$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: Y7ksNeDFGZd3F0bd9WB4W8E6gw2W/rsbVTvzgRr4omo= Subject key identifier: 70:86:69:EE:39:A1:83:71:DE:54:2C:4D:49:FB:B6:6D:7A:EC:D1:D2 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 056D Signing time: Fri 22 Aug 2025 23:30:47 +0000 Manifest this update: Fri 22 Aug 2025 23:30:46 +0000 Manifest next update: Fri 29 Aug 2025 23:30:46 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: S5rdwJytlbhLTSC75OMkflMeIo78QPytw42KtTfYJq8=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Aug 22 23:30:46 2025 GMT Not After : Aug 29 23:30:46 2025 GMT Subject: CN=68a8fda6-047b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:78:87:76:a7:b4:3c:4a:ca:c3:1d:70:48: 7d:02:47:ae:a9:cc:ea:a3:e1:4f:0b:c7:1d:66:8e: 44:96:89:da:e3:a9:c0:f1:59:03:c0:f3:6b:90:ed: 12:19:9b:82:0c:7c:2c:85:6f:31:75:83:c1:3f:71: 4a:38:1d:12:df:07:fe:0e:c6:56:84:c1:3f:fa:96: 40:a9:70:5b:29:3b:98:4a:c8:9a:02:c5:c3:f3:25: 56:d9:e9:9d:53:01:7d:d1:1a:23:0f:6f:71:c7:68: dd:3c:98:d9:03:70:ae:73:4b:0c:e3:e0:d8:06:20: 00:f8:64:db:15:af:44:b1:d0:1c:86:02:5c:10:3c: 4a:50:3e:2a:1f:5e:70:0f:94:04:13:c3:a6:51:d0: 23:cc:d3:bb:dc:50:d7:8c:e1:33:6e:13:60:e9:43: 13:ec:b7:d1:19:ff:d1:09:17:22:a8:79:ea:31:50: 47:0f:34:d3:29:f9:6a:59:2a:ae:a8:86:5a:b3:e6: 53:5b:db:ae:10:ec:e8:55:9f:70:dd:3b:4c:bc:08: 57:cd:e4:be:23:1b:07:63:e5:e9:95:b8:73:ac:55: d0:1b:c1:4d:8f:64:6b:b0:bf:1c:df:15:c3:db:df: 89:df:9b:e7:37:31:71:20:2f:48:7b:ac:2f:da:c3: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:86:69:EE:39:A1:83:71:DE:54:2C:4D:49:FB:B6:6D:7A:EC:D1:D2 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8a:59:43:07:f1:4f:2a:23:96:47:d8:20:4f:ff:91:91:9a: 5e:36:eb:32:bf:81:c4:35:0f:fa:b1:13:0c:aa:cb:54:bb:d9: a2:ae:5f:51:1d:98:86:8e:14:82:53:8f:3b:eb:13:24:11:ad: e1:e4:f4:18:29:29:9c:d4:00:74:ed:67:0d:bc:09:97:69:62: 70:09:e1:5d:6c:66:d7:4c:3b:fe:37:79:af:05:8b:aa:30:c4: 44:59:9b:4c:ac:a1:b5:1f:6d:0f:9f:44:9d:b0:09:f3:10:8d: bc:27:36:14:98:82:10:8c:7e:e0:cf:8e:dc:4c:6e:eb:98:bd: 1e:bd:c2:7c:38:36:b5:7f:08:d6:f0:6f:b9:f2:b8:79:2c:47: 94:f0:17:d3:8b:a5:c1:32:3e:10:d4:6f:e4:12:eb:56:ac:2e: 6f:09:c4:b4:f2:40:da:18:17:9c:4e:46:4d:12:05:3d:90:9a: 1d:fd:10:c8:53:d9:89:f9:31:9a:25:df:57:d7:bd:e4:2d:10: d3:e2:0a:ab:42:62:7d:5e:a7:f3:15:12:34:4f:c7:03:d1:85: 88:63:6e:80:bc:9c:cf:6a:6b:1a:5f:50:dd:9f:f7:c4:25:79: 9a:69:37:75:24:c9:af:d5:73:b7:8b:4a:70:3f:b3:4c:8b:03: 31:36:6b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUwODIyMjMzMDQ2WhcNMjUwODI5MjMzMDQ2WjAYMRYwFAYD VQQDEw02OGE4ZmRhNi0wNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNp4h3antDxKysMdcEh9Akeuqczqo+FPC8cdZo5Elona46nA8VkDwPNrkO0S GZuCDHwshW8xdYPBP3FKOB0S3wf+DsZWhME/+pZAqXBbKTuYSsiaAsXD8yVW2emd UwF90RojD29xx2jdPJjZA3Cuc0sM4+DYBiAA+GTbFa9EsdAchgJcEDxKUD4qH15w D5QEE8OmUdAjzNO73FDXjOEzbhNg6UMT7LfRGf/RCRciqHnqMVBHDzTTKflqWSqu qIZas+ZTW9uuEOzoVZ9w3TtMvAhXzeS+IxsHY+XplbhzrFXQG8FNj2RrsL8c3xXD 29+J35vnNzFxIC9Ie6wv2sNeUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCGae45 oYNx3lQsTUn7tm167NHSMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMillDB/FPKiOWR9ggT/+RkZpeNusyv4HENQ/6sRMMqstUu9mirl9R HZiGjhSCU4876xMkEa3h5PQYKSmc1AB07WcNvAmXaWJwCeFdbGbXTDv+N3mvBYuq MMREWZtMrKG1H20Pn0SdsAnzEI28JzYUmIIQjH7gz47cTG7rmL0evcJ8ODa1fwjW 8G+58rh5LEeU8BfTi6XBMj4Q1G/kEutWrC5vCcS08kDaGBecTkZNEgU9kJod/RDI U9mJ+TGaJd9X173kLRDT4gqrQmJ9XqfzFRI0T8cD0YWIY26AvJzPamsaX1Ddn/fE JXmaaTd1JMmv1XO3i0pwP7NMiwMxNmuD -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:45 2025 by rpki-client