$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json) Hash identifier: Ldi/RbDqqgIwheNeg18DtMlUz41JFlNVj5u8KMtyvVg= Subject key identifier: A5:02:0A:43:EE:20:6B:82:A4:C8:F6:12:B5:4A:96:9B:22:E0:48:EA Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft Manifest number: 36 Signing time: Sat 23 Aug 2025 07:48:48 +0000 Manifest this update: Sat 23 Aug 2025 07:48:48 +0000 Manifest next update: Sat 30 Aug 2025 07:48:48 +0000 Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: oNqpRvxw5hQFNP6B7oBXsBJDSgTSs3/XvI6UCz2iLDc=) 2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: Aug 23 07:48:48 2025 GMT Not After : Aug 30 07:48:48 2025 GMT Subject: CN=68a97260-2a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:d5:a6:aa:57:4f:63:81:6c:ff:b7:67:1f: e2:81:aa:d9:e5:69:92:44:fe:18:e8:a4:92:a5:fa: 65:14:02:2d:e9:45:52:aa:6d:8b:70:c6:3c:7a:cc: d2:df:b9:4d:aa:9a:fc:5c:18:8a:f1:14:84:6d:18: dc:04:4b:34:d7:83:46:96:e1:dc:29:03:aa:05:ce: 0a:cd:64:41:fa:1c:1a:95:4d:9b:df:3e:fa:48:e5: 73:61:54:5d:9d:d9:d6:67:23:a7:43:9a:55:be:58: 92:92:14:b5:be:59:9e:11:a0:50:1b:9d:61:ed:75: 2e:77:0a:e3:4c:0b:35:8a:74:4d:bc:e5:65:43:0c: 42:04:05:e4:91:42:de:ba:af:9a:99:12:6f:d6:1a: e6:a2:cf:49:1c:e3:c9:a2:af:be:ef:54:1d:26:80: 96:fc:ce:06:7d:03:16:c5:74:fa:85:d8:07:06:59: f1:f4:9d:fb:67:30:09:f0:4c:2f:bd:7a:61:5f:35: 9b:60:f1:32:73:46:c9:75:a9:85:c4:0e:b7:ea:37: c5:08:d5:2e:6e:78:b5:46:88:25:e7:e1:bd:c7:09: 85:14:35:c6:ec:68:56:02:82:8d:72:dd:ae:82:17: 3d:d8:e4:e3:5f:a8:25:84:0d:67:dc:cf:d1:2c:57: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:02:0A:43:EE:20:6B:82:A4:C8:F6:12:B5:4A:96:9B:22:E0:48:EA X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:07:98:f7:03:1d:00:72:b8:f1:be:4c:8a:d7:42:c5:78:e5: 21:11:cb:a9:64:84:68:28:60:f8:41:28:45:15:2f:b0:25:8a: b4:76:db:67:d2:41:ee:a4:5a:e6:7a:b6:29:dc:5f:0a:da:71: 97:de:05:8a:b8:53:04:46:fa:9a:32:f5:cc:bc:f0:5a:54:ca: 04:92:9b:c8:1b:08:88:da:73:e9:05:61:aa:4e:db:3e:66:55: df:ce:33:b0:19:f6:51:16:37:1e:b8:63:9e:c7:b6:16:77:e6: 8b:4d:c2:96:c7:08:9e:78:cd:41:33:30:2d:e2:da:d4:1c:8b: 19:5a:27:7c:77:dd:2d:a6:fa:cd:34:04:5d:47:00:e5:cf:a3: 4d:ac:ad:f3:f1:5b:48:b1:8c:d5:6d:e4:03:74:07:2a:58:e2: c2:0f:cc:75:0a:76:6c:4d:1e:72:2d:f7:c9:3f:b3:86:7c:2e: e9:7d:84:3e:f5:6d:57:19:39:d6:90:15:96:fb:42:f1:a0:2e: c1:f3:a5:2c:df:66:01:65:ed:1e:ea:c7:a9:9c:97:3a:86:75: 34:01:06:2f:43:46:60:c8:ed:b9:b1:f6:20:55:c0:5e:40:fc: 28:e2:67:0f:b7:77:e9:8c:01:a1:25:bc:8c:64:c6:00:3b:71: d1:68:c4:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA4MjMwNzQ4NDhaFw0yNTA4MzAwNzQ4NDhaMBgxFjAUBgNV BAMTDTY4YTk3MjYwLTJhNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwudWmqldPY4Fs/7dnH+KBqtnlaZJE/hjopJKl+mUUAi3pRVKqbYtwxjx6zNLf uU2qmvxcGIrxFIRtGNwESzTXg0aW4dwpA6oFzgrNZEH6HBqVTZvfPvpI5XNhVF2d 2dZnI6dDmlW+WJKSFLW+WZ4RoFAbnWHtdS53CuNMCzWKdE285WVDDEIEBeSRQt66 r5qZEm/WGuaiz0kc48mir77vVB0mgJb8zgZ9AxbFdPqF2AcGWfH0nftnMAnwTC+9 emFfNZtg8TJzRsl1qYXEDrfqN8UI1S5ueLVGiCXn4b3HCYUUNcbsaFYCgo1y3a6C Fz3Y5ONfqCWEDWfcz9EsV9cvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpQIKQ+4g a4KkyPYStUqWmyLgSOowHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALQHmPcDHQByuPG+TIrXQsV45SERy6lkhGgoYPhBKEUVL7AlirR222fS Qe6kWuZ6tincXwracZfeBYq4UwRG+poy9cy88FpUygSSm8gbCIjac+kFYapO2z5m Vd/OM7AZ9lEWNx64Y57HthZ35otNwpbHCJ54zUEzMC3i2tQcixlaJ3x33S2m+s00 BF1HAOXPo02srfPxW0ixjNVt5AN0BypY4sIPzHUKdmxNHnIt98k/s4Z8Lul9hD71 bVcZOdaQFZb7QvGgLsHzpSzfZgFl7R7qx6mclzqGdTQBBi9DRmDI7bmx9iBVwF5A /CjiZw+3d+mMAaElvIxkxgA7cdFoxJg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:44 2025 by rpki-client