$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft File: -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json) Hash identifier: L6HM7SUpT+CHGH3v1T6rEVCRxm5trQzn3wC1yJIR3qM= Subject key identifier: B6:6F:06:D2:37:2A:7A:A0:A9:FF:26:2D:D3:81:EC:8B:C1:33:D0:42 Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 Certificate issuer: /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft Manifest number: 50 Signing time: Sat 23 Aug 2025 07:32:07 +0000 Manifest this update: Sat 23 Aug 2025 07:32:07 +0000 Manifest next update: Sat 30 Aug 2025 07:32:07 +0000 Files and hashes: 1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: UuCjfrHX20Gfwf2CNbTeHXYtKeG9zx2h05sB4HsW5FY=) 2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: ti/+dlDrn7n64hxfzOvr4hnKhT6sYm889q99u/P1yZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697 Validity Not Before: Aug 23 07:32:07 2025 GMT Not After : Aug 30 07:32:07 2025 GMT Subject: CN=68a96e77-0a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:ff:69:d1:5d:be:79:8f:ac:45:87:9e:8d: d9:d1:90:89:44:e2:a4:da:df:76:f0:00:eb:1e:ad: 7b:12:c0:84:eb:b5:e6:bb:92:0f:20:e8:64:fd:14: ab:7c:21:88:ac:d6:0a:a1:7f:8e:c8:48:e8:29:51: d8:4c:93:d7:d4:d2:d6:b7:d2:58:d7:d9:fc:2c:ad: 2b:15:4b:45:b9:da:32:23:20:2d:00:d4:1c:76:e6: 93:35:b7:fa:f1:c7:8b:83:cc:93:ad:69:aa:56:8d: 9c:26:9f:34:16:ea:d3:7b:f5:3f:68:dc:7c:64:76: bb:ca:08:6f:ca:69:63:f4:96:26:74:b5:4d:dc:a7: de:71:c4:dc:4a:88:87:2c:3a:45:ee:2e:47:bc:a4: 55:94:d6:31:b3:b8:1d:51:5b:c7:29:30:ff:d3:83: 9e:7d:4c:49:65:54:ee:40:61:b3:a3:cb:0b:4b:f9: 45:7f:2e:52:bd:d9:62:7b:34:eb:df:6a:67:29:24: 67:e9:2c:dc:8d:50:b9:31:a2:ca:d7:ac:1d:3c:a4: 9b:5e:d2:ea:37:da:86:7f:3d:c9:95:25:59:65:0c: a5:bf:ee:ec:2f:98:33:f7:73:7e:3b:6d:25:0d:fd: 82:ca:b6:40:3e:af:01:f5:3f:d9:0d:60:06:c2:ca: 67:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:06:D2:37:2A:7A:A0:A9:FF:26:2D:D3:81:EC:8B:C1:33:D0:42 X509v3 Authority Key Identifier: keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:52:b0:cf:f8:dd:19:31:91:75:cd:d2:7d:71:51:fa:5f:d9: fa:5a:d8:78:10:c5:bd:85:8b:fc:37:20:64:ba:27:c9:50:97: 38:8b:54:d4:cb:36:7e:91:d5:35:1d:96:5e:1b:dc:c6:70:c9: e9:38:34:b1:6a:f3:32:da:71:4e:9f:de:cd:57:ee:01:f2:b0: b1:5b:b8:4a:38:a0:c7:74:90:86:04:7d:d8:88:41:e7:3f:bd: 24:81:b8:af:ba:8c:6b:74:fe:67:a2:cf:37:dc:07:70:9e:f7: d5:a5:1e:c3:e3:7a:ca:fe:5e:20:b3:e6:a9:e7:8b:e1:38:ff: c7:4b:9e:31:d4:22:e1:40:e3:dc:28:4d:4b:e4:b6:8a:9d:59: bd:05:b7:19:c5:0a:b9:c5:45:4d:fe:ea:58:13:b9:1b:94:e4: d4:f7:b4:70:fd:1d:c5:20:27:37:f7:5e:03:35:2e:e3:3c:b9: 9c:f9:0d:3e:81:34:d1:38:97:6d:15:33:01:62:51:84:53:41: 7b:e5:9f:de:f7:cf:b6:4f:15:80:ad:b2:b4:71:8b:80:03:97: 18:c9:05:d8:c0:26:db:c7:b6:2e:c1:c7:d6:c8:eb:0b:7c:1a: b7:21:94:4c:f9:f3:58:ae:28:58:54:b3:f3:07:6a:27:97:49: 9d:d6:96:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTMzMDExMC8GA1UEBRMoRkJGODEyQTBCOUFBOEFFRDYyMTg3NkM4OTIwMUZGRjEw NDMyQjY5NzAeFw0yNTA4MjMwNzMyMDdaFw0yNTA4MzAwNzMyMDdaMBgxFjAUBgNV BAMTDTY4YTk2ZTc3LTBhNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8CP9p0V2+eY+sRYeejdnRkIlE4qTa33bwAOserXsSwITrtea7kg8g6GT9FKt8 IYis1gqhf47ISOgpUdhMk9fU0ta30ljX2fwsrSsVS0W52jIjIC0A1Bx25pM1t/rx x4uDzJOtaapWjZwmnzQW6tN79T9o3HxkdrvKCG/KaWP0liZ0tU3cp95xxNxKiIcs OkXuLke8pFWU1jGzuB1RW8cpMP/Tg559TEllVO5AYbOjywtL+UV/LlK92WJ7NOvf amcpJGfpLNyNULkxosrXrB08pJte0uo32oZ/PcmVJVllDKW/7uwvmDP3c347bSUN /YLKtkA+rwH1P9kNYAbCymedAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtm8G0jcq eqCp/yYt04Hsi8Ez0EIwHwYDVR0jBBgwFoAU+/gSoLmqiu1iGHbIkgH/8QQytpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMzMwL0FBRTQ5QTM4MDYw RjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUxaUdIYklrZ0hfOFFReXRw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLV9nU29MbXFpdTFpR0hiSWtnSF84UVF5dHBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MzMwL0FBRTQ5QTM4MDYwRjExRjBBOTcwNTI4MUM0RjlBRTAyLy1fZ1NvTG1xaXUx aUdIYklrZ0hfOFFReXRwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGxSsM/43RkxkXXN0n1xUfpf2fpa2HgQxb2Fi/w3IGS6J8lQlziLVNTL Nn6R1TUdll4b3MZwyek4NLFq8zLacU6f3s1X7gHysLFbuEo4oMd0kIYEfdiIQec/ vSSBuK+6jGt0/meizzfcB3Ce99WlHsPjesr+XiCz5qnni+E4/8dLnjHUIuFA49wo TUvktoqdWb0FtxnFCrnFRU3+6lgTuRuU5NT3tHD9HcUgJzf3XgM1LuM8uZz5DT6B NNE4l20VMwFiUYRTQXvln973z7ZPFYCtsrRxi4ADlxjJBdjAJtvHti7Bx9bI6wt8 GrchlEz581iuKFhUs/MHaieXSZ3Wln4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:50 2025 by rpki-client