$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: YP4PvNuU3qxps9oifv3zwFrQfIlwMH0TLzhfz4uitZk= Subject key identifier: 15:DF:A3:EB:22:13:2A:72:9C:70:6D:1B:F8:99:FE:5B:01:A8:35:07 Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: E3 Signing time: Sat 23 Aug 2025 05:35:22 +0000 Manifest this update: Sat 23 Aug 2025 05:35:21 +0000 Manifest next update: Sat 30 Aug 2025 05:35:21 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: cEf2Mi+N/WfaS/C1Cj9M7xOHi/WFEbjTI674ZaeJ3YE=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: Aug 23 05:35:21 2025 GMT Not After : Aug 30 05:35:21 2025 GMT Subject: CN=68a9531a-b8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:4c:dd:ce:c4:cf:e9:ec:12:8f:7a:77:13: 03:58:a9:5e:a2:29:1c:c3:ed:1a:72:7e:75:79:a5: b3:6c:79:79:1d:b5:2f:5a:3c:10:fd:f4:cb:8c:20: 58:3f:fd:ec:10:84:c7:f5:15:44:a0:32:ab:57:6f: 6f:36:13:54:cb:1c:7a:bd:70:aa:0d:83:e6:c6:3a: 78:58:4e:82:c7:25:7c:fc:51:2c:02:9a:3c:8e:30: cb:6a:a9:d0:f7:57:88:2a:c8:29:5f:2a:24:f1:ee: c8:2e:c1:e3:d5:4b:18:68:69:c5:40:d6:e8:71:60: 77:87:ae:8c:a1:69:49:f9:fd:62:84:d8:24:76:47: d4:90:d6:0a:78:2f:51:e2:f7:bb:1d:00:ae:fd:bd: e6:cc:3b:67:9e:cb:ac:ce:5a:1e:42:5a:c8:3b:31: 7a:6e:bc:91:95:d1:60:56:10:d4:80:24:87:fc:e5: e2:2b:0a:4b:af:15:48:8a:cc:ee:bf:44:57:cc:b5: dc:13:e5:38:9a:d4:7e:55:b5:d1:33:3f:bc:6e:a5: 12:d2:0d:4e:d9:9a:36:8c:2d:71:84:74:ef:fe:52: 7f:6c:46:f6:37:b8:10:a0:73:3f:a5:cb:03:74:f1: e1:a3:d7:c9:a8:4a:47:40:74:04:6d:32:09:b7:cd: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DF:A3:EB:22:13:2A:72:9C:70:6D:1B:F8:99:FE:5B:01:A8:35:07 X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:0c:cd:35:71:9c:47:82:cc:7d:a7:8c:e6:57:af:96:3e:cb: f6:49:50:a2:d0:0a:61:69:c3:22:8b:18:e7:94:fb:02:df:ae: 7b:a7:bd:58:6f:82:56:06:2c:d3:1f:72:c6:5c:13:2a:a5:f2: 76:ab:8b:3f:fd:32:a9:fd:e5:60:28:a4:2d:00:f8:a2:87:04: 2f:1e:52:83:ba:75:f9:cb:4a:04:0b:a5:eb:70:12:51:05:57: c3:39:86:bf:79:82:7f:96:9e:df:e0:02:7c:6b:f2:a1:de:bf: 51:92:40:2a:53:07:2c:cf:f0:d2:f3:12:33:c8:24:f0:d7:31: e7:87:a0:8e:ed:d5:c9:8d:30:5b:dc:f9:89:ca:82:e1:cb:e3: c9:90:e8:4e:2c:ba:86:22:cf:ea:09:90:b5:68:01:69:c1:4f: b1:d6:63:e8:d4:43:a3:46:96:b2:72:7b:8d:97:34:41:ff:ab: d0:fd:24:30:7a:43:c6:2e:bb:7f:2d:2f:59:09:cd:01:7b:d9: 9a:e9:ae:7b:4d:67:63:87:8a:16:a2:51:90:1c:af:a3:79:ed: 33:24:d1:b2:89:92:34:e1:2c:9c:32:f9:3d:08:dd:60:8a:64: 56:2f:25:d5:da:96:4d:10:4b:fd:53:8c:e4:98:81:58:35:a5: 8c:dd:a4:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUwODIzMDUzNTIxWhcNMjUwODMwMDUzNTIxWjAYMRYwFAYD VQQDEw02OGE5NTMxYS1iOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRZM3c7Ez+nsEo96dxMDWKleoikcw+0acn51eaWzbHl5HbUvWjwQ/fTLjCBY P/3sEITH9RVEoDKrV29vNhNUyxx6vXCqDYPmxjp4WE6CxyV8/FEsApo8jjDLaqnQ 91eIKsgpXyok8e7ILsHj1UsYaGnFQNbocWB3h66MoWlJ+f1ihNgkdkfUkNYKeC9R 4ve7HQCu/b3mzDtnnsuszloeQlrIOzF6bryRldFgVhDUgCSH/OXiKwpLrxVIiszu v0RXzLXcE+U4mtR+VbXRMz+8bqUS0g1O2Zo2jC1xhHTv/lJ/bEb2N7gQoHM/pcsD dPHho9fJqEpHQHQEbTIJt81P9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXfo+si EypynHBtG/iZ/lsBqDUHMB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmDM01cZxHgsx9p4zmV6+WPsv2SVCi0AphacMiixjnlPsC3657p71Y b4JWBizTH3LGXBMqpfJ2q4s//TKp/eVgKKQtAPiihwQvHlKDunX5y0oEC6XrcBJR BVfDOYa/eYJ/lp7f4AJ8a/Kh3r9RkkAqUwcsz/DS8xIzyCTw1zHnh6CO7dXJjTBb 3PmJyoLhy+PJkOhOLLqGIs/qCZC1aAFpwU+x1mPo1EOjRpaycnuNlzRB/6vQ/SQw ekPGLrt/LS9ZCc0Be9ma6a57TWdjh4oWolGQHK+jee0zJNGyiZI04SycMvk9CN1g imRWLyXV2pZNEEv9U4zkmIFYNaWM3aTu -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:33 2025 by rpki-client