$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: +Hzza2PxytPxQIsf8Tz7BSKasY6BlXbUmCM092ZF5lQ= Subject key identifier: 9B:EB:40:99:9D:01:8B:8D:C1:DF:5D:45:A6:8B:4C:96:24:DA:91:E5 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 093F Signing time: Thu 12 Jun 2025 20:00:56 +0000 Manifest this update: Thu 12 Jun 2025 20:00:55 +0000 Manifest next update: Thu 19 Jun 2025 20:00:55 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: 731hZJrxPRSbSXkehP1BcRrJSxU3ZU+W8r6YU67Faqs=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Jun 12 20:00:55 2025 GMT Not After : Jun 19 20:00:55 2025 GMT Subject: CN=684b31f8-3568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:0b:d3:3a:83:2d:70:23:4a:4d:ff:7c:1f: 7f:79:f5:d9:8b:6e:6d:8a:67:2b:49:23:fd:af:ee: 07:62:37:1c:7e:db:78:fe:11:34:e3:ef:6c:25:4e: 69:f8:aa:0f:c9:d3:8b:15:57:0b:c2:55:24:95:c3: e1:98:9a:01:63:80:2b:e0:af:78:1e:37:f5:d6:cc: a3:7e:85:80:de:a5:9f:75:2a:ce:7c:07:3d:74:cb: 39:cb:c0:39:1a:d1:d2:30:a7:6b:72:61:75:02:0b: d3:f8:17:0a:9b:1b:7d:ae:52:e0:32:dc:2d:33:67: 6e:ba:48:c3:06:4c:dc:50:d9:c8:29:ea:9c:8e:ca: fd:2c:75:5a:50:12:23:26:d2:a4:0b:5e:2a:6d:33: 59:c9:b5:d4:ee:0c:66:ac:84:f1:d7:dc:b4:56:ad: a1:c6:d2:b2:51:a2:23:71:45:1d:87:c2:23:03:df: d7:20:95:ac:65:a3:f0:5a:b6:6d:a2:4f:b3:51:84: 0e:41:ff:89:0f:d7:53:ec:ae:75:fa:7e:92:a9:aa: 2d:45:e9:bf:88:4d:40:1e:1c:60:57:0a:40:3d:24: a7:f1:b9:6d:5a:36:ae:96:bf:b8:fa:7e:93:23:89: b2:5c:02:0b:e6:ff:9a:0d:64:18:ee:96:d5:58:28: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EB:40:99:9D:01:8B:8D:C1:DF:5D:45:A6:8B:4C:96:24:DA:91:E5 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:60:3b:fe:3d:05:fb:2e:4c:fb:33:1b:51:5c:58:da:f6:aa: 64:17:c4:9c:21:2f:d9:89:0a:3d:fc:66:a9:83:32:09:ef:2c: 04:e0:12:3c:be:f7:a4:6f:2f:0f:11:23:1a:4c:26:ae:36:47: 7f:1c:7e:40:e1:8c:1d:b0:f5:71:77:74:2d:e7:58:37:68:1a: 33:b0:22:55:33:f3:c7:4a:94:48:fe:34:0e:51:4f:6f:6a:90: aa:d6:31:66:92:15:b5:61:aa:56:e1:79:65:72:64:3f:ab:0a: 00:8e:a7:65:41:1a:97:14:37:7f:bf:f3:31:17:a0:12:df:eb: b3:9d:16:0f:4f:27:cd:62:96:da:12:a3:ea:34:39:f5:fe:93: f1:f5:2b:a7:41:e5:29:24:be:3f:58:88:c6:39:12:39:10:eb: b4:34:73:cf:ed:9f:20:32:69:30:ab:c9:ad:14:10:80:31:0f: 63:04:be:f8:c6:68:64:6b:65:41:e5:26:92:60:40:f9:f5:52: 7f:48:7e:ce:da:b8:b5:b5:d8:11:cf:46:e1:4f:95:ab:68:99: cf:e2:27:6d:20:4f:f5:8b:26:6a:a8:c6:a6:4d:3a:81:5e:c7: fa:15:e0:8a:bf:1f:c7:ed:d3:eb:b0:5d:6c:3d:e8:9d:66:ee: b8:63:7c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwNjEyMjAwMDU1WhcNMjUwNjE5MjAwMDU1WjAYMRYwFAYD VQQDEw02ODRiMzFmOC0zNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+gL0zqDLXAjSk3/fB9/efXZi25timcrSSP9r+4HYjccftt4/hE04+9sJU5p +KoPydOLFVcLwlUklcPhmJoBY4Ar4K94Hjf11syjfoWA3qWfdSrOfAc9dMs5y8A5 GtHSMKdrcmF1AgvT+BcKmxt9rlLgMtwtM2duukjDBkzcUNnIKeqcjsr9LHVaUBIj JtKkC14qbTNZybXU7gxmrITx19y0Vq2hxtKyUaIjcUUdh8IjA9/XIJWsZaPwWrZt ok+zUYQOQf+JD9dT7K51+n6SqaotRem/iE1AHhxgVwpAPSSn8bltWjaulr+4+n6T I4myXAIL5v+aDWQY7pbVWCjYewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvrQJmd AYuNwd9dRaaLTJYk2pHlMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvYDv+PQX7Lkz7MxtRXFja9qpkF8ScIS/ZiQo9/GapgzIJ7ywE4BI8 vvekby8PESMaTCauNkd/HH5A4YwdsPVxd3Qt51g3aBozsCJVM/PHSpRI/jQOUU9v apCq1jFmkhW1YapW4XllcmQ/qwoAjqdlQRqXFDd/v/MxF6AS3+uznRYPTyfNYpba EqPqNDn1/pPx9SunQeUpJL4/WIjGORI5EOu0NHPP7Z8gMmkwq8mtFBCAMQ9jBL74 xmhka2VB5SaSYED59VJ/SH7O2ri1tdgRz0bhT5WraJnP4idtIE/1iyZqqMamTTqB Xsf6FeCKvx/H7dPrsF1sPeidZu64Y3xf -----END CERTIFICATE-----Generated at Sat Jun 14 19:25:43 2025 by rpki-client