$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json) Hash identifier: qjofly8PnTlpnVvti038Uiyjw+OgHe8n1Lq2PZowrNg= Subject key identifier: 8D:50:14:92:9D:2B:C0:8A:7E:2E:0D:95:93:93:4D:3F:1D:1B:5C:5F Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft Manifest number: 046D Signing time: Sat 23 Aug 2025 00:23:51 +0000 Manifest this update: Sat 23 Aug 2025 00:23:51 +0000 Manifest next update: Sat 30 Aug 2025 00:23:51 +0000 Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: VhLQaMbfoPuI7fQKic4OPAF9o4khBtQKU+ntYRvPd5U=) 2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag=) 3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: q2J6Vm5zrUF4ahQrDqnBO1G7RZdDw9Ce2kW75/uOQB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Validity Not Before: Aug 23 00:23:51 2025 GMT Not After : Aug 30 00:23:51 2025 GMT Subject: CN=68a90a17-e0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:81:48:fb:6c:d3:4f:47:98:d5:5b:96:4e: cc:fb:ea:dd:2b:d2:69:31:e4:c7:16:a2:60:e4:06: bd:35:d0:97:95:ff:d5:88:25:b0:70:0f:46:55:8c: 86:64:2f:a5:86:90:76:89:ee:84:1d:a2:3c:dd:66: e8:46:97:e1:b8:2a:04:e7:df:04:8f:08:38:20:de: 8e:05:66:7c:1d:bf:f8:7b:7a:97:af:75:f4:5b:c9: bc:6d:d4:2f:55:b2:9a:f2:9c:73:62:29:03:40:0a: 59:83:58:a7:48:f3:80:3a:83:10:2d:a6:79:be:3e: 16:56:ab:0f:3b:6e:eb:1d:7f:83:be:32:11:d1:07: f0:7d:e0:ad:67:87:1a:68:37:71:07:44:fc:fd:da: 72:f8:9a:a2:ff:80:54:d6:d2:c3:7d:8b:d1:fb:b1: f1:29:8d:c3:c2:b0:e2:7e:0e:e2:06:ce:0d:8b:28: aa:34:05:2f:b8:bc:8b:5a:82:6c:f9:62:f8:68:a8: eb:52:c8:c9:c3:ce:c5:fc:e6:85:7a:83:65:e2:57: c9:e4:64:80:f0:33:c2:6e:14:f0:6c:1d:ff:e9:37: e6:da:80:9c:fb:65:43:e8:38:73:de:b0:16:76:da: 1f:f9:f9:fe:36:75:6e:8b:0f:bd:64:31:4b:da:5a: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:14:92:9D:2B:C0:8A:7E:2E:0D:95:93:93:4D:3F:1D:1B:5C:5F X509v3 Authority Key Identifier: keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a0:a5:5c:47:3a:69:d9:19:4b:c9:9a:19:09:72:44:30:d0: 9c:b5:6e:ef:fb:a0:c7:9c:af:72:44:89:2c:fa:2e:fb:38:21: 87:10:fe:89:f5:92:95:80:0a:3e:c7:73:3a:34:e1:39:e0:f6: f3:34:33:3d:ac:02:c2:0a:b3:28:d1:d0:a6:55:4f:57:a1:8d: 17:5a:d7:59:be:01:a3:96:77:c8:8c:29:41:6f:5f:6c:97:a8: a6:9a:38:61:55:de:71:09:06:cc:f2:47:af:8c:07:cd:08:b7: a3:38:40:56:ea:91:e0:7e:f9:3e:4c:25:6a:a0:df:c4:69:d5: 9b:49:f7:62:21:15:d9:e6:fb:95:8c:55:61:1d:e4:8b:ff:47: ff:b9:16:66:48:6c:2d:21:0c:8f:1e:7b:06:c5:3e:40:8a:3e: 47:b1:b8:e7:5a:64:25:9f:bf:ba:ab:24:f7:ec:f4:29:7d:12: a0:01:18:f7:e6:20:80:c9:e7:fe:75:f2:dc:7e:9a:7c:ce:fb: cd:02:1e:ad:e0:10:6b:c7:56:42:3d:ab:30:af:fb:2c:33:54: a8:c2:c3:d7:5f:08:54:bd:eb:66:f1:98:c1:77:a3:74:6a:12: 89:42:4f:64:c7:90:e1:8d:79:f4:a3:cb:b9:91:19:a8:2e:a2: 22:0f:9a:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC ODg4NUUwNzcwHhcNMjUwODIzMDAyMzUxWhcNMjUwODMwMDAyMzUxWjAYMRYwFAYD VQQDEw02OGE5MGExNy1lMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD6BSPts009HmNVblk7M++rdK9JpMeTHFqJg5Aa9NdCXlf/ViCWwcA9GVYyG ZC+lhpB2ie6EHaI83WboRpfhuCoE598Ejwg4IN6OBWZ8Hb/4e3qXr3X0W8m8bdQv VbKa8pxzYikDQApZg1inSPOAOoMQLaZ5vj4WVqsPO27rHX+DvjIR0QfwfeCtZ4ca aDdxB0T8/dpy+Jqi/4BU1tLDfYvR+7HxKY3DwrDifg7iBs4NiyiqNAUvuLyLWoJs +WL4aKjrUsjJw87F/OaFeoNl4lfJ5GSA8DPCbhTwbB3/6Tfm2oCc+2VD6Dhz3rAW dtof+fn+NnVuiw+9ZDFL2lrN/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1QFJKd K8CKfi4NlZOTTT8dG1xfMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6 MzNPYi0zMUwwdmU0aUY0SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQoKVcRzpp2RlLyZoZCXJEMNCctW7v+6DHnK9yRIks+i77OCGHEP6J 9ZKVgAo+x3M6NOE54PbzNDM9rALCCrMo0dCmVU9XoY0XWtdZvgGjlnfIjClBb19s l6immjhhVd5xCQbM8kevjAfNCLejOEBW6pHgfvk+TCVqoN/EadWbSfdiIRXZ5vuV jFVhHeSL/0f/uRZmSGwtIQyPHnsGxT5Aij5HsbjnWmQln7+6qyT37PQpfRKgARj3 5iCAyef+dfLcfpp8zvvNAh6t4BBrx1ZCPaswr/ssM1SowsPXXwhUvetm8ZjBd6N0 ahKJQk9kx5DhjXn0o8u5kRmoLqIiD5pc -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:46 2025 by rpki-client