$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: 2mzY0kNGgr+9J9dCMZNgwTaQTnux2Z52TW7+QyCyqhw= Subject key identifier: 95:95:CA:22:02:22:BF:9A:42:A9:49:D7:BD:60:82:48:D1:D2:74:E2 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 033F Signing time: Sat 23 Aug 2025 01:19:31 +0000 Manifest this update: Sat 23 Aug 2025 01:19:31 +0000 Manifest next update: Sat 30 Aug 2025 01:19:31 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: ynX9kfS7b8di7TS70hQdTL6lt8tKG0i2TZyWH+JxtWU=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Aug 23 01:19:31 2025 GMT Not After : Aug 30 01:19:31 2025 GMT Subject: CN=68a91723-dd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:26:ba:8e:05:15:c0:ef:c1:be:a3:c6:4b: bd:7e:0d:1f:59:bb:a0:23:61:14:a5:7d:de:64:ad: b5:72:8f:39:f4:34:95:a9:85:f5:15:18:16:e3:f1: b3:b6:69:36:a8:29:bf:37:76:55:2a:3e:c5:a6:f3: 14:8e:31:85:86:33:0c:30:46:1a:ba:77:7b:e9:97: b3:a1:e7:11:14:9e:fd:7b:0d:ac:35:9e:39:84:67: c9:35:96:a4:70:22:3d:18:cf:00:e9:5d:f1:e0:56: b4:31:a8:dc:12:09:7b:6f:00:63:7c:fd:e4:72:01: 35:a6:eb:6d:45:1c:a7:76:b9:48:52:f6:40:9f:8c: c5:77:ac:8a:52:fa:c4:f1:43:7e:f8:98:d6:ae:e5: 57:86:80:6f:f3:da:b6:a9:02:1b:74:45:c5:f3:ad: a8:2e:57:58:9a:d4:10:47:dc:a6:ac:fa:3b:15:33: cf:95:6b:4d:0d:f8:55:53:a0:59:57:36:4c:7d:b2: 5a:45:65:e6:3a:27:57:5d:ca:39:6a:83:2a:01:f5: 4c:7a:5c:11:b8:46:56:00:30:4e:32:24:8b:be:6e: bf:ae:7b:b7:77:42:47:e3:a4:c0:f2:83:37:e5:20: 6a:52:da:72:f0:7a:60:d9:88:ac:6c:f4:23:6c:9a: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:95:CA:22:02:22:BF:9A:42:A9:49:D7:BD:60:82:48:D1:D2:74:E2 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:89:49:79:e9:aa:44:cf:8e:21:8f:dd:b0:db:39:f2:31:19: 52:ab:30:cf:1d:ac:0a:2b:4a:48:5b:e0:c4:8f:ea:9c:b9:f5: 55:cf:ee:5b:36:5a:36:ff:2d:db:d8:6d:66:56:d8:fd:8c:d5: 33:04:16:32:10:5a:b7:40:e7:48:41:db:db:3d:80:42:04:77: d6:1f:7b:0a:c4:19:ed:34:85:2a:a7:28:43:7b:14:99:f6:5b: f4:29:a4:1a:49:3e:fd:42:12:54:cb:7c:59:87:34:b1:b8:a9: e2:5c:2d:98:3e:a2:c7:ca:c6:9f:31:c9:1f:83:05:09:40:82: 20:3e:fb:f3:a1:1d:c2:2b:aa:3c:7e:2b:13:0c:f4:43:85:aa: 37:77:e5:fe:a3:2a:4c:d4:d6:1d:13:3d:9f:03:24:05:4c:95: 3a:d4:dc:6c:ba:d9:05:1e:a0:15:d4:16:5c:65:c1:46:a2:bf: ed:2a:2c:65:e2:d2:55:bc:c2:5c:7a:83:08:48:59:ed:93:50: 9d:32:e1:97:0f:6d:33:0f:55:0b:e0:79:20:35:bb:ac:2d:bb: c0:50:a2:14:db:e8:44:21:9f:be:0e:05:2c:eb:6e:1f:b3:9f: 87:31:e7:38:76:dd:a1:25:98:f8:42:6f:46:71:c0:4d:78:c3: 13:6d:16:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwODIzMDExOTMxWhcNMjUwODMwMDExOTMxWjAYMRYwFAYD VQQDEw02OGE5MTcyMy1kZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmsmuo4FFcDvwb6jxku9fg0fWbugI2EUpX3eZK21co859DSVqYX1FRgW4/Gz tmk2qCm/N3ZVKj7FpvMUjjGFhjMMMEYaund76ZezoecRFJ79ew2sNZ45hGfJNZak cCI9GM8A6V3x4Fa0MajcEgl7bwBjfP3kcgE1puttRRyndrlIUvZAn4zFd6yKUvrE 8UN++JjWruVXhoBv89q2qQIbdEXF862oLldYmtQQR9ymrPo7FTPPlWtNDfhVU6BZ VzZMfbJaRWXmOidXXco5aoMqAfVMelwRuEZWADBOMiSLvm6/rnu3d0JH46TA8oM3 5SBqUtpy8Hpg2YisbPQjbJpe6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWVyiIC Ir+aQqlJ171ggkjR0nTiMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLiUl56apEz44hj92w2znyMRlSqzDPHawKK0pIW+DEj+qcufVVz+5b Nlo2/y3b2G1mVtj9jNUzBBYyEFq3QOdIQdvbPYBCBHfWH3sKxBntNIUqpyhDexSZ 9lv0KaQaST79QhJUy3xZhzSxuKniXC2YPqLHysafMckfgwUJQIIgPvvzoR3CK6o8 fisTDPRDhao3d+X+oypM1NYdEz2fAyQFTJU61NxsutkFHqAV1BZcZcFGor/tKixl 4tJVvMJceoMISFntk1CdMuGXD20zD1UL4HkgNbusLbvAUKIU2+hEIZ++DgUs624f s5+HMec4dt2hJZj4Qm9GccBNeMMTbRZY -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:26 2025 by rpki-client