$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: H0sswWEYQzfhA1/S0URbB2XtoMT+pr8wdB9j3oQ/rHk= Subject key identifier: 16:1D:3B:95:87:1F:19:D9:60:A4:62:F0:6D:A7:9E:7E:DB:7B:23:7E Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 0D Signing time: Fri 13 Jun 2025 06:58:01 +0000 Manifest this update: Fri 13 Jun 2025 06:58:01 +0000 Manifest next update: Fri 20 Jun 2025 06:58:01 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: fH2c83uHPQ0suf7ioAmAdmAQGYAupeJf4HjoNn7IYWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Jun 13 06:58:01 2025 GMT Not After : Jun 20 06:58:01 2025 GMT Subject: CN=684bcbf9-a45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:2b:24:4c:47:67:70:61:9d:08:25:9e:56: 12:d9:0f:eb:23:31:dd:21:b3:2b:bd:67:ec:b7:f5: 0f:e0:ba:14:94:52:a1:45:ba:4b:7b:84:ef:db:8a: 92:5b:90:5a:6e:a9:26:bd:0c:4a:88:58:2f:54:ee: 8d:7a:11:16:46:e7:6e:c8:8b:a0:fc:8f:a2:0e:05: c1:b5:5d:17:df:6b:99:bb:7c:b4:5c:ed:50:ba:2f: 39:c9:bc:a4:90:e7:6e:6a:ce:4d:2d:14:6a:38:a9: b8:61:6e:cf:69:69:51:d8:f8:7a:b1:f2:34:ff:19: 4b:26:6b:99:ce:60:9d:6d:bf:9e:55:41:f7:9e:d1: 5b:93:93:18:2c:6a:3d:d6:8f:a2:6d:60:d5:47:68: 2b:a1:e3:db:c2:71:63:51:a0:1d:1d:c2:0d:78:0b: 8d:92:67:34:28:9c:4e:93:6a:4b:2a:77:eb:28:bd: 8e:e1:f5:29:af:e4:89:e7:71:ac:17:68:46:1c:9c: 9c:b4:c2:0f:92:de:53:6a:bb:a4:54:96:2c:f1:bf: fd:c8:75:94:b8:d4:cb:a6:cf:c9:07:23:40:12:7c: 61:79:a1:51:49:a3:83:48:23:ca:b8:b3:96:4b:c7: bf:ae:a7:12:1a:37:52:43:59:ec:c9:17:78:cc:a3: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1D:3B:95:87:1F:19:D9:60:A4:62:F0:6D:A7:9E:7E:DB:7B:23:7E X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:32:f5:93:73:f6:de:d3:e8:a3:a5:88:92:7d:a3:74:ac:16: c0:42:7a:4e:83:fb:de:60:27:fb:2b:a3:71:21:19:81:eb:0d: 36:b4:3e:6c:fe:6c:60:66:0a:f5:82:4c:18:3e:1b:9e:48:c4: cc:42:37:40:ea:2a:0c:46:e1:26:45:e0:ab:38:42:92:20:23: 26:cd:a3:25:ee:f8:0e:5e:3a:6f:ea:9e:47:1e:26:93:a0:c7: c8:04:31:31:2a:23:c1:42:c2:02:f3:3a:00:4c:8c:0f:2d:59: dd:ba:d7:b4:0f:80:5b:4c:32:40:68:2e:84:fb:4b:2e:e5:b6: e5:07:32:1a:8d:ba:f7:da:52:11:8b:a2:66:b5:ba:20:84:4c: df:b6:d8:f6:60:07:91:4b:b2:69:43:44:32:2c:e6:c7:7c:60: df:97:fe:c6:6f:ec:78:5e:b9:55:37:eb:0e:66:38:d8:5e:e8: 12:70:2e:76:36:37:6c:1c:07:1a:de:10:e8:fe:6b:19:75:f7: 0b:da:42:6e:1c:d9:f0:e0:c0:fa:57:65:3d:f8:b5:8e:85:08: 7a:81:d0:8b:df:af:aa:83:a7:1f:a3:69:24:c0:6f:08:1a:d6: d6:b5:81:68:f6:8d:4f:f1:c8:16:c3:dd:35:2d:1c:d0:5d:34: c5:63:9c:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTA2MTMwNjU4MDFaFw0yNTA2MjAwNjU4MDFaMBgxFjAUBgNV BAMTDTY4NGJjYmY5LWE0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgACskTEdncGGdCCWeVhLZD+sjMd0hsyu9Z+y39Q/guhSUUqFFukt7hO/bipJb kFpuqSa9DEqIWC9U7o16ERZG527Ii6D8j6IOBcG1XRffa5m7fLRc7VC6LznJvKSQ 525qzk0tFGo4qbhhbs9paVHY+Hqx8jT/GUsma5nOYJ1tv55VQfee0VuTkxgsaj3W j6JtYNVHaCuh49vCcWNRoB0dwg14C42SZzQonE6Taksqd+sovY7h9Smv5InncawX aEYcnJy0wg+S3lNqu6RUlizxv/3IdZS41Mumz8kHI0ASfGF5oVFJo4NII8q4s5ZL x7+upxIaN1JDWezJF3jMo9JzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFh07lYcf GdlgpGLwbaeeftt7I34wHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKAy9ZNz9t7T6KOliJJ9o3SsFsBCek6D+95gJ/sro3EhGYHrDTa0Pmz+ bGBmCvWCTBg+G55IxMxCN0DqKgxG4SZF4Ks4QpIgIybNoyXu+A5eOm/qnkceJpOg x8gEMTEqI8FCwgLzOgBMjA8tWd2617QPgFtMMkBoLoT7Sy7ltuUHMhqNuvfaUhGL oma1uiCETN+22PZgB5FLsmlDRDIs5sd8YN+X/sZv7HheuVU36w5mONhe6BJwLnY2 N2wcBxreEOj+axl19wvaQm4c2fDgwPpXZT34tY6FCHqB0Ivfr6qDpx+jaSTAbwga 1ta1gWj2jU/xyBbD3TUtHNBdNMVjnAc= -----END CERTIFICATE-----Generated at Sat Jun 14 18:43:14 2025 by rpki-client