$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: 9O4EgRvtaGIT2nNwxNDgP/6dmm51+aMbpuo0ZQz8xdo= Subject key identifier: 7E:E3:D8:A4:D2:EE:93:57:36:A1:89:A5:26:C3:79:3B:31:A3:4D:5C Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: E1 Signing time: Sat 23 Aug 2025 05:36:42 +0000 Manifest this update: Sat 23 Aug 2025 05:36:41 +0000 Manifest next update: Sat 30 Aug 2025 05:36:41 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: +pwaIIi/48adBLCowtkRls1zAn12rvIaYwn99z3x0Mk=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Aug 23 05:36:41 2025 GMT Not After : Aug 30 05:36:41 2025 GMT Subject: CN=68a95369-8e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:f1:d0:26:03:8f:e9:2e:60:dc:51:91:8d: 80:63:c0:02:66:59:52:1f:ae:16:e9:05:30:fb:7d: 04:7c:27:69:2e:ae:2b:42:f2:a5:9a:0d:3b:69:df: 4c:7c:20:68:bd:26:6e:6a:80:b0:8b:25:29:85:e5: d6:b1:c5:4f:92:e0:aa:26:65:dc:a8:c9:9e:68:56: 38:1a:c4:08:15:c0:37:72:8d:08:d2:e6:4f:3e:cc: a9:31:8d:b7:de:7d:16:65:59:0b:2f:5f:f5:35:bb: 49:39:4e:88:16:66:85:9b:10:c6:76:37:e4:69:39: d1:f6:b9:ea:82:8b:e2:e0:f2:99:60:55:28:3d:8e: b2:da:7f:dd:3e:9a:67:99:a8:0e:96:a7:07:2e:35: 89:26:d8:65:8e:1d:7c:dc:f8:ee:3a:e0:8a:0d:03: 6d:de:8e:a8:8a:a7:40:8a:7d:71:10:35:12:38:05: c4:a7:9b:41:f2:13:2c:3d:f0:f0:b4:d9:2b:f8:4d: ab:4c:3e:f4:04:54:f8:73:9b:f3:9c:7a:d7:ff:f3: 4a:e0:a5:39:70:44:cd:02:3f:5b:00:c3:96:84:26: 80:2c:72:3f:d2:de:39:5b:97:ff:e5:9e:33:22:c9: de:5c:be:8e:1c:2a:58:90:46:5d:73:29:2a:2b:80: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:D8:A4:D2:EE:93:57:36:A1:89:A5:26:C3:79:3B:31:A3:4D:5C X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:29:59:0a:3a:ee:53:23:a2:90:3f:c2:a1:de:86:13:ce:d7: 64:f4:c2:a7:73:d3:8b:e8:a8:4d:c2:1f:b6:34:aa:9c:38:b1: e3:23:86:8a:31:d7:50:09:bb:9e:1a:12:36:77:7f:3a:56:0b: 15:fa:61:0b:9e:3e:80:ed:87:da:1c:38:f9:0a:f9:3f:48:ad: 04:1c:2b:9a:9a:6b:37:42:b6:39:f4:f1:f8:4a:27:7e:a7:f9: 57:6a:f7:df:40:e5:a8:f5:a7:c1:91:8f:00:c0:e6:42:81:88: e8:ff:ad:4f:64:3d:c8:90:69:60:a5:3d:80:2b:7d:a4:4b:4b: ee:c0:d0:97:47:94:0e:63:4e:08:1a:a6:86:90:83:c8:ea:23: 37:20:1f:f6:3b:79:74:a6:dd:10:ba:c1:be:9b:00:15:97:ca: 83:24:25:72:58:3c:65:42:f3:05:a7:8a:16:f7:b0:6e:b6:07: f8:06:19:f0:fe:45:75:d2:26:f7:9d:f4:50:2d:2b:6e:c0:54: 80:76:c0:fb:11:5e:19:35:fb:76:f1:8c:f0:4b:e6:c8:6e:ce: 7c:f9:4e:2b:4e:00:4f:1d:5b:2c:b9:c2:a2:e3:d8:72:e2:86: bb:94:c1:93:bd:bb:2c:22:11:f8:34:59:22:a2:51:05:a5:9d: 3c:27:63:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUwODIzMDUzNjQxWhcNMjUwODMwMDUzNjQxWjAYMRYwFAYD VQQDEw02OGE5NTM2OS04ZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqvx0CYDj+kuYNxRkY2AY8ACZllSH64W6QUw+30EfCdpLq4rQvKlmg07ad9M fCBovSZuaoCwiyUpheXWscVPkuCqJmXcqMmeaFY4GsQIFcA3co0I0uZPPsypMY23 3n0WZVkLL1/1NbtJOU6IFmaFmxDGdjfkaTnR9rnqgovi4PKZYFUoPY6y2n/dPppn magOlqcHLjWJJthljh183PjuOuCKDQNt3o6oiqdAin1xEDUSOAXEp5tB8hMsPfDw tNkr+E2rTD70BFT4c5vznHrX//NK4KU5cETNAj9bAMOWhCaALHI/0t45W5f/5Z4z IsneXL6OHCpYkEZdcykqK4DiVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7j2KTS 7pNXNqGJpSbDeTsxo01cMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzKVkKOu5TI6KQP8Kh3oYTztdk9MKnc9OL6KhNwh+2NKqcOLHjI4aK MddQCbueGhI2d386VgsV+mELnj6A7YfaHDj5Cvk/SK0EHCuamms3QrY59PH4Sid+ p/lXavffQOWo9afBkY8AwOZCgYjo/61PZD3IkGlgpT2AK32kS0vuwNCXR5QOY04I GqaGkIPI6iM3IB/2O3l0pt0QusG+mwAVl8qDJCVyWDxlQvMFp4oW97Butgf4Bhnw /kV10ib3nfRQLStuwFSAdsD7EV4ZNft28YzwS+bIbs58+U4rTgBPHVssucKi49hy 4oa7lMGTvbssIhH4NFkiolEFpZ08J2Nz -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:13 2025 by rpki-client