$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: wyiXRFbpJsdnfUCH9pmAdwqg/wjsoch4Fcqv3dG8IDQ= Subject key identifier: 06:F6:A7:B4:2F:26:16:AD:A1:AF:F1:11:B5:2C:56:E7:DA:BB:11:D5 Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 0163 Signing time: Sat 23 Aug 2025 04:06:07 +0000 Manifest this update: Sat 23 Aug 2025 04:06:06 +0000 Manifest next update: Sat 30 Aug 2025 04:06:06 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: RIMlYU5hvrs4dlH/fLW2hYWCBLb2TynJINPHZ5paT8A=) 2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: 2x3Crg/+rrdrA9YF1ARn2mLp11zGKRatq2w29xREbE8=) 3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: wGDmOTIVSrDQKDKCEK7gF/ecDvEsfL3U/Gc/OshH53U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814, serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: Aug 23 04:06:06 2025 GMT Not After : Aug 30 04:06:06 2025 GMT Subject: CN=68a93e2e-5b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:ec:20:63:ef:c3:46:dc:cd:0a:49:fa:fb: c2:9e:58:e1:c0:e7:27:e9:c6:fa:c7:da:77:3c:47: 87:49:85:33:e0:f3:ca:63:b5:b7:0d:1a:9a:ff:95: 91:63:2d:36:dd:68:d9:29:5f:e4:1d:79:96:a6:0a: 1d:c6:ac:7b:5d:91:3b:de:f8:b0:b0:c8:52:30:30: 27:d1:24:29:8d:31:5d:4a:85:69:77:bb:b5:92:36: 0d:f3:9c:85:2e:95:8b:1e:45:4e:87:11:d5:fe:1e: 43:82:15:27:98:eb:52:13:46:04:d9:88:eb:cd:f3: bc:26:82:a3:12:6d:93:e1:5c:a9:64:46:ee:dc:75: 56:ed:6d:a7:3b:15:c6:40:e8:df:30:b2:cb:67:a5: 54:e4:aa:ca:95:ef:c7:22:14:31:e8:10:e8:5e:89: 75:9a:68:87:4b:37:07:f8:c5:a4:3a:53:30:6f:49: f9:eb:e1:8d:52:ee:27:e8:44:92:2a:2d:09:d2:1d: a7:0d:50:80:9c:65:85:3d:40:58:cb:28:f7:7b:77: 0c:b5:09:17:c8:bb:8a:15:24:f2:8f:1a:a3:3a:ff: b9:f7:6a:2b:f1:58:fd:53:f5:fb:58:7d:32:b1:86: 41:8f:a6:f0:1b:4c:bc:11:46:d3:a3:ad:77:ad:75: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F6:A7:B4:2F:26:16:AD:A1:AF:F1:11:B5:2C:56:E7:DA:BB:11:D5 X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b6:77:8f:7f:ec:47:25:8d:4f:01:83:87:d2:2e:6e:90:9c: 8e:01:ab:ff:5a:28:e0:c3:ed:ac:c6:c8:9a:70:74:02:c5:12: 40:71:8a:90:e1:49:a7:e0:e9:5f:31:c5:5f:55:e2:21:01:6b: 1e:6f:20:ce:c4:77:79:cb:ea:98:dc:4b:b4:15:c7:4c:37:e4: 1b:a9:70:ae:c1:8a:18:65:42:7c:74:7d:71:e8:c5:c3:a4:b2: d8:0f:d1:dd:21:83:9d:6b:6c:ad:01:79:af:93:31:1b:64:01: 99:34:19:37:2f:07:08:fd:1f:16:b0:6d:2c:30:1e:55:c8:ab: 84:be:28:f5:37:fc:31:7b:a7:c0:fc:e0:1c:86:5b:b6:83:ae: 3b:cf:47:d8:03:59:06:8b:10:a5:4b:fd:1a:4d:63:5c:ba:e1: 25:43:7c:56:1a:c5:eb:0f:37:20:36:d6:19:12:29:80:60:ae: f6:b2:65:28:7c:04:65:9d:59:2e:69:6f:f1:17:af:5d:97:f7: e5:77:86:7e:88:1e:7e:7e:26:ab:99:99:b3:75:2b:b3:fa:41: 5f:ee:96:6f:8f:69:a2:66:4f:47:f9:dd:44:61:55:c8:7d:fe: c7:86:37:5b:f1:95:96:d6:58:57:bf:55:5f:44:bc:07:ab:28: 46:8d:93:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0 MzIxQkIwMzUwHhcNMjUwODIzMDQwNjA2WhcNMjUwODMwMDQwNjA2WjAYMRYwFAYD VQQDEw02OGE5M2UyZS01YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvufsIGPvw0bczQpJ+vvCnljhwOcn6cb6x9p3PEeHSYUz4PPKY7W3DRqa/5WR Yy023WjZKV/kHXmWpgodxqx7XZE73viwsMhSMDAn0SQpjTFdSoVpd7u1kjYN85yF LpWLHkVOhxHV/h5DghUnmOtSE0YE2YjrzfO8JoKjEm2T4VypZEbu3HVW7W2nOxXG QOjfMLLLZ6VU5KrKle/HIhQx6BDoXol1mmiHSzcH+MWkOlMwb0n56+GNUu4n6ESS Ki0J0h2nDVCAnGWFPUBYyyj3e3cMtQkXyLuKFSTyjxqjOv+592or8Vj9U/X7WH0y sYZBj6bwG0y8EUbTo613rXX1bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb2p7Qv Jhatoa/xEbUsVufauxHVMB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa Tmc2ak83S0R5aHRESWJzRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCltnePf+xHJY1PAYOH0i5ukJyOAav/Wijgw+2sxsiacHQCxRJAcYqQ 4Umn4OlfMcVfVeIhAWsebyDOxHd5y+qY3Eu0FcdMN+QbqXCuwYoYZUJ8dH1x6MXD pLLYD9HdIYOda2ytAXmvkzEbZAGZNBk3LwcI/R8WsG0sMB5VyKuEvij1N/wxe6fA /OAchlu2g647z0fYA1kGixClS/0aTWNcuuElQ3xWGsXrDzcgNtYZEimAYK72smUo fARlnVkuaW/xF69dl/fld4Z+iB5+fiarmZmzdSuz+kFf7pZvj2miZk9H+d1EYVXI ff7Hhjdb8ZWW1lhXv1VfRLwHqyhGjZMV -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:49 2025 by rpki-client