$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: NA9QAWSK+Js7cwRJZDaoB4mMA5xyLx/ztOxk9C4s3ys= Subject key identifier: D7:6A:20:DA:29:F3:AE:78:AD:71:C0:C1:56:B6:AB:01:DD:4B:85:5A Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: 9F Signing time: Sat 23 Aug 2025 06:35:01 +0000 Manifest this update: Sat 23 Aug 2025 06:35:01 +0000 Manifest next update: Sat 30 Aug 2025 06:35:01 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: 1cEoaDTxXicsSkJzzgX12+FAzoFFicdN5doA5XFyvRY=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: fbK2ihQUPhJ5r2ba5rzkEzE0phvIKmf+DwHm9D+Afg4=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: NNRqGSmWdoe7pDPxn2mpdNUa0PJKi1Ydbw5oFhxloG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Aug 23 06:35:01 2025 GMT Not After : Aug 30 06:35:01 2025 GMT Subject: CN=68a96115-a8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:45:83:b9:e2:16:45:b9:bb:eb:ba:8f:f8:c4: 45:bd:e9:e5:f5:4b:5b:3d:9c:68:27:f8:ff:21:e0: e2:c0:2b:1b:88:15:a7:67:22:b4:10:4e:82:c2:c4: 61:12:7a:98:f1:68:58:8f:b1:00:ec:a8:a5:3e:a3: e7:21:f5:95:64:9b:ea:48:69:9b:20:0c:a3:e5:90: b3:cd:9a:5c:95:08:b2:54:59:b4:d6:b3:41:fe:f1: 45:3b:63:0f:9b:b6:cc:e4:03:a7:bb:c6:1b:ff:65: 77:8d:c9:59:67:d3:47:f9:a1:48:8e:23:bd:1e:6d: a6:04:74:62:4f:f3:69:c1:fd:33:15:ec:e6:e9:a1: 3a:2d:55:30:ac:3c:68:d8:3c:2a:79:1c:3d:71:f2: 99:80:fb:72:a5:b6:64:76:1e:bb:bb:40:ad:8e:17: c4:b9:fd:eb:89:3d:5f:9d:78:23:83:1d:3f:87:8b: 2f:b6:59:8b:25:c9:75:08:ca:9b:65:4d:a9:ca:1b: ad:ba:d8:f7:41:74:47:84:9b:82:96:13:3f:d0:47: 40:41:79:92:59:d1:6b:a4:66:4a:13:d7:dc:4c:a4: 8b:fc:b8:76:d6:a9:1e:8a:7a:e1:e7:e5:6e:48:55: fa:bc:91:14:56:65:27:f9:c2:cc:d8:ac:d4:f1:69: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6A:20:DA:29:F3:AE:78:AD:71:C0:C1:56:B6:AB:01:DD:4B:85:5A X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:92:92:82:ad:3e:47:d4:74:1d:17:c2:ce:93:83:b8:d5:fb: d2:66:8f:51:e5:0e:d5:e3:73:b1:e9:49:de:bd:6d:0a:bd:b4: 4a:2e:69:ac:bf:54:90:6b:0b:9f:0c:f5:87:61:fd:25:40:78: e5:78:73:ea:33:36:58:58:e3:79:e8:83:65:c7:47:e4:ff:85: c2:03:69:35:98:ea:1e:e2:dc:22:c1:22:6b:43:2a:cb:cb:f8: b0:10:51:22:4e:0b:dd:3f:9a:9b:17:70:b7:2a:6e:18:f1:f5: 98:98:1c:61:37:e8:f1:f8:4c:00:62:0a:d7:6e:52:89:20:8b: 3a:b2:9a:a7:48:aa:78:b3:14:19:28:f2:86:46:af:ec:2b:26: 2d:73:b1:6c:c8:91:ab:3e:4d:cf:2b:42:25:fd:ee:94:1c:2f: fd:fe:a0:dc:36:b4:3e:78:8c:89:35:14:64:0a:81:c1:c7:c4: 1b:f2:f6:bd:02:e8:d5:4b:1c:26:be:2b:27:25:15:29:a0:06: 4c:99:1c:60:5f:90:64:15:22:f5:b5:78:9a:a9:a6:a8:a7:9c: 40:94:e3:01:94:e7:9a:8d:5e:eb:e1:15:4d:3f:ef:34:d9:ba: ff:6f:b5:7e:3a:67:b6:85:0b:be:cc:67:3f:4d:e9:b1:72:d5: 8a:e7:0b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx MTZEQTVERjIwHhcNMjUwODIzMDYzNTAxWhcNMjUwODMwMDYzNTAxWjAYMRYwFAYD VQQDEw02OGE5NjExNS1hOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UWDueIWRbm767qP+MRFvenl9UtbPZxoJ/j/IeDiwCsbiBWnZyK0EE6CwsRh EnqY8WhYj7EA7KilPqPnIfWVZJvqSGmbIAyj5ZCzzZpclQiyVFm01rNB/vFFO2MP m7bM5AOnu8Yb/2V3jclZZ9NH+aFIjiO9Hm2mBHRiT/Npwf0zFezm6aE6LVUwrDxo 2DwqeRw9cfKZgPtypbZkdh67u0CtjhfEuf3riT1fnXgjgx0/h4svtlmLJcl1CMqb ZU2pyhututj3QXRHhJuClhM/0EdAQXmSWdFrpGZKE9fcTKSL/Lh21qkeinrh5+Vu SFX6vJEUVmUn+cLM2KzU8Wk/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdqINop 8654rXHAwVa2qwHdS4VaMB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzhGMC8wQTc3MUEzNjkzQUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9Ldzdv WlNEZkdQX1ZjcFVSYmFYZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4kpKCrT5H1HQdF8LOk4O41fvSZo9R5Q7V43Ox6UnevW0KvbRKLmms v1SQawufDPWHYf0lQHjleHPqMzZYWON56INlx0fk/4XCA2k1mOoe4twiwSJrQyrL y/iwEFEiTgvdP5qbF3C3Km4Y8fWYmBxhN+jx+EwAYgrXblKJIIs6spqnSKp4sxQZ KPKGRq/sKyYtc7FsyJGrPk3PK0Il/e6UHC/9/qDcNrQ+eIyJNRRkCoHBx8Qb8va9 AujVSxwmvisnJRUpoAZMmRxgX5BkFSL1tXiaqaaop5xAlOMBlOeajV7r4RVNP+80 2br/b7V+Ome2hQu+zGc/TemxctWK5wvA -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:14 2025 by rpki-client