$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json) Hash identifier: tybZuneE/PMwLYw4QxfIPpL/D+8fm7tvA0InnJiIQWw= Subject key identifier: 71:8F:FE:02:C8:B2:F2:D1:CE:6C:95:FF:17:E2:37:35:BB:5C:CD:97 Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft Manifest number: 3E Signing time: Sat 23 Aug 2025 07:43:30 +0000 Manifest this update: Sat 23 Aug 2025 07:43:29 +0000 Manifest next update: Sat 30 Aug 2025 07:43:29 +0000 Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: asuvFiu4NaBT7lqad8azZg21bqCMwqf8GlzMJCX8ToE=) 2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Validity Not Before: Aug 23 07:43:29 2025 GMT Not After : Aug 30 07:43:29 2025 GMT Subject: CN=68a97121-10de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:c9:d3:78:80:13:a6:e5:25:9c:f8:33:52: 97:96:ad:0f:f9:d6:48:bc:07:a0:f4:aa:68:ae:b0: 27:ca:aa:f8:3f:81:58:2e:4e:13:2f:7f:eb:ae:1b: db:73:7f:e0:26:f9:9b:a5:e4:83:ac:29:41:bf:aa: c9:b7:fc:52:94:a7:49:aa:b4:d0:bd:b8:ab:13:ad: 61:eb:4e:44:af:8c:fa:47:26:00:a5:2b:f7:33:86: ec:d6:b0:e0:88:66:03:b3:b2:62:d8:d3:4b:0f:66: eb:5f:a5:7b:0e:57:bd:94:17:0e:0c:55:09:c7:85: 03:62:e0:3a:9e:ef:60:67:de:75:8a:d7:08:1d:e9: 22:5b:8e:11:d7:62:6c:7a:a0:a4:60:c0:d1:ea:4f: e1:1b:ea:08:fa:af:d1:47:20:12:57:0e:fb:73:39: d6:8a:a0:ec:5f:ed:71:9d:4e:1b:40:44:ca:01:fb: 46:43:87:ae:6d:ba:0c:c2:0b:91:71:64:d6:3c:ca: 92:af:c6:97:41:0d:70:a2:f5:5c:19:8e:12:7f:d3: 62:fb:0a:77:cb:22:e4:dc:d6:85:be:d2:e2:f1:b9: 2b:54:30:53:0b:30:33:ff:8f:fe:2a:9f:1e:82:72: 76:1d:77:6b:3d:11:1a:93:37:d5:6b:f3:16:5a:c5: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:FE:02:C8:B2:F2:D1:CE:6C:95:FF:17:E2:37:35:BB:5C:CD:97 X509v3 Authority Key Identifier: keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:bf:62:38:a5:fc:93:a0:2a:1d:69:ff:99:16:c6:02:b5:b6: 8a:ca:a5:d1:76:21:bb:49:a7:6a:36:91:c0:b1:cb:b1:98:5f: 0b:14:7c:8d:4f:26:3e:dd:5d:77:05:08:7b:4f:75:7f:37:b9: ef:78:fd:33:43:31:5a:54:4f:76:83:b1:35:c3:23:d4:cb:52: aa:ca:c4:e3:aa:78:68:61:cf:41:1e:b6:ca:c9:35:83:b2:45: 40:61:b7:37:23:83:2c:a5:39:59:08:10:7a:73:2f:e4:8f:91: b6:74:74:11:19:15:f5:b2:b8:05:a4:bb:b4:5e:37:45:2e:b0: d9:6e:83:11:4d:51:c2:d3:2c:1b:27:fb:89:5c:05:9f:74:49: 39:39:11:ce:19:82:9a:c5:f7:a9:2c:0a:d4:09:78:5e:b8:03: 8e:fb:bd:ca:6a:eb:cc:22:c4:5f:1b:9a:f6:eb:23:23:d9:65: 0d:e3:aa:13:86:d8:26:84:e2:cc:06:66:93:57:2f:53:d2:18: 2c:bb:b9:b3:d9:76:77:64:b6:5c:54:6d:1a:36:33:84:5e:db: 9f:52:90:55:e8:3e:c5:f9:1e:b4:ef:56:30:4a:66:f0:9d:02: ba:95:6a:cc:7b:3c:7d:6e:5a:98:9a:32:16:1d:9f:90:8d:db: 59:d2:22:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkVCNzExMC8GA1UEBRMoODA1QUFBMzZDMDE3RTlFODZDMzAzMkEzREFBRThEMjY4 QkRENDI1NDAeFw0yNTA4MjMwNzQzMjlaFw0yNTA4MzAwNzQzMjlaMBgxFjAUBgNV BAMTDTY4YTk3MTIxLTEwZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCKcnTeIATpuUlnPgzUpeWrQ/51ki8B6D0qmiusCfKqvg/gVguThMvf+uuG9tz f+Am+Zul5IOsKUG/qsm3/FKUp0mqtNC9uKsTrWHrTkSvjPpHJgClK/czhuzWsOCI ZgOzsmLY00sPZutfpXsOV72UFw4MVQnHhQNi4Dqe72Bn3nWK1wgd6SJbjhHXYmx6 oKRgwNHqT+Eb6gj6r9FHIBJXDvtzOdaKoOxf7XGdThtARMoB+0ZDh65tugzCC5Fx ZNY8ypKvxpdBDXCi9VwZjhJ/02L7CnfLIuTc1oW+0uLxuStUMFMLMDP/j/4qnx6C cnYdd2s9ERqTN9Vr8xZaxcd3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcY/+Asiy 8tHObJX/F+I3NbtczZcwHwYDVR0jBBgwFoAUgFqqNsAX6ehsMDKj2q6NJovdQlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2RUI3LzgzMUE4NDJBMUZE RTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0ZxcU5zQVg2ZWhzTURLajJxNk5Kb3ZkUWxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 RUI3LzgzMUE4NDJBMUZERTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVo c01ES2oycTZOSm92ZFFsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHG/Yjil/JOgKh1p/5kWxgK1torKpdF2IbtJp2o2kcCxy7GYXwsUfI1P Jj7dXXcFCHtPdX83ue94/TNDMVpUT3aDsTXDI9TLUqrKxOOqeGhhz0EetsrJNYOy RUBhtzcjgyylOVkIEHpzL+SPkbZ0dBEZFfWyuAWku7ReN0UusNlugxFNUcLTLBsn +4lcBZ90STk5Ec4ZgprF96ksCtQJeF64A477vcpq68wixF8bmvbrIyPZZQ3jqhOG 2CaE4swGZpNXL1PSGCy7ubPZdndktlxUbRo2M4Re259SkFXoPsX5HrTvVjBKZvCd ArqVasx7PH1uWpiaMhYdn5CN21nSIhU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:21 2025 by rpki-client