$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: hmPJ/gCZpQKlixwagHpmFBqb63/83n/F6e8cxPHY3Wg= Subject key identifier: 50:D5:6B:1C:C6:18:E4:91:76:0F:66:B5:02:C3:A9:D0:81:57:9B:A0 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 03B7 Signing time: Sat 23 Aug 2025 00:58:30 +0000 Manifest this update: Sat 23 Aug 2025 00:58:30 +0000 Manifest next update: Sat 30 Aug 2025 00:58:30 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: zh/aDgCkCZkQmXhby5U9dTubcjUos3sIPRdg3b20OM8=) 2: 888790B6CD3A11EF87D85012C4F9AE02.roa (hash: AvFxWnXdXVRW4gSsV2SM184h5qE1FtXhjp3kh4Swn5U=) 3: 38E23C8AACAE11EEAD36566EC4F9AE02.roa (hash: WV0++0ZN/bagS69tHu4GzxXJWra/B4BQBtuEVcU79xQ=) 4: 39B38CD6ACAE11EEAD36566EC4F9AE02.roa (hash: CVz2Xf9+JNVQc+OnMj39alF6Xn/77a8odRw6ivgbb84=) 5: 2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (hash: PSuOk5hKLAcVmpB6whliDPWrfFKAhRcAnnfVLoCffRg=) 6: 8CA353C4EF5E11EF9E61950EC4F9AE02.roa (hash: 5Blz9K5XE6h6oYg/gQUJxXMDOjmAua+CLgWpZB5MaIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Aug 23 00:58:30 2025 GMT Not After : Aug 30 00:58:30 2025 GMT Subject: CN=68a91236-99f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:19:e1:44:b1:af:a8:43:2a:33:4b:a1:4a: 18:ef:1e:a5:49:c7:04:99:e7:e5:6c:d6:a6:dd:60: 39:1e:53:3a:f4:5c:80:9f:a5:d5:9a:ea:6e:64:db: 92:12:45:f8:bf:1b:c9:ef:34:8e:f1:f7:06:2c:34: 3f:26:24:57:db:0d:0f:ae:3b:ea:3e:2e:b4:f9:6c: 93:93:28:8b:33:c6:d7:d2:db:a7:f5:08:97:e4:b5: 61:49:81:16:e1:d5:c1:1a:41:ef:a4:c1:23:96:aa: 44:ff:8a:57:36:5e:af:31:9c:2f:0b:c2:ee:04:74: 3d:ce:d3:fb:0d:5e:87:51:16:92:64:52:d9:7b:88: 55:9a:fb:6b:25:ca:a4:e6:72:d8:3c:8f:07:67:31: 63:8e:85:b7:76:57:27:ad:8b:60:88:e6:60:6a:4f: 45:b7:e2:44:06:c4:65:00:ec:e6:43:64:f1:cf:d7: b4:19:31:d3:16:c8:9e:72:49:8c:8a:23:54:38:9e: b9:24:54:a8:f9:d4:73:e5:9a:b5:b4:e6:03:19:2b: ef:e8:7f:ac:eb:ed:92:42:a7:3a:0a:c4:46:92:15: 13:fb:68:f8:49:7c:28:c5:13:44:d5:4d:23:d1:1b: 20:2c:8e:10:65:af:6c:49:fb:23:8b:bf:67:76:1d: 3c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:6B:1C:C6:18:E4:91:76:0F:66:B5:02:C3:A9:D0:81:57:9B:A0 X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:db:30:0f:1b:52:d5:10:a3:a9:cb:bd:70:22:25:66:24:ff: a9:13:44:e8:5b:d7:f9:0f:43:eb:9c:45:62:30:7b:dc:8f:0f: 86:39:f9:b8:a5:df:35:45:96:56:68:09:a7:e5:4a:ad:3d:4c: 46:b7:96:16:65:97:2f:1a:db:a5:96:fc:cd:83:ab:e6:64:5f: fe:62:b5:e8:3e:e3:84:c6:96:59:41:44:22:59:28:f9:28:2c: 88:ba:ef:e3:4c:57:02:93:bc:d0:56:44:fe:58:16:76:ac:75: a9:f0:ef:8d:81:22:af:77:40:de:ae:b4:7c:9a:df:be:12:a0: 0a:5e:91:06:5c:d5:ae:ff:67:9b:c4:bd:02:70:f9:bc:3c:df: 76:3d:f8:21:2c:b6:67:d4:5f:ba:bd:ee:ed:f0:9f:e0:05:24: 83:e4:af:f2:a7:a6:59:08:29:8f:fe:50:31:1f:41:d7:27:1a: 99:11:74:c7:3b:da:05:25:0c:cf:15:ac:c5:0c:25:be:29:47: 40:d1:ce:60:f0:fa:d2:97:2b:36:c2:bf:18:59:be:d4:3b:3f: b9:b9:10:f8:3f:89:7c:0d:a3:27:7f:10:ed:e2:78:0a:99:bc: 28:b7:24:d4:da:68:ad:98:ce:65:28:92:43:99:3b:c7:bc:d9: f8:f8:cd:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUwODIzMDA1ODMwWhcNMjUwODMwMDA1ODMwWjAYMRYwFAYD VQQDEw02OGE5MTIzNi05OWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NMZ4USxr6hDKjNLoUoY7x6lSccEmeflbNam3WA5HlM69FyAn6XVmupuZNuS EkX4vxvJ7zSO8fcGLDQ/JiRX2w0PrjvqPi60+WyTkyiLM8bX0tun9QiX5LVhSYEW 4dXBGkHvpMEjlqpE/4pXNl6vMZwvC8LuBHQ9ztP7DV6HURaSZFLZe4hVmvtrJcqk 5nLYPI8HZzFjjoW3dlcnrYtgiOZgak9Ft+JEBsRlAOzmQ2Txz9e0GTHTFsieckmM iiNUOJ65JFSo+dRz5Zq1tOYDGSvv6H+s6+2SQqc6CsRGkhUT+2j4SXwoxRNE1U0j 0RsgLI4QZa9sSfsji79ndh08jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDVaxzG GOSRdg9mtQLDqdCBV5ugMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB72zAPG1LVEKOpy71wIiVmJP+pE0ToW9f5D0PrnEViMHvcjw+GOfm4 pd81RZZWaAmn5UqtPUxGt5YWZZcvGtullvzNg6vmZF/+YrXoPuOExpZZQUQiWSj5 KCyIuu/jTFcCk7zQVkT+WBZ2rHWp8O+NgSKvd0DerrR8mt++EqAKXpEGXNWu/2eb xL0CcPm8PN92PfghLLZn1F+6ve7t8J/gBSSD5K/yp6ZZCCmP/lAxH0HXJxqZEXTH O9oFJQzPFazFDCW+KUdA0c5g8PrSlys2wr8YWb7UOz+5uRD4P4l8DaMnfxDt4ngK mbwotyTU2mitmM5lKJJDmTvHvNn4+M1b -----END CERTIFICATE-----Generated at Sun Aug 24 04:57:32 2025 by rpki-client