$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json) Hash identifier: q4106ba/fJSWCho6PtH/WLepD4fy8IAFGtX7/lXUFro= Subject key identifier: DA:B3:22:39:2D:73:96:39:15:38:62:C5:83:CD:1F:DB:12:C4:FD:CC Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft Manifest number: 01D3 Signing time: Sat 23 Aug 2025 02:52:08 +0000 Manifest this update: Sat 23 Aug 2025 02:52:07 +0000 Manifest next update: Sat 30 Aug 2025 02:52:07 +0000 Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: OXxZv7Bzpk1TYGuXZEhui+3WntNVcoae58rHjGFsL60=) 2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: vlOK1RJCHtSR0rcREKWIrzl7luUJenVcTiEDALCfBP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Validity Not Before: Aug 23 02:52:07 2025 GMT Not After : Aug 30 02:52:07 2025 GMT Subject: CN=68a92cd7-9c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:50:d2:77:ff:5d:d1:f6:61:7b:b9:93:25: ad:a0:6e:2f:99:03:30:5b:c8:5c:01:e3:12:fe:76: ec:e3:50:28:42:70:2c:82:35:05:f7:8b:2f:33:c3: d5:22:83:4b:d0:49:a6:38:31:0e:02:0b:61:76:da: d0:ae:b8:f1:89:86:30:83:f8:58:0c:51:a4:b9:45: ae:fc:9e:a4:9f:81:de:01:4e:95:04:84:29:8d:42: 9b:d0:c7:9b:73:54:84:38:9c:be:4d:c8:21:76:00: 79:c2:40:52:30:d8:61:e9:56:b0:1b:82:dc:04:f0: 01:a9:8e:8d:97:37:1d:cb:7c:75:2a:25:2a:57:2b: 0b:9a:ce:69:87:3b:1f:68:1e:b2:1e:80:e0:64:d4: 58:40:0b:9a:e9:18:50:be:4a:f9:0b:4e:83:27:61: 1e:e8:1c:ac:8a:14:d1:29:4c:c6:0c:20:27:76:bb: 09:41:90:e3:5c:48:f3:77:58:f9:7d:e7:0c:11:e6: c1:46:5f:d4:b1:40:63:bc:79:42:cb:32:08:74:91: db:61:ea:3e:59:73:cd:e0:10:ef:22:fa:e7:fc:bd: 63:18:ea:6d:6a:79:47:79:bd:e5:2b:94:5b:29:95: fb:0a:b9:37:cd:44:bf:bd:dc:3d:69:ca:63:7b:d5: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:22:39:2D:73:96:39:15:38:62:C5:83:CD:1F:DB:12:C4:FD:CC X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:8e:c1:ed:c6:25:bb:54:be:04:d4:68:56:dc:a9:43:61:de: 81:af:43:89:03:05:4c:e5:10:a2:0b:ae:25:ae:45:8e:df:0b: 26:53:52:fb:6e:90:e6:b9:22:c3:3b:aa:1d:e7:1a:d1:66:80: 33:ac:b1:0b:1f:b4:5f:40:01:5f:fd:63:8c:ae:a5:46:16:5c: f6:fb:7b:30:b5:83:71:07:96:67:7b:a2:54:93:56:13:c7:04: 0c:39:e9:a3:a6:3f:92:d4:e3:b4:5b:0f:54:11:07:68:84:ef: a3:4f:da:69:28:6c:c1:0f:0f:06:51:b4:95:7a:ca:05:c3:d8: 0a:86:97:a5:97:af:20:39:6b:db:31:e5:4a:c1:07:64:56:4e: 5b:48:c9:94:23:5e:d8:15:1d:e0:05:5f:ce:b4:bd:eb:1c:b7: 52:b1:7c:10:49:29:d6:d2:ae:c3:9e:c4:e8:5f:bb:62:32:8b: 7c:3d:c4:bd:64:20:4c:e0:19:58:1a:15:e1:fb:47:8b:08:d8: 06:b3:75:19:19:81:d0:84:1f:21:3a:82:e7:45:53:5a:bb:80: c0:97:f8:0a:be:40:dc:a4:49:98:6f:c0:99:3a:9b:6f:e4:b4: 3a:2d:a4:d3:f0:a7:04:c4:92:65:62:25:b6:ee:f1:ea:0d:79: 55:3c:96:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjUwODIzMDI1MjA3WhcNMjUwODMwMDI1MjA3WjAYMRYwFAYD VQQDEw02OGE5MmNkNy05YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY5Q0nf/XdH2YXu5kyWtoG4vmQMwW8hcAeMS/nbs41AoQnAsgjUF94svM8PV IoNL0EmmODEOAgthdtrQrrjxiYYwg/hYDFGkuUWu/J6kn4HeAU6VBIQpjUKb0Meb c1SEOJy+TcghdgB5wkBSMNhh6VawG4LcBPABqY6Nlzcdy3x1KiUqVysLms5phzsf aB6yHoDgZNRYQAua6RhQvkr5C06DJ2Ee6BysihTRKUzGDCAndrsJQZDjXEjzd1j5 fecMEebBRl/UsUBjvHlCyzIIdJHbYeo+WXPN4BDvIvrn/L1jGOptanlHeb3lK5Rb KZX7Crk3zUS/vdw9acpje9X+3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqzIjkt c5Y5FThixYPNH9sSxP3MMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3 ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCujsHtxiW7VL4E1GhW3KlDYd6Br0OJAwVM5RCiC64lrkWO3wsmU1L7 bpDmuSLDO6od5xrRZoAzrLELH7RfQAFf/WOMrqVGFlz2+3swtYNxB5Zne6JUk1YT xwQMOemjpj+S1OO0Ww9UEQdohO+jT9ppKGzBDw8GUbSVesoFw9gKhpell68gOWvb MeVKwQdkVk5bSMmUI17YFR3gBV/OtL3rHLdSsXwQSSnW0q7DnsToX7tiMot8PcS9 ZCBM4BlYGhXh+0eLCNgGs3UZGYHQhB8hOoLnRVNau4DAl/gKvkDcpEmYb8CZOptv 5LQ6LaTT8KcExJJlYiW27vHqDXlVPJbA -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:02 2025 by rpki-client