$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: X5o2LOk45ZRpn1s2qzwaEx3DJ4cWQTLb6hKjixw/rUg= Subject key identifier: 3D:B4:3A:52:06:FC:DA:3A:16:47:FB:06:B6:B5:44:C6:F3:11:62:BD Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A23 Signing time: Fri 08 Aug 2025 16:31:26 +0000 Manifest this update: Fri 08 Aug 2025 16:31:25 +0000 Manifest next update: Fri 15 Aug 2025 16:31:25 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: 41f5SW1iYaTboo9fGgmnojR3+EM8+M2lActuP7GxfUw=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: zSKXyhNbfFoYNCqEVuHbtopb0K0RjSYVs5+6fMK45yM=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: TNm1D3H84N7whf8ekQ/vCF3rhsZGPVYvMkkPOGLONIM=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 8/w05fSu74dL03k0q9KVl8WrlCWTBNHjvuwvJNrIN8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6725 (0x1a45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Aug 8 16:31:25 2025 GMT Not After : Aug 15 16:31:25 2025 GMT Subject: CN=6896265d-4595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:6f:f5:d8:8f:46:f7:9a:52:57:ab:e1:5e: a8:b6:0d:5c:db:4a:06:3d:ad:db:64:52:d3:36:ce: 53:d8:2e:02:05:b7:54:13:ba:62:e9:ef:2f:a8:b9: ef:22:a6:7f:d0:06:89:7d:e3:d5:c1:78:a8:5e:2d: fa:21:02:45:22:2b:6b:f5:31:b5:cb:7b:6d:a4:61: 65:39:40:f0:37:72:b0:b5:a6:bd:80:19:fe:58:88: d6:72:70:bc:98:f5:61:e7:dc:ca:2c:ba:c4:3b:a5: 69:af:dc:e9:51:e9:67:41:1f:9b:24:16:66:d2:32: 52:58:69:ee:52:84:a8:b1:a0:e2:62:da:3e:70:2c: 53:f8:db:83:7d:d3:81:f4:0d:67:b2:33:0e:da:c1: 60:3f:f9:74:4e:e8:5b:c2:76:5d:5e:29:cc:c8:1c: 05:64:7a:23:0c:f5:74:83:01:f3:92:21:f7:05:c4: 05:3f:d5:f4:ba:71:1d:b7:b8:bc:93:c5:1c:46:79: d1:90:f2:93:af:a7:43:2e:85:cd:8c:98:10:c9:77: d4:0d:d7:75:b1:fe:3a:77:6d:8e:1e:e6:11:c0:b7: 2d:54:80:70:85:84:62:d5:dd:39:79:3c:b6:b7:df: de:8c:ed:fa:6f:22:15:41:e7:61:3c:db:59:8b:71: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B4:3A:52:06:FC:DA:3A:16:47:FB:06:B6:B5:44:C6:F3:11:62:BD X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:bc:7a:aa:1b:ec:d8:23:26:53:f9:9c:7c:68:4d:12:e9:1c: 6a:fc:00:6b:a7:8b:ab:f4:05:77:9c:5d:f5:9e:1c:10:08:c2: 2f:0f:67:f0:17:b3:9c:d9:2e:1c:c0:aa:d0:49:f1:6a:39:62: d9:44:2f:3d:da:a6:cc:20:66:f1:f9:6d:1d:1f:65:a3:7f:f9: 5d:d7:4c:7d:ad:bb:92:b1:66:aa:50:39:20:ac:1a:2f:11:50: dc:26:3f:76:18:6a:27:d9:5f:f8:07:08:f2:34:4d:da:a8:af: 6c:ab:28:5b:27:4b:42:06:fe:92:db:43:08:b9:b4:38:5d:4e: 8a:50:f2:bf:f2:03:0d:0a:39:d0:f4:7b:bf:b1:c4:f4:c7:2d: 0d:0e:5f:d8:a8:20:48:b2:92:45:9b:c4:6b:17:e8:3d:59:e3: 25:a1:1e:fa:13:81:33:5f:a8:9d:c7:88:33:74:43:d6:3e:92: d5:bd:50:93:2e:6a:48:2d:98:fb:50:bf:a8:5c:69:75:4f:b5: bc:d0:e6:1e:e4:4c:51:a2:46:28:fe:1c:71:38:ce:ce:23:76: e9:94:13:e6:4a:91:71:26:cc:7d:fc:1f:27:8e:57:8a:c0:d0: 94:c2:5d:78:d5:91:1d:fc:36:22:b4:a7:12:9e:f9:d3:9e:95: dc:b9:76:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUwODA4MTYzMTI1WhcNMjUwODE1MTYzMTI1WjAYMRYwFAYD VQQDEw02ODk2MjY1ZC00NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uBv9diPRveaUler4V6otg1c20oGPa3bZFLTNs5T2C4CBbdUE7pi6e8vqLnv IqZ/0AaJfePVwXioXi36IQJFIitr9TG1y3ttpGFlOUDwN3Kwtaa9gBn+WIjWcnC8 mPVh59zKLLrEO6Vpr9zpUelnQR+bJBZm0jJSWGnuUoSosaDiYto+cCxT+NuDfdOB 9A1nsjMO2sFgP/l0TuhbwnZdXinMyBwFZHojDPV0gwHzkiH3BcQFP9X0unEdt7i8 k8UcRnnRkPKTr6dDLoXNjJgQyXfUDdd1sf46d22OHuYRwLctVIBwhYRi1d05eTy2 t9/ejO36byIVQedhPNtZi3FXTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD20OlIG /No6Fkf7Bra1RMbzEWK9MB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnvHqqG+zYIyZT+Zx8aE0S6Rxq/ABrp4ur9AV3nF31nhwQCMIvD2fw F7Oc2S4cwKrQSfFqOWLZRC892qbMIGbx+W0dH2Wjf/ld10x9rbuSsWaqUDkgrBov EVDcJj92GGon2V/4BwjyNE3aqK9sqyhbJ0tCBv6S20MIubQ4XU6KUPK/8gMNCjnQ 9Hu/scT0xy0NDl/YqCBIspJFm8RrF+g9WeMloR76E4EzX6idx4gzdEPWPpLVvVCT LmpILZj7UL+oXGl1T7W80OYe5ExRokYo/hxxOM7OI3bplBPmSpFxJsx9/B8njleK wNCUwl141ZEd/DYitKcSnvnTnpXcuXZ9 -----END CERTIFICATE-----Generated at Sat Aug 9 15:10:52 2025 by rpki-client