$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json) Hash identifier: AABj950H3T7Z2Kqk+hijxgDu3GlG5tqQdTlQpe+y/Jw= Subject key identifier: 56:DA:8C:D6:9E:C4:7F:E2:C6:49:C0:E1:09:49:91:BF:58:8C:4D:3D Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft Manifest number: 0103 Signing time: Tue 05 Aug 2025 05:31:15 +0000 Manifest this update: Tue 05 Aug 2025 05:31:15 +0000 Manifest next update: Tue 12 Aug 2025 05:31:15 +0000 Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: XoYXqzt9jdaSTk42z9GcMs7DM70kjGuTnQQZSHXc0no=) 2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: DySwA8C4czN5vHz0fLCB/xltzHfCwXmq3TdjlNfOwqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: Aug 5 05:31:15 2025 GMT Not After : Aug 12 05:31:15 2025 GMT Subject: CN=68919723-c4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:39:04:b7:75:81:56:2f:ef:2b:d0:a3:8a: 9d:9d:f7:ee:49:6d:0e:ce:dd:35:ba:b2:98:4f:17: 60:a0:79:27:8f:b0:d0:6a:5e:68:b9:1b:c3:61:05: a1:7d:d4:a0:f3:6e:d8:20:9b:1d:20:84:b0:81:51: 28:cd:f9:f4:50:94:0a:65:7a:32:41:29:11:76:9d: ef:50:5c:3b:24:f5:04:e4:0f:a7:f6:e1:5e:45:ef: 65:43:18:eb:50:cd:40:16:57:e3:25:b3:5b:5f:a9: 17:fa:c0:18:51:4d:c7:57:40:57:7a:75:ed:20:db: 17:94:42:27:aa:65:8d:ec:d0:5e:b9:56:dd:37:b0: 95:3f:d7:a8:c9:e6:da:d2:b5:1a:73:fc:02:ef:19: 38:15:cb:37:bc:c0:d3:0f:9d:76:76:26:7a:82:98: 43:71:2c:51:6b:7d:b0:f5:ab:39:10:cd:90:65:6b: 3a:11:e4:3d:a0:15:cb:ea:cd:63:6d:7f:e8:c1:e5: ca:6d:c0:ee:91:b4:fe:29:93:8e:3c:1a:4c:ea:8a: 51:6e:dc:c8:38:98:23:76:83:6a:f8:f8:e4:77:d8: b3:57:0b:46:a7:52:37:25:79:04:a7:15:11:86:c2: f4:ed:10:e5:17:c8:7a:4d:bb:15:3d:59:15:20:a1: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DA:8C:D6:9E:C4:7F:E2:C6:49:C0:E1:09:49:91:BF:58:8C:4D:3D X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:21:b9:3a:f4:29:40:43:59:2f:6f:9c:12:b2:1c:0f:9d:8b: 10:5b:31:64:4f:0e:4e:d9:8a:20:61:32:e9:01:1d:38:15:e8: c6:23:c0:27:ed:47:e3:64:70:4c:29:4c:6f:f6:23:dd:5a:70: c9:d1:1c:58:a3:68:27:a2:a3:83:ae:1a:01:9a:20:7a:9e:bb: d5:ae:f5:53:97:d2:9d:40:04:e7:86:f7:3b:7e:6e:96:05:a3: 88:6f:c7:22:49:77:0c:6e:5f:07:6a:50:59:a7:67:a4:02:23: df:be:fd:19:da:2a:d0:4d:2a:33:00:2f:59:8b:43:84:83:d3: 41:c1:da:3d:58:18:0c:9f:ac:96:86:bd:1d:39:02:a8:17:ec: f3:04:4e:f9:21:7a:55:7d:6d:48:e7:92:a1:b8:a6:43:89:12: e8:37:91:75:eb:d0:45:b4:3b:cb:31:9a:d8:87:84:2a:9c:f8: 3e:2c:b7:9c:29:67:a9:a9:34:99:12:41:db:08:d7:01:8c:70: ee:db:33:6a:6d:ba:c6:d1:4a:65:e8:1f:e5:e6:2c:49:78:df: 9f:5a:6c:9f:ce:a0:8f:a9:37:a2:ac:8b:49:66:7c:65:9a:8a: 6f:2a:98:77:fa:6c:1b:73:49:9c:43:e9:bd:66:64:e0:57:45: eb:12:35:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUwODA1MDUzMTE1WhcNMjUwODEyMDUzMTE1WjAYMRYwFAYD VQQDEw02ODkxOTcyMy1jNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBM5BLd1gVYv7yvQo4qdnffuSW0Ozt01urKYTxdgoHknj7DQal5ouRvDYQWh fdSg827YIJsdIISwgVEozfn0UJQKZXoyQSkRdp3vUFw7JPUE5A+n9uFeRe9lQxjr UM1AFlfjJbNbX6kX+sAYUU3HV0BXenXtINsXlEInqmWN7NBeuVbdN7CVP9eoyeba 0rUac/wC7xk4Fcs3vMDTD512diZ6gphDcSxRa32w9as5EM2QZWs6EeQ9oBXL6s1j bX/oweXKbcDukbT+KZOOPBpM6opRbtzIOJgjdoNq+Pjkd9izVwtGp1I3JXkEpxUR hsL07RDlF8h6TbsVPVkVIKENFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbajNae xH/ixknA4QlJkb9YjE09MB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1T Nmkyc2hybUtPWXp3eGIxdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkIbk69ClAQ1kvb5wSshwPnYsQWzFkTw5O2YogYTLpAR04FejGI8An 7UfjZHBMKUxv9iPdWnDJ0RxYo2gnoqODrhoBmiB6nrvVrvVTl9KdQATnhvc7fm6W BaOIb8ciSXcMbl8HalBZp2ekAiPfvv0Z2irQTSozAC9Zi0OEg9NBwdo9WBgMn6yW hr0dOQKoF+zzBE75IXpVfW1I55KhuKZDiRLoN5F169BFtDvLMZrYh4QqnPg+LLec KWepqTSZEkHbCNcBjHDu2zNqbbrG0Upl6B/l5ixJeN+fWmyfzqCPqTeirItJZnxl mopvKph3+mwbc0mcQ+m9ZmTgV0XrEjXn -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:30 2025 by rpki-client