMK45yM=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: TNm1D3H84N7whf8ekQ/vCF3rhsZGPVYvMkkPOGLONIM=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 8/w05fSu74dL03k0q9KVl8WrlCWTBNHjvuwvJNrIN8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6699 (0x1a2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Jun 18 16:23:10 2025 GMT Not After : Jun 25 16:23:10 2025 GMT Subject: CN=6852e7ee-c1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:28:6a:6c:15:38:fc:17:d2:ba:58:7d:f5: 9d:7a:df:48:b3:35:09:2a:0c:ab:fb:66:ab:b9:e9: c6:6d:23:81:0c:79:34:68:ed:b2:4b:ab:25:d1:b6: 9f:e6:ed:f8:fb:19:dc:76:04:eb:ac:59:77:69:74: fe:fc:1b:1e:57:f3:11:1a:63:bf:df:b6:00:ee:f1: 69:44:d0:b8:77:3c:b0:c9:55:a7:d0:d3:67:3b:16: 0f:0b:71:44:1b:6c:f7:ad:6f:93:e0:43:74:50:00: 94:e3:3b:45:a4:81:74:97:04:eb:7b:b3:1a:8a:1e: 7d:34:18:b5:7a:8b:25:51:6e:bd:95:0b:10:dd:44: c1:8e:2b:69:19:84:18:43:36:87:99:28:42:4d:91: fd:25:97:cb:49:28:94:a0:ce:57:13:94:f4:a3:c3: d3:12:d9:90:c9:c8:58:34:ef:4d:26:0b:d6:1c:66: 2f:06:a5:79:f1:a3:e1:a2:8c:9e:b8:9b:4b:af:39: d5:fa:3d:d2:b9:18:44:90:6c:92:ec:78:82:b4:86: 8e:da:ba:70:8f:78:8f:b8:b1:e0:4c:4a:5b:20:49: 97:33:9f:2d:d2:2e:8e:58:45:8c:76:2a:bb:1f:e7: 3e:67:a4:a6:ea:17:42:15:93:9f:e1:13:07:da:50: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:40:13:F4:5C:2E:EB:11:C2:D2:13:EB:66:E5:89:76:56:AE:83:FD X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:8c:16:61:f3:e3:a5:27:3b:af:5f:c5:9f:a5:d1:a4:81:34: bf:aa:1e:7a:21:a0:8c:45:d5:fb:0c:bf:36:f0:b5:29:25:ae: 9b:27:5f:d2:77:40:7e:f7:72:7e:f9:ee:ba:dc:89:60:20:1e: 79:9d:d1:81:b6:f5:18:b3:25:cd:08:d7:3e:97:f6:24:19:64: 40:a3:1c:5f:cc:6b:1c:da:f8:71:df:c5:a8:c8:f8:b9:48:f2: 05:b4:29:fa:41:03:9f:fb:0d:1d:9e:55:0a:74:dd:e3:c3:c8: 0c:3d:60:76:52:1a:a3:ab:68:f1:d0:13:ef:e3:bc:8e:b9:cd: 27:c3:78:f1:89:61:e5:30:24:c6:05:cd:9c:94:84:fd:e4:5b: 6e:fa:51:04:2a:39:c9:4f:72:e4:3f:14:8b:77:b2:39:da:e0: 22:b4:e8:47:c4:74:db:59:c7:f4:14:aa:78:0a:a9:76:44:14: 41:e6:ac:f8:f7:e6:77:3f:89:d4:0d:a2:7e:74:13:8f:3f:a7: b7:8a:15:a3:72:c2:fe:0c:eb:02:d1:65:38:1a:1d:0b:95:7b: e1:fa:71:2c:dd:4f:66:9b:d0:72:39:f3:32:fb:38:6a:21:5a: e9:a8:5d:2a:57:ed:c4:fd:e6:32:5a:f8:fa:8f:89:74:f6:0d: 2b:bc:d4:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUwNjE4MTYyMzEwWhcNMjUwNjI1MTYyMzEwWjAYMRYwFAYD VQQDEw02ODUyZTdlZS1jMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryUoamwVOPwX0rpYffWdet9IszUJKgyr+2aruenGbSOBDHk0aO2yS6sl0baf 5u34+xncdgTrrFl3aXT+/BseV/MRGmO/37YA7vFpRNC4dzywyVWn0NNnOxYPC3FE G2z3rW+T4EN0UACU4ztFpIF0lwTre7Maih59NBi1eoslUW69lQsQ3UTBjitpGYQY QzaHmShCTZH9JZfLSSiUoM5XE5T0o8PTEtmQychYNO9NJgvWHGYvBqV58aPhooye uJtLrznV+j3SuRhEkGyS7HiCtIaO2rpwj3iPuLHgTEpbIEmXM58t0i6OWEWMdiq7 H+c+Z6Sm6hdCFZOf4RMH2lDiRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZAE/Rc LusRwtIT62bliXZWroP9MB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnjBZh8+OlJzuvX8WfpdGkgTS/qh56IaCMRdX7DL828LUpJa6bJ1/S d0B+93J++e663IlgIB55ndGBtvUYsyXNCNc+l/YkGWRAoxxfzGsc2vhx38WoyPi5 SPIFtCn6QQOf+w0dnlUKdN3jw8gMPWB2Uhqjq2jx0BPv47yOuc0nw3jxiWHlMCTG Bc2clIT95Ftu+lEEKjnJT3LkPxSLd7I52uAitOhHxHTbWcf0FKp4Cql2RBRB5qz4 9+Z3P4nUDaJ+dBOPP6e3ihWjcsL+DOsC0WU4Gh0LlXvh+nEs3U9mm9ByOfMy+zhq IVrpqF0qV+3E/eYyWvj6j4l09g0rvNRr -----END CERTIFICATE-----Generated at Thu Jun 19 08:16:37 2025 by rpki-client