$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json) Hash identifier: A44swClOMk15Ov4bjkyqUBtF3ROehSVrg5z+tXzJ3ZI= Subject key identifier: 65:48:C1:3E:51:6A:44:6C:39:C4:EB:17:12:8E:5C:74:95:D2:BA:20 Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft Manifest number: 3A Signing time: Sat 23 Aug 2025 07:46:16 +0000 Manifest this update: Sat 23 Aug 2025 07:46:16 +0000 Manifest next update: Sat 30 Aug 2025 07:46:16 +0000 Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: IOyqydurRGwiTECxSIMdNEDm41dNh8w2+TcFbdzeqks=) 2: D7605790272B11F08FF39632C4F9AE02.roa (hash: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Validity Not Before: Aug 23 07:46:16 2025 GMT Not After : Aug 30 07:46:16 2025 GMT Subject: CN=68a971c8-5045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:81:29:ab:4b:7b:bb:25:32:c2:f4:c6:89: e6:64:1e:25:e7:ab:94:89:a6:42:3e:30:fa:96:61: e7:e3:ec:b4:39:09:ae:be:d3:ce:96:0c:22:f6:5f: 55:09:fd:97:b3:34:33:3c:63:1f:4c:e1:97:03:de: 12:b5:86:a1:29:f8:59:6e:9d:51:46:c0:da:9d:c9: 20:6b:90:70:ae:ee:8b:68:e6:b3:b0:fd:da:53:24: 97:5c:a3:22:09:dc:ef:fa:7b:76:9a:1a:f8:bc:7b: 19:32:9c:1c:53:7c:58:24:00:6e:c7:5b:93:5a:1c: ad:20:d7:28:5b:55:90:18:60:66:bf:1e:71:e5:72: af:da:bf:88:4c:90:57:15:92:18:6f:30:51:79:12: ff:97:ce:7a:98:3d:9e:22:ee:e3:dc:c7:00:b1:76: e3:ee:21:26:02:d1:e7:9d:12:91:00:b5:46:b4:fa: 8f:a6:b8:fc:95:9c:d9:e3:3f:0b:95:44:a2:e8:0c: c4:9c:37:04:85:24:71:40:95:63:64:11:54:5d:77: c9:ea:46:06:f1:a6:cb:4a:1c:19:10:39:f7:68:5e: 27:d4:b9:7a:17:df:51:ac:fe:88:56:61:1a:95:03: d9:a9:44:01:8d:0d:99:19:75:a3:bd:dd:ed:13:94: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:48:C1:3E:51:6A:44:6C:39:C4:EB:17:12:8E:5C:74:95:D2:BA:20 X509v3 Authority Key Identifier: keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:f0:8c:85:99:b1:c5:98:0c:ff:de:c4:c5:57:87:02:31:84: b7:2a:ce:cb:f7:50:7e:2f:84:14:90:b8:cb:cd:5d:6e:fb:23: 37:92:98:9c:77:56:12:d5:54:13:d0:32:1d:33:33:0b:dc:62: 6f:0b:b1:e7:e1:17:59:2c:50:8f:11:fe:27:48:fe:b1:ff:30: f1:eb:66:72:0f:fe:e6:ed:51:f0:70:a8:ce:f0:b0:af:87:8e: 22:75:de:2c:06:b6:4d:3e:00:31:e3:20:13:36:d5:14:33:ca: f5:db:8b:df:46:03:c1:ae:d6:49:d5:d5:85:a0:74:88:a8:af: d5:82:6f:b7:ff:be:ef:c4:05:d7:6b:6e:a8:ec:4d:e0:d1:b4: 27:87:1a:c3:16:bd:87:61:76:ee:d6:5d:dd:77:85:1f:0d:60: 2e:64:30:99:26:2a:ff:c4:b6:1a:03:47:a4:9e:4b:0e:66:d0: 9f:68:a6:8a:f8:ea:08:78:11:84:ca:a5:00:e6:29:eb:a0:dc: 0c:e7:f2:c6:8d:19:50:15:ac:26:1b:cf:93:54:bb:5e:47:1f: 28:e8:ad:ba:8b:b6:b6:ed:a1:93:a9:bb:55:a6:75:94:d1:d5: 74:90:18:22:b7:2b:34:d9:e0:aa:0e:fd:19:a0:bc:25:13:cf: 46:ef:c4:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0U2RjExMC8GA1UEBRMoMUIxQUYxODM1MTA2QzkzMzlBREQzMTQ1RTkwMEIwNkZE QTlFNTZFNzAeFw0yNTA4MjMwNzQ2MTZaFw0yNTA4MzAwNzQ2MTZaMBgxFjAUBgNV BAMTDTY4YTk3MWM4LTUwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmEoEpq0t7uyUywvTGieZkHiXnq5SJpkI+MPqWYefj7LQ5Ca6+086WDCL2X1UJ /ZezNDM8Yx9M4ZcD3hK1hqEp+FlunVFGwNqdySBrkHCu7oto5rOw/dpTJJdcoyIJ 3O/6e3aaGvi8exkynBxTfFgkAG7HW5NaHK0g1yhbVZAYYGa/HnHlcq/av4hMkFcV khhvMFF5Ev+XznqYPZ4i7uPcxwCxduPuISYC0eedEpEAtUa0+o+muPyVnNnjPwuV RKLoDMScNwSFJHFAlWNkEVRdd8nqRgbxpstKHBkQOfdoXifUuXoX31Gs/ohWYRqV A9mpRAGNDZkZdaO93e0TlP5NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZUjBPlFq RGw5xOsXEo5cdJXSuiAwHwYDVR0jBBgwFoAUGxrxg1EGyTOa3TFF6QCwb9qeVucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRTZGLzJEMTgxN0I0Mjcy QjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3hyeGcxRUd5VE9hM1RGRjZRQ3diOXFlVnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD RTZGLzJEMTgxN0I0MjcyQjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRP YTNURkY2UUN3YjlxZVZ1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKnwjIWZscWYDP/exMVXhwIxhLcqzsv3UH4vhBSQuMvNXW77IzeSmJx3 VhLVVBPQMh0zMwvcYm8LsefhF1ksUI8R/idI/rH/MPHrZnIP/ubtUfBwqM7wsK+H jiJ13iwGtk0+ADHjIBM21RQzyvXbi99GA8Gu1knV1YWgdIior9WCb7f/vu/EBddr bqjsTeDRtCeHGsMWvYdhdu7WXd13hR8NYC5kMJkmKv/EthoDR6SeSw5m0J9opor4 6gh4EYTKpQDmKeug3Azn8saNGVAVrCYbz5NUu15HHyjorbqLtrbtoZOpu1WmdZTR 1XSQGCK3KzTZ4KoO/RmgvCUTz0bvxG8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:56:45 2025 by rpki-client