$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json) Hash identifier: x18gbgQsyMd42kgMGAVOHVK40I5dyqCZu0YFEO9pTeY= Subject key identifier: EB:27:7F:FB:52:A6:3B:13:0F:1A:22:CB:40:7D:28:81:18:69:39:C3 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft Manifest number: E8 Signing time: Fri 13 Jun 2025 04:20:10 +0000 Manifest this update: Fri 13 Jun 2025 04:20:09 +0000 Manifest next update: Fri 20 Jun 2025 04:20:09 +0000 Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: 6xp1WZA0Ju4i8IEsll2YZtUf7BbA63r03bIS2On9sqg=) 2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: DySwA8C4czN5vHz0fLCB/xltzHfCwXmq3TdjlNfOwqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: Jun 13 04:20:09 2025 GMT Not After : Jun 20 04:20:09 2025 GMT Subject: CN=684ba6f9-f805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:dc:b1:a4:9d:d5:9e:a2:4b:ea:ae:ef:ad: 94:ca:9d:09:6c:e4:fb:64:f3:2b:03:06:e5:e1:6e: fb:09:a5:34:8e:93:d9:5e:37:2c:42:da:19:b6:a5: 7a:34:09:dd:04:b8:aa:73:67:c9:d8:d0:62:7f:9e: 4c:8f:e9:ac:80:dd:47:05:c9:cc:3d:55:e7:44:19: d9:e9:9d:29:18:13:81:b4:e9:2b:46:a0:06:90:6d: 3f:fd:32:29:19:3b:20:96:e6:51:3e:5f:f7:08:4e: f6:88:4a:c6:93:7e:42:99:22:71:d5:aa:27:6c:bc: 5c:5d:af:c4:59:83:b0:ad:7c:ae:e4:b7:18:94:c0: dc:2c:fa:73:bc:88:46:e4:7c:4a:a4:06:49:22:23: 41:71:cd:c8:69:f1:de:15:c2:b4:88:0e:d6:6c:7d: 71:d8:ff:53:62:fc:ae:4f:c1:a9:49:98:c0:7e:35: 62:85:ef:24:bb:32:f8:bf:e0:7d:eb:54:37:1b:aa: 9d:15:01:23:3e:7b:5c:9b:1d:12:f3:72:30:e7:f2: bb:9c:17:21:1c:bc:2d:57:b2:b9:14:ef:60:cc:a7: f6:33:d8:b9:c6:1d:b8:17:c0:63:c4:79:f4:ec:79: dd:5f:6d:0a:8d:dc:7a:78:96:a1:22:86:bb:a7:8f: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:27:7F:FB:52:A6:3B:13:0F:1A:22:CB:40:7D:28:81:18:69:39:C3 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e9:5d:88:44:45:5b:46:80:24:d3:e8:0c:11:c2:e7:0c:64: 8b:89:46:2c:91:f0:ea:18:85:6b:c7:fe:44:8a:b1:2e:7e:9f: 99:49:d9:78:49:46:e6:e3:f4:9c:a2:5b:e2:57:03:9f:a6:c6: d5:78:c1:2f:66:7b:4b:af:97:75:11:25:ba:f3:e6:bf:13:ed: e7:c1:22:8e:e0:13:2f:89:4f:da:ec:43:83:43:e6:82:a2:db: 54:59:b6:e7:22:17:7b:62:9d:ea:f5:50:94:c3:4c:e0:e6:ce: 47:f8:c4:c0:79:ec:12:df:c2:58:87:47:6e:e3:da:8f:75:83: 59:69:f0:e7:77:34:bd:b9:31:ac:4b:82:4d:c7:70:3d:88:17: f6:e1:0d:7f:94:b9:7c:43:48:86:44:09:5b:03:49:e5:74:9a: d2:46:63:cc:af:42:69:81:31:22:27:82:e3:4f:f9:3e:16:95: 43:b2:d0:eb:e0:23:be:3c:dd:e9:f7:eb:0b:f9:92:1c:f3:af: 55:82:1d:cd:30:3c:06:8f:3b:4a:58:9d:fd:8f:e4:34:ce:23: e7:36:bf:c9:b5:2d:eb:9c:79:39:4b:b3:ce:0c:13:52:bf:10: 0b:3a:12:2c:86:6e:45:9a:b6:d5:b5:03:9a:31:33:8a:b7:0d: d5:c2:b2:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUwNjEzMDQyMDA5WhcNMjUwNjIwMDQyMDA5WjAYMRYwFAYD VQQDEw02ODRiYTZmOS1mODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UncsaSd1Z6iS+qu762Uyp0JbOT7ZPMrAwbl4W77CaU0jpPZXjcsQtoZtqV6 NAndBLiqc2fJ2NBif55Mj+msgN1HBcnMPVXnRBnZ6Z0pGBOBtOkrRqAGkG0//TIp GTsgluZRPl/3CE72iErGk35CmSJx1aonbLxcXa/EWYOwrXyu5LcYlMDcLPpzvIhG 5HxKpAZJIiNBcc3IafHeFcK0iA7WbH1x2P9TYvyuT8GpSZjAfjVihe8kuzL4v+B9 61Q3G6qdFQEjPntcmx0S83Iw5/K7nBchHLwtV7K5FO9gzKf2M9i5xh24F8BjxHn0 7HndX20Kjdx6eJahIoa7p4+1ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsnf/tS pjsTDxoiy0B9KIEYaTnDMB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1T Nmkyc2hybUtPWXp3eGIxdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY6V2IREVbRoAk0+gMEcLnDGSLiUYskfDqGIVrx/5EirEufp+ZSdl4 SUbm4/ScolviVwOfpsbVeMEvZntLr5d1ESW68+a/E+3nwSKO4BMviU/a7EODQ+aC ottUWbbnIhd7Yp3q9VCUw0zg5s5H+MTAeewS38JYh0du49qPdYNZafDndzS9uTGs S4JNx3A9iBf24Q1/lLl8Q0iGRAlbA0nldJrSRmPMr0JpgTEiJ4LjT/k+FpVDstDr 4CO+PN3p9+sL+ZIc869Vgh3NMDwGjztKWJ39j+Q0ziPnNr/JtS3rnHk5S7PODBNS vxALOhIshm5FmrbVtQOaMTOKtw3VwrID -----END CERTIFICATE-----Generated at Sun Jun 15 05:12:00 2025 by rpki-client