$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: c99QVd6zui6PpNDf/lGmTEoBNmsv0ljsepn2GFc/gh0= Subject key identifier: 7B:D3:D9:F2:79:93:E0:05:21:2A:E2:6C:57:B6:D5:99:F1:EF:7B:DB Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0D34 Signing time: Fri 22 Aug 2025 18:09:15 +0000 Manifest this update: Fri 22 Aug 2025 18:09:15 +0000 Manifest next update: Fri 29 Aug 2025 18:09:15 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: pLe1rdmdUaVXAyyjcwRyw4tdNW5SZV61aMNyegy7K6A=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: VZ24W4uKwM60qRJ5vfKCX9lh+SGHmx0HfVlijTJVzIY=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: 4yWetI8VRw7mXlPSVbHYiXd6wjj+BvrR9fES4qn/WNo=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: DgvkkBXnQUs6910aIZGV/GX1Y7PZj78ZOyie/aItMGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3404 (0xd4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Aug 22 18:09:15 2025 GMT Not After : Aug 29 18:09:15 2025 GMT Subject: CN=68a8b24b-3897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:8f:6c:eb:20:72:4d:1b:b8:6c:69:c3:9e: e3:13:50:99:25:c3:33:76:35:43:5b:76:84:96:46: 8c:42:33:3c:a3:c2:e5:62:56:fc:53:e8:b8:cf:94: fd:72:7d:a6:69:d5:ef:2b:c5:5a:e4:f5:34:72:c3: 0b:d6:1a:51:bf:e4:20:98:35:7e:12:81:da:a5:5d: 32:09:d2:08:c5:b4:1c:5c:65:aa:d7:a9:5d:1e:32: 73:d7:04:1f:12:73:ab:73:06:ac:12:b8:1d:5a:0d: 4a:4a:87:ed:55:32:fc:fb:96:db:e0:d4:67:6d:67: dd:04:ea:60:00:35:50:39:22:d8:3a:61:c8:1a:e0: 9b:72:d5:f8:6a:5f:8c:95:31:f8:2c:dc:8f:f8:22: 94:88:82:cb:e3:5f:bb:8b:56:ad:38:ce:81:35:78: 39:44:d9:de:60:e7:7a:45:72:eb:e6:5b:c0:fe:37: e0:8d:f0:0e:7a:e7:47:ab:17:db:6b:ad:97:e9:04: c4:d8:74:9b:40:be:73:6d:f8:e2:42:66:a4:ec:dc: 73:37:bd:f9:5c:2f:cb:6a:e5:6e:1e:ca:b2:2b:99: ce:16:25:9f:10:36:b5:68:9c:23:00:a9:26:95:d0: 61:03:10:ac:55:c5:70:b1:d2:fa:59:b2:d0:36:65: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D3:D9:F2:79:93:E0:05:21:2A:E2:6C:57:B6:D5:99:F1:EF:7B:DB X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d8:ca:bf:a3:74:85:73:98:f4:74:ea:47:a6:53:c2:30:6a: c6:70:51:3e:cf:30:40:d3:44:cf:64:6d:0e:64:0a:3b:85:17: 06:ca:55:a8:c2:bf:e0:3e:03:63:ac:d1:e0:1c:db:61:94:cc: 6b:ec:6f:e4:db:b7:c7:28:8e:a3:52:4b:8d:f3:85:08:73:48: 5c:83:7d:40:8c:7b:ec:a0:2e:fa:4d:e7:9f:b8:a0:07:7b:b4: cc:db:51:a0:5b:4b:df:8d:97:ec:67:5a:57:89:58:ae:a5:7f: ab:34:46:54:4e:a5:e2:06:02:3a:19:32:7e:b4:b9:8e:dd:32: 19:2c:73:bb:e5:b6:bb:3a:a6:a2:f1:e6:cc:c6:ce:ef:52:2a: bf:d9:62:32:f9:f8:69:1c:a3:80:7a:63:9e:84:e9:e4:a5:c8: 2c:0d:ed:6d:e3:0f:b2:10:1e:22:d2:92:f9:6b:89:6b:f9:da: d2:7e:70:63:72:b0:2c:81:94:ff:57:c0:ae:bd:bf:9f:26:cf: e5:68:9a:32:cd:9c:8f:7b:3b:71:78:17:1b:78:f0:97:ce:5c: 9e:bc:f2:0c:ef:29:b4:08:90:6d:f3:ac:e6:32:34:26:07:ff: 6e:3a:a7:93:19:15:87:6b:5d:17:a5:15:0b:17:05:a2:c9:fb: f5:37:b1:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwODIyMTgwOTE1WhcNMjUwODI5MTgwOTE1WjAYMRYwFAYD VQQDEw02OGE4YjI0Yi0zODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwePbOsgck0buGxpw57jE1CZJcMzdjVDW3aElkaMQjM8o8LlYlb8U+i4z5T9 cn2madXvK8Va5PU0csML1hpRv+QgmDV+EoHapV0yCdIIxbQcXGWq16ldHjJz1wQf EnOrcwasErgdWg1KSoftVTL8+5bb4NRnbWfdBOpgADVQOSLYOmHIGuCbctX4al+M lTH4LNyP+CKUiILL41+7i1atOM6BNXg5RNneYOd6RXLr5lvA/jfgjfAOeudHqxfb a62X6QTE2HSbQL5zbfjiQmak7NxzN735XC/LauVuHsqyK5nOFiWfEDa1aJwjAKkm ldBhAxCsVcVwsdL6WbLQNmWguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvT2fJ5 k+AFISribFe21Znx73vbMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL2Mq/o3SFc5j0dOpHplPCMGrGcFE+zzBA00TPZG0OZAo7hRcGylWo wr/gPgNjrNHgHNthlMxr7G/k27fHKI6jUkuN84UIc0hcg31AjHvsoC76TeefuKAH e7TM21GgW0vfjZfsZ1pXiViupX+rNEZUTqXiBgI6GTJ+tLmO3TIZLHO75ba7Oqai 8ebMxs7vUiq/2WIy+fhpHKOAemOehOnkpcgsDe1t4w+yEB4i0pL5a4lr+drSfnBj crAsgZT/V8Cuvb+fJs/laJoyzZyPeztxeBcbePCXzlyevPIM7ym0CJBt86zmMjQm B/9uOqeTGRWHa10XpRULFwWiyfv1N7FB -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:13 2025 by rpki-client