$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: Lp9T4i8aE1zFWzWs1A9fOv3lPNeJc/KXOAhc2IC5StI= Subject key identifier: 4D:F9:E4:BB:8A:67:6D:17:62:FC:B4:75:8B:32:F0:B5:8B:B0:51:4E Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0BFE Signing time: Fri 22 Aug 2025 18:54:33 +0000 Manifest this update: Fri 22 Aug 2025 18:54:33 +0000 Manifest next update: Fri 29 Aug 2025 18:54:32 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: OAXNbcxoNAmDyfdR/sxccCgtcvgQDSRRjuRP5uGHnz8=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Aug 22 18:54:33 2025 GMT Not After : Aug 29 18:54:32 2025 GMT Subject: CN=68a8bce9-764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:67:fd:5a:76:e9:20:48:a1:e9:a6:c4:65: 52:c4:36:92:12:f9:b4:cb:c0:55:9d:03:63:df:40: 19:42:ea:dd:15:c8:a5:cc:98:bb:74:3c:a7:d3:9a: 26:d5:36:cb:b5:80:1b:23:d8:c3:3c:41:0e:4a:ce: 00:0b:97:d9:c1:ca:9f:82:22:e0:38:7e:44:28:5e: 71:67:5a:93:4f:7e:7e:e0:e6:31:57:e3:a2:66:3f: 1e:74:20:2f:4f:92:e1:79:49:eb:34:dd:b0:9f:dd: 00:6c:42:dc:d2:fd:38:81:18:a4:ff:f7:62:f8:8a: 01:dd:a4:77:c4:c9:57:ca:9f:1e:0e:84:10:51:a6: e8:be:2b:d0:61:c7:96:c4:52:bc:4c:e5:54:c9:82: da:2a:03:88:b7:90:95:89:e7:7a:ea:3d:6b:54:d0: 55:b5:34:5c:c5:d9:4e:a4:89:ae:59:87:c2:9b:d2: d3:99:63:f9:70:71:04:c7:ef:45:3d:29:1d:5d:e6: 05:ab:e8:d6:4f:24:a7:25:21:fa:4c:8a:26:4e:5c: 31:6f:6b:ff:15:c0:a0:fb:7a:be:7d:dd:dd:85:ef: 97:2a:1d:06:ab:d7:45:f0:78:e0:fa:fc:ab:bc:9c: 4f:ad:cf:69:74:cb:eb:43:0e:11:e6:99:c1:e4:07: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F9:E4:BB:8A:67:6D:17:62:FC:B4:75:8B:32:F0:B5:8B:B0:51:4E X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:70:0e:f5:16:8c:4a:a8:a1:0c:03:af:8b:df:13:ea:3d:aa: bf:a6:95:9d:8c:d9:e5:03:26:be:fb:da:80:2c:66:3f:0e:38: db:35:40:46:f6:0e:af:e3:a8:bc:3c:da:50:59:6b:d4:c8:49: 77:33:19:a1:30:ce:a8:c4:23:fa:bc:87:9f:12:44:bf:17:41: ce:62:05:6b:04:05:10:dc:60:39:a5:35:c7:bb:21:24:ed:fa: f2:17:2a:8f:bc:2c:2e:fd:09:53:3a:c2:dc:ba:ce:83:6f:22: 84:3b:22:36:f7:4d:19:45:7e:3a:c0:45:46:e6:bc:72:36:5b: 20:6b:95:d2:c6:4c:ba:eb:bd:54:43:50:ef:0a:9a:13:f8:52: c4:7e:eb:e3:8b:49:f0:d7:1e:3c:28:20:2a:23:27:d2:39:77: 23:dc:b4:c5:4f:c0:9a:55:e9:3f:f3:7d:5b:21:5b:03:69:aa: b2:e3:4e:83:2a:ce:4e:4b:69:e4:d0:4c:e3:f4:f2:d5:96:9e: 77:14:a6:24:99:eb:15:60:62:64:9c:98:86:23:00:07:cf:f7: b3:21:57:c2:bb:97:06:de:1d:a4:dc:ef:3e:a6:ad:86:b3:80: a8:0d:d3:dc:a4:6f:fc:a2:bf:4a:c5:c5:d9:11:a5:88:10:81: 77:7e:f9:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwODIyMTg1NDMzWhcNMjUwODI5MTg1NDMyWjAYMRYwFAYD VQQDEw02OGE4YmNlOS03NjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhRn/Vp26SBIoemmxGVSxDaSEvm0y8BVnQNj30AZQurdFcilzJi7dDyn05om 1TbLtYAbI9jDPEEOSs4AC5fZwcqfgiLgOH5EKF5xZ1qTT35+4OYxV+OiZj8edCAv T5LheUnrNN2wn90AbELc0v04gRik//di+IoB3aR3xMlXyp8eDoQQUabovivQYceW xFK8TOVUyYLaKgOIt5CVied66j1rVNBVtTRcxdlOpImuWYfCm9LTmWP5cHEEx+9F PSkdXeYFq+jWTySnJSH6TIomTlwxb2v/FcCg+3q+fd3dhe+XKh0Gq9dF8Hjg+vyr vJxPrc9pdMvrQw4R5pnB5AdqCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE355LuK Z20XYvy0dYsy8LWLsFFOMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLcA71FoxKqKEMA6+L3xPqPaq/ppWdjNnlAya++9qALGY/DjjbNUBG 9g6v46i8PNpQWWvUyEl3MxmhMM6oxCP6vIefEkS/F0HOYgVrBAUQ3GA5pTXHuyEk 7fryFyqPvCwu/QlTOsLcus6DbyKEOyI2900ZRX46wEVG5rxyNlsga5XSxky6671U Q1DvCpoT+FLEfuvji0nw1x48KCAqIyfSOXcj3LTFT8CaVek/831bIVsDaaqy406D Ks5OS2nk0Ezj9PLVlp53FKYkmesVYGJknJiGIwAHz/ezIVfCu5cG3h2k3O8+pq2G s4CoDdPcpG/8or9KxcXZEaWIEIF3fvks -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:03 2025 by rpki-client