$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: wRd/x1QYk6JbvfbBBw1KrBb3TJrlBXRt+NgDuem1lzQ= Subject key identifier: B8:D4:BB:83:FB:B3:04:66:98:7B:12:7B:8A:F3:F4:F1:BD:4B:69:9C Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 0676 Signing time: Fri 22 Aug 2025 22:36:30 +0000 Manifest this update: Fri 22 Aug 2025 22:36:29 +0000 Manifest next update: Fri 29 Aug 2025 22:36:29 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: G1CNfmCwg3ZgRivaC7JCZVf5Q8TABZGlo6Y9dOGhJBw=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: Aug 22 22:36:29 2025 GMT Not After : Aug 29 22:36:29 2025 GMT Subject: CN=68a8f0ee-b48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:20:69:06:ff:f4:92:fa:c6:7d:8d:bc:4d:b5: b9:db:cc:16:1d:f5:01:02:35:31:9b:d5:db:78:fd: ed:69:69:c8:ae:d3:bc:a0:3f:f4:9c:30:1d:3a:e7: 5f:78:cb:1e:11:68:71:92:e7:1c:a0:72:c4:73:11: bd:e0:b9:55:6e:be:cd:dc:18:2d:ff:5a:e5:f0:8d: db:a0:e0:10:0e:f9:83:c5:b5:db:f5:ba:50:e8:2c: 19:1e:16:88:34:4a:3b:95:ea:ad:1c:a4:0f:a6:f8: 38:b3:75:93:20:2e:6d:37:6f:3b:a1:87:41:13:ac: 62:8d:4e:da:3d:17:4a:c8:94:fb:9b:e4:06:af:af: 62:ea:d5:b4:28:32:6a:97:4e:ea:bb:27:c7:de:35: 02:6b:ad:7e:da:a0:b3:73:51:a5:a0:33:46:2a:5c: be:05:da:50:15:e8:b5:24:63:54:5f:97:35:d2:fc: e5:72:a2:52:7d:8e:8c:dd:1b:f5:7c:73:fa:af:69: 73:72:83:e3:db:48:98:98:7a:58:6f:b0:3e:4f:80: f5:06:fe:06:4d:ae:32:15:b8:bd:fe:03:d2:aa:46: 2d:ae:3c:fb:69:59:b8:70:1c:bc:e6:58:60:c4:c4: b7:fb:e5:25:bd:bd:64:86:b7:c7:3c:d1:16:96:ea: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D4:BB:83:FB:B3:04:66:98:7B:12:7B:8A:F3:F4:F1:BD:4B:69:9C X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:26:93:81:db:7c:28:ac:ad:85:c6:e4:55:82:5e:37:8a:ee: 26:43:a5:8d:2d:ec:61:2b:09:c3:18:88:74:56:f6:be:f0:28: f2:39:b0:e2:33:d7:59:fb:cc:16:9e:fa:5b:c2:93:6a:e9:b5: d4:07:e5:4d:e5:a0:4a:ef:b4:a5:6d:5f:a6:ac:e6:04:c9:a8: 7b:5a:b8:62:1f:f7:ea:28:4c:af:b6:d2:60:42:a9:38:e7:45: 28:2b:06:5a:bf:9a:2b:6c:26:8d:2d:86:30:40:39:b6:4e:2b: c6:34:3c:38:e8:92:f2:35:2a:b3:16:79:c8:26:3b:7b:50:a8: 16:18:fb:5e:48:e0:b9:33:c1:37:7c:e5:e2:81:18:e8:83:fc: 26:60:fe:7e:79:01:90:12:f4:14:22:a1:e9:85:17:2f:63:b4: 9c:e9:22:0e:bd:e0:f8:97:80:60:bd:23:91:9d:9f:9f:4f:54: c6:6f:b6:91:35:7f:16:f2:3c:fd:91:0e:16:ef:11:f2:55:8d: 51:57:1c:b4:ab:74:f2:f0:a0:3e:67:ad:1b:e6:65:28:28:ca: 60:81:73:58:e6:82:59:12:cb:1d:d1:43:b0:2d:33:a7:21:4a: 35:cf:7a:56:d3:ac:d9:f5:2a:45:93:e5:b8:a0:b3:b5:9d:77: 4a:2e:0d:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjUwODIyMjIzNjI5WhcNMjUwODI5MjIzNjI5WjAYMRYwFAYD VQQDEw02OGE4ZjBlZS1iNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SBpBv/0kvrGfY28TbW528wWHfUBAjUxm9XbeP3taWnIrtO8oD/0nDAdOudf eMseEWhxkuccoHLEcxG94LlVbr7N3Bgt/1rl8I3boOAQDvmDxbXb9bpQ6CwZHhaI NEo7leqtHKQPpvg4s3WTIC5tN287oYdBE6xijU7aPRdKyJT7m+QGr69i6tW0KDJq l07quyfH3jUCa61+2qCzc1GloDNGKly+BdpQFei1JGNUX5c10vzlcqJSfY6M3Rv1 fHP6r2lzcoPj20iYmHpYb7A+T4D1Bv4GTa4yFbi9/gPSqkYtrjz7aVm4cBy85lhg xMS3++Ulvb1khrfHPNEWlupeMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjUu4P7 swRmmHsSe4rz9PG9S2mcMB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhJpOB23worK2FxuRVgl43iu4mQ6WNLexhKwnDGIh0Vva+8CjyObDi M9dZ+8wWnvpbwpNq6bXUB+VN5aBK77SlbV+mrOYEyah7WrhiH/fqKEyvttJgQqk4 50UoKwZav5orbCaNLYYwQDm2TivGNDw46JLyNSqzFnnIJjt7UKgWGPteSOC5M8E3 fOXigRjog/wmYP5+eQGQEvQUIqHphRcvY7Sc6SIOveD4l4BgvSORnZ+fT1TGb7aR NX8W8jz9kQ4W7xHyVY1RVxy0q3Ty8KA+Z60b5mUoKMpggXNY5oJZEssd0UOwLTOn IUo1z3pW06zZ9SpFk+W4oLO1nXdKLg2V -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:51 2025 by rpki-client