$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: ZffT5owtd56NXt4yKYHIs/bg/bl/0Ak2q7VZIKQP/7U= Subject key identifier: D4:85:08:30:E3:80:B2:B2:F9:F2:2C:19:F0:2B:FD:24:DC:9C:25:4A Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A36 Signing time: Sat 14 Jun 2025 19:35:33 +0000 Manifest this update: Sat 14 Jun 2025 19:35:32 +0000 Manifest next update: Sat 21 Jun 2025 19:35:32 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: Rlv1Ce1B8eKdsn9HYfX5fTSaG4JCy75xd9wpFvrOHqU=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Jun 14 19:35:32 2025 GMT Not After : Jun 21 19:35:32 2025 GMT Subject: CN=684dcf04-44ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1b:74:7d:99:b7:7f:62:aa:f6:c4:a3:c0:c6: a8:24:1d:dd:1a:29:d7:87:dd:dc:8c:af:9f:3d:eb: 29:84:df:ee:d6:56:4a:2c:31:49:20:8d:bb:18:b5: 60:d2:d7:50:e7:96:66:ca:64:d5:fa:bb:db:de:91: 0b:af:1a:61:b9:07:94:6c:aa:a0:25:bc:bd:a5:1b: ab:47:9e:5e:d4:de:3c:0b:0f:99:0b:85:f1:e3:ed: 83:34:88:f2:69:6f:64:60:11:24:a1:24:8c:43:66: 50:12:7b:b2:fc:a1:02:7e:a5:cb:62:39:f2:64:04: a2:02:31:29:6a:c2:d4:e8:36:af:5c:48:a2:2b:40: 35:b0:a4:3f:d3:59:73:14:21:65:14:3c:d8:85:7f: bc:dd:9f:ba:16:b9:77:6f:d4:09:ce:44:5f:75:2d: a9:22:40:46:c0:4c:ca:3e:c6:4a:a2:05:52:92:fe: 92:11:72:c6:66:a8:3f:cf:10:54:b5:16:a4:aa:bc: 47:63:4e:39:03:a0:9a:73:ea:a4:35:3b:ff:a8:16: a0:d8:fc:d8:c0:cd:af:e2:9f:fa:b9:bf:71:dc:26: 8e:34:fc:ef:7d:ca:d1:79:d0:46:c9:e7:d8:1b:b4: 3e:0a:14:a8:db:5b:93:c6:af:ae:01:89:66:3b:45: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:08:30:E3:80:B2:B2:F9:F2:2C:19:F0:2B:FD:24:DC:9C:25:4A X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1b:da:3f:f6:08:27:97:d4:30:8c:37:63:f0:b3:19:e5:87: f6:cc:6a:73:cf:90:fb:de:2c:86:a0:cd:18:81:b2:1f:8c:6c: 4d:76:57:b6:3b:a9:b9:6c:2f:10:f5:6b:6f:1d:d2:db:6c:6d: 2c:b7:f6:74:a1:e9:05:22:08:f0:ca:57:fa:e3:97:5a:38:25: ae:13:3c:7b:9c:a3:b9:de:57:86:0e:ae:9d:df:8c:20:cd:84: d6:87:7c:a6:56:c6:95:99:c9:19:c0:74:f6:2c:ec:fc:16:e5: ee:a8:3a:2e:c8:23:c0:0d:af:ac:ec:53:bc:b8:e7:26:9a:83: 16:16:53:4e:54:f7:3a:8d:02:89:7d:14:88:2b:e3:1f:50:70: 20:c4:5a:8a:5d:0a:bb:f1:73:0c:ec:0f:29:b9:cd:5e:ef:c6: 03:cb:70:04:01:6e:b5:be:7a:7b:10:81:a9:06:49:b0:87:d5: e1:e7:95:1d:58:2f:a9:68:31:ef:3d:60:f5:8d:61:d4:58:a7: 41:2b:b3:66:05:d9:3a:8a:07:de:90:60:98:1c:90:e2:ce:30: 08:7d:17:7c:e9:01:5c:fa:ab:52:36:d7:86:31:6b:95:f0:73: d1:e5:57:89:ea:0d:92:14:e2:d0:c0:8d:eb:ee:05:f8:73:83: 3d:e7:c7:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUwNjE0MTkzNTMyWhcNMjUwNjIxMTkzNTMyWjAYMRYwFAYD VQQDEw02ODRkY2YwNC00NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Rt0fZm3f2Kq9sSjwMaoJB3dGinXh93cjK+fPesphN/u1lZKLDFJII27GLVg 0tdQ55ZmymTV+rvb3pELrxphuQeUbKqgJby9pRurR55e1N48Cw+ZC4Xx4+2DNIjy aW9kYBEkoSSMQ2ZQEnuy/KECfqXLYjnyZASiAjEpasLU6DavXEiiK0A1sKQ/01lz FCFlFDzYhX+83Z+6Frl3b9QJzkRfdS2pIkBGwEzKPsZKogVSkv6SEXLGZqg/zxBU tRakqrxHY045A6Cac+qkNTv/qBag2PzYwM2v4p/6ub9x3CaONPzvfcrRedBGyefY G7Q+ChSo21uTxq+uAYlmO0V71wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSFCDDj gLKy+fIsGfAr/STcnCVKMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMG9o/9ggnl9QwjDdj8LMZ5Yf2zGpzz5D73iyGoM0YgbIfjGxNdle2 O6m5bC8Q9WtvHdLbbG0st/Z0oekFIgjwylf645daOCWuEzx7nKO53leGDq6d34wg zYTWh3ymVsaVmckZwHT2LOz8FuXuqDouyCPADa+s7FO8uOcmmoMWFlNOVPc6jQKJ fRSIK+MfUHAgxFqKXQq78XMM7A8puc1e78YDy3AEAW61vnp7EIGpBkmwh9Xh55Ud WC+paDHvPWD1jWHUWKdBK7NmBdk6igfekGCYHJDizjAIfRd86QFc+qtSNteGMWuV 8HPR5VeJ6g2SFOLQwI3r7gX4c4M958f5 -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:14 2025 by rpki-client