$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: HUmr+DYnSXQKl0CIH3m0Ol7/cwyAN3G3GEzSS/B2cxc= Subject key identifier: E7:00:F5:B9:33:5E:01:10:37:E9:D9:E1:F2:6E:11:94:69:EC:CD:22 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 03BA Signing time: Fri 13 Jun 2025 00:14:17 +0000 Manifest this update: Fri 13 Jun 2025 00:14:17 +0000 Manifest next update: Fri 20 Jun 2025 00:14:17 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: E3Vh6Ie9d8hP3cWYL/zZQN2GyqLIDjP+N+Gz3k9iF0I=) 2: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: oAqMSF81/AVYaU8nGd+cBMsrnw20XyD/T/zdIoEB4NE=) 3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: uVo2rPhsS7W1KbzxX340wlAGRoyErXUypsSK5B5R8HQ=) 4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: S2zfaKcticTwAxwJXdMxgXbdbp4SN51y6QSWO83OIuc=) 5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: 7DU3GXxB2biRDfFfxqVKJQEvwzXZf1dP2MF5wRULxe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Jun 13 00:14:17 2025 GMT Not After : Jun 20 00:14:17 2025 GMT Subject: CN=684b6d59-273b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:88:55:ce:b1:b9:bf:dc:f9:70:22:a1:0b:5c: 92:1a:52:47:69:e8:d2:ee:62:7f:b4:60:d2:91:4c: 0b:46:ba:01:be:0e:71:d3:fb:f5:2e:2f:7d:64:cc: 76:3e:e8:33:9f:33:10:af:2e:3c:5d:99:9c:89:00: 38:c0:45:28:dd:72:56:9e:cf:d6:ba:b1:db:a1:07: b4:95:1b:de:fb:6a:79:0d:98:f4:8f:1c:e0:f2:fb: ad:bc:d9:df:45:10:21:03:70:5e:6c:93:f6:39:9a: e4:12:ea:09:a5:5c:11:06:61:8f:72:7f:92:e7:3d: af:c3:66:bf:f1:1a:d9:fc:e5:f5:25:d9:48:7e:9c: d5:99:8c:a2:2c:b6:bf:a7:25:b5:fe:fc:3c:b4:fa: 83:ec:ef:86:91:f5:cd:28:a0:57:b9:0d:a3:49:b1: 9e:aa:2f:5d:d4:fa:31:40:47:25:de:a1:4e:8b:10: 20:9f:90:80:d2:2a:44:60:d3:c2:a3:49:0e:48:85: 20:45:7b:9b:cd:5e:90:5a:a0:e4:f5:3c:f3:2d:82: 16:b2:46:dc:8a:9c:6f:46:52:44:1a:83:8e:8e:5d: 57:87:bc:2e:ef:b5:e6:55:34:7c:ec:22:11:ec:a7: 04:1e:09:16:d1:e4:fd:30:d3:02:30:25:1e:5b:a2: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:00:F5:B9:33:5E:01:10:37:E9:D9:E1:F2:6E:11:94:69:EC:CD:22 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:66:a9:d1:69:ad:af:9d:00:a2:9a:5d:ec:02:88:6a:a4:ec: 0b:77:08:a3:14:73:95:71:22:b8:aa:57:30:4f:27:c2:ef:9f: be:64:ec:ce:26:db:be:0e:30:82:7c:6e:c3:85:61:c9:01:6b: a4:5c:f5:52:64:34:d8:78:8b:9a:2d:f6:0d:01:15:f6:5f:64: 2c:50:24:f4:0c:9f:e4:47:a1:66:06:92:50:b6:0b:04:ac:70: 0e:fa:ca:10:6a:e9:09:ff:26:5c:2c:8d:51:91:0b:02:61:ef: f9:a1:da:fd:af:7a:5d:51:a8:08:0a:12:fa:8a:79:1a:08:bd: d6:95:69:37:57:d2:7c:9c:49:0c:b1:bf:b1:36:23:f4:be:a5: 9d:4b:2f:4c:40:63:1e:c5:bd:14:f8:01:d2:64:e5:67:82:7b: bb:6e:c4:e7:b2:4a:e1:a6:d7:70:52:f7:29:4c:80:e8:9c:2c: c9:90:86:24:fb:8a:08:60:6d:cf:ad:70:c9:ca:08:39:f5:43: f8:2a:9c:18:e5:ec:be:9a:44:23:4a:50:a8:05:fb:0d:e1:16: 68:94:ad:88:79:1e:cd:62:c1:dc:91:ea:95:b0:3d:ae:54:65: b4:00:1a:91:12:2c:07:4a:55:c4:43:af:a8:dd:d6:42:23:da: 34:fb:e4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUwNjEzMDAxNDE3WhcNMjUwNjIwMDAxNDE3WjAYMRYwFAYD VQQDEw02ODRiNmQ1OS0yNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ohVzrG5v9z5cCKhC1ySGlJHaejS7mJ/tGDSkUwLRroBvg5x0/v1Li99ZMx2 PugznzMQry48XZmciQA4wEUo3XJWns/WurHboQe0lRve+2p5DZj0jxzg8vutvNnf RRAhA3BebJP2OZrkEuoJpVwRBmGPcn+S5z2vw2a/8RrZ/OX1JdlIfpzVmYyiLLa/ pyW1/vw8tPqD7O+GkfXNKKBXuQ2jSbGeqi9d1PoxQEcl3qFOixAgn5CA0ipEYNPC o0kOSIUgRXubzV6QWqDk9TzzLYIWskbcipxvRlJEGoOOjl1Xh7wu77XmVTR87CIR 7KcEHgkW0eT9MNMCMCUeW6K9GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcA9bkz XgEQN+nZ4fJuEZRp7M0iMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQZqnRaa2vnQCiml3sAohqpOwLdwijFHOVcSK4qlcwTyfC75++ZOzO Jtu+DjCCfG7DhWHJAWukXPVSZDTYeIuaLfYNARX2X2QsUCT0DJ/kR6FmBpJQtgsE rHAO+soQaukJ/yZcLI1RkQsCYe/5odr9r3pdUagIChL6inkaCL3WlWk3V9J8nEkM sb+xNiP0vqWdSy9MQGMexb0U+AHSZOVngnu7bsTnskrhptdwUvcpTIDonCzJkIYk +4oIYG3PrXDJygg59UP4KpwY5ey+mkQjSlCoBfsN4RZolK2IeR7NYsHckeqVsD2u VGW0ABqREiwHSlXEQ6+o3dZCI9o0++SU -----END CERTIFICATE-----Generated at Sat Jun 14 19:20:48 2025 by rpki-client