$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: tH7hXYzP/Da5dho1YfvqUNPPGYsR7nRr6UVq5Fmew3g= Subject key identifier: AA:36:57:C2:FD:AF:94:9B:53:8A:E2:D0:01:15:86:CA:02:AB:DC:2B Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 018C Signing time: Sat 23 Aug 2025 03:44:10 +0000 Manifest this update: Sat 23 Aug 2025 03:44:10 +0000 Manifest next update: Sat 30 Aug 2025 03:44:10 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: cqlsPBLsDkp+60O1Y22Y5B2sT+AjjxNs5hlmWpbgRQI=) 2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: mj1/gGJTxf89h4qoy3LQ2MkBeHSgOkUv4tA5AfZK7Do=) 3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: tUVxJzysiR6t8MLO9ai96JsdVfMvMqOUKe7eGXkeEqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Aug 23 03:44:10 2025 GMT Not After : Aug 30 03:44:10 2025 GMT Subject: CN=68a9390a-9d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:32:cb:0e:f7:c7:bd:17:94:fc:cb:9f:5f: ae:a6:80:24:4f:6b:06:d7:5e:f0:e2:4e:71:9b:86: df:df:6c:57:27:65:32:2e:dd:1e:3f:16:c9:0e:e0: 66:4d:4a:1d:88:f2:19:35:33:55:1e:9a:a4:c2:2b: 0d:77:ca:50:33:a7:b6:93:34:e1:e7:a3:b3:9f:7c: 26:e7:f5:92:d6:bc:d3:88:24:ce:04:77:5a:93:bc: d9:0f:66:c5:78:92:df:3a:c2:34:e6:a3:08:00:0b: f6:98:b1:1d:8f:26:3e:43:b1:91:07:95:3c:cb:7c: a4:2b:42:27:ec:4a:e5:74:71:06:6b:ba:e2:8b:2c: 1f:08:46:da:f6:f8:a8:bb:70:b6:78:0d:71:60:5e: 78:81:e3:a4:19:f2:9a:77:5d:cd:2d:e2:5e:46:67: 46:65:1b:ff:45:e3:0b:d0:69:31:88:ab:4d:24:0e: e5:25:3d:1d:41:5b:f8:31:02:0a:f2:79:1b:7e:4a: 2f:f7:53:b7:6a:1d:95:b6:4b:17:71:0a:68:84:c2: e5:26:0c:12:f2:a4:79:29:3d:ea:18:54:89:00:e4: a4:b4:2a:43:ea:3e:a7:ec:38:e9:d2:16:64:85:d9: 81:fa:28:c6:89:35:13:51:da:4d:2b:36:c3:67:e5: 91:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:57:C2:FD:AF:94:9B:53:8A:E2:D0:01:15:86:CA:02:AB:DC:2B X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:73:64:b0:94:26:25:57:9d:ac:a7:30:73:ba:c6:d1:49:c6: 27:72:09:cf:de:e7:bd:66:b5:5a:50:db:f8:ce:6b:41:9a:98: 8c:3f:d3:59:80:dd:cf:71:c4:4f:1a:53:93:b2:08:0a:2d:1e: e9:f9:45:94:f0:05:db:c8:85:98:9c:21:3f:3d:d2:f7:1f:e5: 72:e6:c2:f2:f0:41:61:8f:f9:98:cc:9f:eb:67:95:d6:5a:41: 5e:3a:e5:b7:a6:75:b7:7d:f8:af:21:84:a4:e9:7f:62:a4:6b: 11:0d:f7:28:c3:0c:b0:b9:9a:49:29:c7:cf:1f:46:9a:ec:36: 35:7e:ae:c6:b5:ea:6c:dd:50:69:50:c5:e0:fc:41:7e:35:26: f7:1e:02:c3:22:d1:59:46:f0:40:25:bf:05:cc:b6:5e:2e:43: 8b:92:db:f5:68:61:2c:00:64:40:a1:94:48:3a:ad:5b:f6:66: 5e:5e:80:95:46:0c:3e:e7:75:95:71:5c:cf:a2:13:1c:5e:d8: e4:3c:5d:4b:32:19:29:a9:9e:4e:25:b6:34:28:d0:84:c7:c7: 6b:b3:e9:3f:5d:bc:23:be:dd:9b:1b:37:b6:fc:80:4f:c6:e6: da:1b:74:e7:78:cf:a1:56:7d:23:ab:87:23:1f:08:2b:f2:0f: c2:e7:7c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjUwODIzMDM0NDEwWhcNMjUwODMwMDM0NDEwWjAYMRYwFAYD VQQDEw02OGE5MzkwYS05ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2kyyw73x70XlPzLn1+upoAkT2sG117w4k5xm4bf32xXJ2UyLt0ePxbJDuBm TUodiPIZNTNVHpqkwisNd8pQM6e2kzTh56Ozn3wm5/WS1rzTiCTOBHdak7zZD2bF eJLfOsI05qMIAAv2mLEdjyY+Q7GRB5U8y3ykK0In7ErldHEGa7riiywfCEba9vio u3C2eA1xYF54geOkGfKad13NLeJeRmdGZRv/ReML0GkxiKtNJA7lJT0dQVv4MQIK 8nkbfkov91O3ah2VtksXcQpohMLlJgwS8qR5KT3qGFSJAOSktCpD6j6n7Djp0hZk hdmB+ijGiTUTUdpNKzbDZ+WR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo2V8L9 r5SbU4ri0AEVhsoCq9wrMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjc2SwlCYlV52spzBzusbRScYncgnP3ue9ZrVaUNv4zmtBmpiMP9NZ gN3PccRPGlOTsggKLR7p+UWU8AXbyIWYnCE/PdL3H+Vy5sLy8EFhj/mYzJ/rZ5XW WkFeOuW3pnW3ffivIYSk6X9ipGsRDfcowwywuZpJKcfPH0aa7DY1fq7Gteps3VBp UMXg/EF+NSb3HgLDItFZRvBAJb8FzLZeLkOLktv1aGEsAGRAoZRIOq1b9mZeXoCV Rgw+53WVcVzPohMcXtjkPF1LMhkpqZ5OJbY0KNCEx8drs+k/Xbwjvt2bGze2/IBP xubaG3TneM+hVn0jq4cjHwgr8g/C53yl -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:07 2025 by rpki-client