$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: XrGlOO+cNvZLHsEcStWVVezs0EbHiXHRhn42Y+iHkxY= Subject key identifier: 78:87:49:A5:CB:27:84:9F:0D:3D:DA:BB:C6:B3:1B:AD:21:A8:32:03 Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 194D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 1EDB Signing time: Sat 14 Jun 2025 16:22:30 +0000 Manifest this update: Sat 14 Jun 2025 16:22:29 +0000 Manifest next update: Sat 21 Jun 2025 16:22:29 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: fnHwPsTb2+ZOdkAC46sPehzkpAsukjfqmE8xpzlZwq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6477 (0x194d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: Jun 14 16:22:29 2025 GMT Not After : Jun 21 16:22:29 2025 GMT Subject: CN=684da1c6-3529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:5d:d4:bc:6d:b9:11:51:86:c3:bb:b9:05: 4d:7a:db:cd:72:3a:03:79:b1:4f:c1:50:e2:35:05: b4:3f:70:19:76:51:98:1d:6c:38:e7:a5:d0:f2:98: 9f:ec:ef:88:13:93:47:08:91:2f:61:0c:46:62:ea: bf:40:e4:37:6c:03:14:e0:1f:d9:4e:d7:4e:af:aa: 33:9c:00:84:ab:28:fe:c1:0f:ab:bb:f3:99:c3:82: 01:de:ca:95:8c:65:45:47:df:b9:c8:7b:53:66:3f: 5a:2f:17:e6:97:23:97:a5:7e:83:2c:49:9a:0f:b6: 71:24:00:9e:f1:1b:58:12:a3:87:e9:43:aa:75:ab: f8:43:c0:1d:18:98:44:76:64:00:25:7b:46:66:f2: a4:8f:d5:d5:75:97:5d:77:34:b9:6d:af:5d:7d:33: 87:20:d9:10:e0:a4:ef:66:5a:27:41:bd:ce:37:38: 8d:37:2b:35:8c:2e:0f:09:66:76:6b:b0:3e:8b:d4: 36:b7:3a:60:a7:cf:4a:94:87:ad:ea:e2:d1:6b:af: 91:41:7e:ad:a8:49:2d:ad:fc:67:b4:b2:13:b7:49: b3:63:d1:3b:38:9f:4a:c3:8d:67:f4:2d:e4:b3:4e: 6e:97:2d:c9:29:81:6e:95:70:ea:69:cb:21:88:29: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:87:49:A5:CB:27:84:9F:0D:3D:DA:BB:C6:B3:1B:AD:21:A8:32:03 X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:98:bb:6c:a2:74:a0:f4:9d:26:cd:3b:d2:52:fc:f2:58:d8: 7f:9b:f4:36:33:f9:6d:c1:45:00:15:a6:5e:9f:f6:f7:b1:57: 7e:09:ff:c0:1f:cf:b3:79:38:a5:16:e3:fd:b5:38:cf:f9:87: 4a:13:c6:16:56:ac:cd:e0:92:c6:37:80:13:2d:22:02:13:a5: d5:9e:14:00:b7:fc:2d:b3:2e:11:37:ac:79:74:67:b5:f8:2c: 40:47:15:74:23:ca:db:bf:55:88:0f:6f:46:40:e7:86:b9:95: 28:a5:28:4a:fa:af:fe:58:ca:91:62:67:f3:7a:a3:1f:f4:11: 2b:01:bd:a8:9b:e0:da:56:9d:86:43:ed:9e:e5:c3:4d:67:2e: c6:59:ea:c4:74:6d:4f:84:03:07:3e:cf:aa:b5:85:e3:c6:14: e6:5d:c8:f5:cd:06:58:97:07:42:64:af:df:bd:16:e9:a6:41: bb:32:82:17:31:59:3f:23:bb:ca:7b:e3:8a:a2:c1:cd:38:9d: 44:f8:d3:81:8f:87:71:c8:84:28:61:f1:f2:3b:84:1f:6b:ad: a9:97:8c:de:29:18:23:97:8b:5d:81:be:4e:c2:82:c6:72:48: 31:bf:ef:31:e3:0c:6f:c6:73:3b:60:b8:b4:40:6d:21:01:0c: 57:14:f8:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjUwNjE0MTYyMjI5WhcNMjUwNjIxMTYyMjI5WjAYMRYwFAYD VQQDEw02ODRkYTFjNi0zNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0hd1LxtuRFRhsO7uQVNetvNcjoDebFPwVDiNQW0P3AZdlGYHWw456XQ8pif 7O+IE5NHCJEvYQxGYuq/QOQ3bAMU4B/ZTtdOr6oznACEqyj+wQ+ru/OZw4IB3sqV jGVFR9+5yHtTZj9aLxfmlyOXpX6DLEmaD7ZxJACe8RtYEqOH6UOqdav4Q8AdGJhE dmQAJXtGZvKkj9XVdZdddzS5ba9dfTOHINkQ4KTvZlonQb3ONziNNys1jC4PCWZ2 a7A+i9Q2tzpgp89KlIet6uLRa6+RQX6tqEktrfxntLITt0mzY9E7OJ9Kw41n9C3k s05uly3JKYFulXDqacshiClsXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiHSaXL J4SfDT3au8azG60hqDIDMB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6mLtsonSg9J0mzTvSUvzyWNh/m/Q2M/ltwUUAFaZen/b3sVd+Cf/A H8+zeTilFuP9tTjP+YdKE8YWVqzN4JLGN4ATLSICE6XVnhQAt/wtsy4RN6x5dGe1 +CxARxV0I8rbv1WID29GQOeGuZUopShK+q/+WMqRYmfzeqMf9BErAb2om+DaVp2G Q+2e5cNNZy7GWerEdG1PhAMHPs+qtYXjxhTmXcj1zQZYlwdCZK/fvRbppkG7MoIX MVk/I7vKe+OKosHNOJ1E+NOBj4dxyIQoYfHyO4Qfa62pl4zeKRgjl4tdgb5OwoLG ckgxv+8x4wxvxnM7YLi0QG0hAQxXFPgd -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:28 2025 by rpki-client