$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: kKh4Xux2bbMEdg2QQZvPW/FfP9cUbN16ECMX0UZRCS0= Subject key identifier: 19:66:07:FC:23:BB:D4:EF:05:49:13:66:9F:93:A1:C9:13:8A:C5:B7 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 104F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 1046 Signing time: Fri 22 Aug 2025 17:32:04 +0000 Manifest this update: Fri 22 Aug 2025 17:32:03 +0000 Manifest next update: Fri 29 Aug 2025 17:32:03 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: AVjPsvtf+mgteB6FAr9yMmJXFop75netA7CIzzwMM0c=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: bskjGki25S2tjkA4uEDOBCllOjX3cMsximD4ACjwrOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4175 (0x104f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Aug 22 17:32:03 2025 GMT Not After : Aug 29 17:32:03 2025 GMT Subject: CN=68a8a993-026a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:30:fe:9b:7e:07:73:b8:2f:89:81:b6:97: 57:8e:47:2e:bf:d0:ea:e8:be:40:b3:6b:67:94:2b: 9b:9b:ae:f0:a2:97:86:9a:7f:c3:64:6a:23:be:44: ec:4a:7e:fa:47:2a:ff:e1:b8:27:8d:28:fb:68:00: 0f:a7:6a:78:0d:a4:27:42:41:26:09:bb:ef:d1:8b: 1b:9a:94:6d:ac:43:47:f2:9c:8e:62:f7:7f:dc:04: 82:a4:ed:48:67:64:29:32:d2:38:cb:35:d1:34:5a: 2e:d1:49:5a:e7:6b:e0:25:09:31:ac:09:91:39:12: 93:5d:a1:64:37:20:36:31:33:d7:a4:c5:97:c5:d5: 66:a6:f1:4f:6e:56:6e:62:b4:a0:6a:f4:52:56:52: fa:ce:f0:3f:a7:56:b1:5c:01:69:d4:47:3b:e6:a1: 7f:7c:45:da:b6:5d:5c:25:fc:7e:7a:0f:62:54:a0: 24:db:66:b7:4c:ec:b5:c2:05:cc:f4:ca:a2:95:17: 46:00:73:cb:2c:c8:29:51:9a:17:09:f4:0a:92:86: 09:ed:37:4e:d8:90:20:4e:b2:11:cd:0c:46:95:f2: 9d:97:0f:6b:32:fd:90:a4:d5:bc:bc:3e:47:53:8f: 6e:40:7e:bd:20:9b:33:bb:ed:78:70:f4:e0:0f:ef: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:66:07:FC:23:BB:D4:EF:05:49:13:66:9F:93:A1:C9:13:8A:C5:B7 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:af:96:de:59:25:fe:79:89:50:80:6c:8c:2c:06:98:96:54: 79:99:22:4a:ce:8e:e5:16:9f:22:a1:31:d1:89:6a:7a:b6:5b: 8e:ae:6f:95:03:8e:b9:27:e5:c8:fb:b5:4b:7f:09:bb:93:fa: f4:e7:d4:81:92:07:fd:48:33:d6:49:24:7e:d1:e8:1f:1c:73: 24:98:6e:88:8c:e5:44:56:3a:d4:ab:66:8c:ed:e6:aa:ff:b6: cf:04:b1:28:dd:a0:12:37:ba:ec:4d:4a:c6:66:1b:1f:2d:17: 6f:20:c8:b5:39:78:4c:86:ba:4b:f7:1c:8f:4a:81:89:9a:ec: c7:26:ea:e6:4b:5c:d3:b8:d4:e5:ac:bb:2f:62:40:7f:7f:6b: b6:05:69:12:db:60:1c:ee:62:9d:79:4a:4b:94:31:2c:77:db: a2:6d:fd:8b:fc:ca:4f:cc:dc:df:3b:0d:87:e2:98:8d:83:67: bb:6c:e3:6b:21:b9:af:b7:a8:3c:42:f8:35:37:97:7e:a2:93: f7:6c:af:2d:0d:63:39:8e:32:08:26:3d:26:f6:7d:09:df:53: b4:6f:a4:2b:ba:17:ca:70:da:ba:33:2a:37:ca:c3:0f:7c:78: c7:3a:9d:73:b1:5c:de:1d:d0:61:a1:f3:3f:69:3f:28:1c:f8: 7e:0c:4f:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUwODIyMTczMjAzWhcNMjUwODI5MTczMjAzWjAYMRYwFAYD VQQDEw02OGE4YTk5My0wMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPQw/pt+B3O4L4mBtpdXjkcuv9Dq6L5As2tnlCubm67wopeGmn/DZGojvkTs Sn76Ryr/4bgnjSj7aAAPp2p4DaQnQkEmCbvv0YsbmpRtrENH8pyOYvd/3ASCpO1I Z2QpMtI4yzXRNFou0Ula52vgJQkxrAmRORKTXaFkNyA2MTPXpMWXxdVmpvFPblZu YrSgavRSVlL6zvA/p1axXAFp1Ec75qF/fEXatl1cJfx+eg9iVKAk22a3TOy1wgXM 9MqilRdGAHPLLMgpUZoXCfQKkoYJ7TdO2JAgTrIRzQxGlfKdlw9rMv2QpNW8vD5H U49uQH69IJszu+14cPTgD+9pwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlmB/wj u9TvBUkTZp+TockTisW3MB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMr5beWSX+eYlQgGyMLAaYllR5mSJKzo7lFp8ioTHRiWp6tluOrm+V A465J+XI+7VLfwm7k/r059SBkgf9SDPWSSR+0egfHHMkmG6IjOVEVjrUq2aM7eaq /7bPBLEo3aASN7rsTUrGZhsfLRdvIMi1OXhMhrpL9xyPSoGJmuzHJurmS1zTuNTl rLsvYkB/f2u2BWkS22Ac7mKdeUpLlDEsd9uibf2L/MpPzNzfOw2H4piNg2e7bONr Ibmvt6g8Qvg1N5d+opP3bK8tDWM5jjIIJj0m9n0J31O0b6QruhfKcNq6Myo3ysMP fHjHOp1zsVzeHdBhofM/aT8oHPh+DE9f -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:10 2025 by rpki-client