$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json) Hash identifier: wRYTrxc+goyKKw173TpXC+Z3v4NYRsRDaykuEhKEjF4= Subject key identifier: 14:61:24:13:8B:37:9E:1E:4E:E9:A8:EA:47:4D:76:81:A6:C4:DE:6B Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Certificate serial: 061D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft Manifest number: 0617 Signing time: Thu 12 Jun 2025 22:27:53 +0000 Manifest this update: Thu 12 Jun 2025 22:27:52 +0000 Manifest next update: Thu 19 Jun 2025 22:27:52 +0000 Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: h6O7pzNDmNiKmro7JST5osI/KhCFdZC1fGsmu676pgU=) 2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: ol3uXw4dkWIdxcKjMSPB1+hf827QNdo9sA61mKaXk78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Validity Not Before: Jun 12 22:27:52 2025 GMT Not After : Jun 19 22:27:52 2025 GMT Subject: CN=684b5468-00df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:0c:e0:0c:54:2b:3d:fe:78:12:d2:64:32: 9b:55:b6:ba:b2:33:5b:f9:bb:da:49:63:c7:8e:43: 97:07:a2:70:1e:58:93:6e:96:69:ce:e7:11:16:38: a3:5f:9a:4e:8d:2f:2f:b0:97:f8:10:be:f3:46:db: 9a:6c:cd:46:54:a5:57:3b:ce:80:8f:c2:db:a1:99: 0b:5a:eb:49:01:30:9c:aa:79:eb:78:e8:e0:07:7b: 2f:75:93:f3:a1:fd:3e:cc:cb:03:e4:10:75:f4:e5: 23:ce:81:d7:7a:0e:51:44:68:0c:25:78:9c:95:13: d9:03:f7:cb:ad:38:8a:0a:b1:3d:67:08:83:41:8a: 91:c7:4f:3f:2b:50:6f:63:89:03:ee:ec:cf:fa:4c: 25:46:38:1d:33:03:cf:ba:2a:39:04:7f:5a:3a:d1: f4:9f:6d:88:0f:9d:76:c8:f1:a9:65:a4:24:41:0e: ea:30:00:3a:36:57:30:18:ea:1f:e5:09:bc:ac:8a: 22:44:85:08:04:8d:90:c9:72:78:7c:6e:70:4c:60: db:6e:17:c4:34:cf:61:09:9b:9b:a7:c3:6c:34:62: 10:02:cd:57:e5:47:ac:5f:fc:3a:15:06:a9:88:ca: d4:74:20:72:81:06:e0:ef:0e:fc:8d:da:50:f3:ae: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:61:24:13:8B:37:9E:1E:4E:E9:A8:EA:47:4D:76:81:A6:C4:DE:6B X509v3 Authority Key Identifier: keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0f:cd:7a:e9:b5:aa:3b:e5:6c:1d:14:38:04:69:22:8f:38: e4:ff:cf:3c:cd:29:85:d5:52:70:0b:c2:9c:52:f5:98:f9:fb: 45:ca:2f:15:e6:d5:07:76:78:4b:80:a8:ad:e7:69:8d:a0:f2: 32:8f:ff:39:4c:31:4e:8f:a2:48:05:e8:09:9b:76:1d:be:fe: b2:36:2f:3b:b2:c1:74:c2:7c:fc:a4:5c:e4:fc:d8:90:68:eb: d6:8b:5b:99:9e:f4:c8:af:8f:d5:d7:77:36:5f:b5:d1:c8:ee: 5e:fd:d0:77:9a:aa:55:23:51:bb:a9:99:e4:e0:65:08:b2:b8: 9d:83:5b:b0:6b:86:95:33:a2:89:a5:49:05:42:3f:99:15:2c: 11:f3:81:1a:68:ea:54:37:f8:93:33:b0:bc:28:61:5f:2f:87: ef:8d:0c:ac:22:d9:59:cb:f0:b9:86:bc:07:c2:44:4e:87:43: ed:08:96:16:24:55:07:dc:e7:be:5f:f7:1b:c1:68:f7:27:96: ce:5b:dc:9e:f7:16:f8:9c:4a:3c:da:81:10:75:81:3c:87:0a: 77:32:70:03:22:3c:67:d3:df:36:05:4a:cf:bb:94:22:ca:7a: ed:44:1a:00:84:26:71:37:66:40:07:e7:59:4f:61:c0:a1:71: 61:d5:43:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCQUQxMTAvBgNVBAUTKDgxRkZGMjE1MDA1REExQUZBQzVFMjRBQkJDQzAzQ0E3 MEY2NjRCNTYwHhcNMjUwNjEyMjIyNzUyWhcNMjUwNjE5MjIyNzUyWjAYMRYwFAYD VQQDEw02ODRiNTQ2OC0wMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJcM4AxUKz3+eBLSZDKbVba6sjNb+bvaSWPHjkOXB6JwHliTbpZpzucRFjij X5pOjS8vsJf4EL7zRtuabM1GVKVXO86Aj8LboZkLWutJATCcqnnreOjgB3svdZPz of0+zMsD5BB19OUjzoHXeg5RRGgMJXiclRPZA/fLrTiKCrE9ZwiDQYqRx08/K1Bv Y4kD7uzP+kwlRjgdMwPPuio5BH9aOtH0n22ID512yPGpZaQkQQ7qMAA6NlcwGOof 5Qm8rIoiRIUIBI2QyXJ4fG5wTGDbbhfENM9hCZubp8NsNGIQAs1X5UesX/w6FQap iMrUdCBygQbg7w78jdpQ866/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRhJBOL N54eTumo6kdNdoGmxN5rMB8GA1UdIwQYMBaAFIH/8hUAXaGvrF4kq7zAPKcPZktW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUJBRC81MEQ5MUU2NkEz NDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9hLXNYaVNydk1BOHB3OW1T MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmX3lGUUJkb2Etc1hpU3J2TUE4cHc5bVMxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUJBRC81MEQ5MUU2NkEzNDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9h LXNYaVNydk1BOHB3OW1TMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuD8166bWqO+VsHRQ4BGkijzjk/888zSmF1VJwC8KcUvWY+ftFyi8V 5tUHdnhLgKit52mNoPIyj/85TDFOj6JIBegJm3Ydvv6yNi87ssF0wnz8pFzk/NiQ aOvWi1uZnvTIr4/V13c2X7XRyO5e/dB3mqpVI1G7qZnk4GUIsridg1uwa4aVM6KJ pUkFQj+ZFSwR84EaaOpUN/iTM7C8KGFfL4fvjQysItlZy/C5hrwHwkROh0PtCJYW JFUH3Oe+X/cbwWj3J5bOW9ye9xb4nEo82oEQdYE8hwp3MnADIjxn0982BUrPu5Qi ynrtRBoAhCZxN2ZAB+dZT2HAoXFh1UNU -----END CERTIFICATE-----Generated at Sat Jun 14 19:13:08 2025 by rpki-client