$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json) Hash identifier: CfJ7IiEO4iIrFoQ4tPAcAhx8gq0sCO8Q/YUqKqUYCGA= Subject key identifier: 8A:23:B0:91:11:F4:F1:5A:43:9D:9C:E6:F1:C6:52:A7:97:2F:10:4C Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft Manifest number: 18 Signing time: Sat 23 Aug 2025 08:11:20 +0000 Manifest this update: Sat 23 Aug 2025 08:11:20 +0000 Manifest next update: Sat 30 Aug 2025 08:11:20 +0000 Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: LEquGwgZ/xkTXpS/1dxnPZPb4abf+lZt8OB3INsbbLo=) 2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: x4FID5zbs9gmZN9FkmWfh+nLmyFuv96NIL9YO3x5RdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Validity Not Before: Aug 23 08:11:20 2025 GMT Not After : Aug 30 08:11:20 2025 GMT Subject: CN=68a977a8-b300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:df:20:30:fe:14:5e:ce:d5:b8:27:f4:34: 8f:d2:4d:88:33:6e:f5:62:8a:5b:88:96:b9:dd:07: 89:e0:c6:8b:36:05:55:6a:5f:d9:41:f4:b6:b1:71: ca:5f:b7:8d:73:dd:e1:ec:1a:10:c2:63:85:0f:c3: 96:3d:e0:34:c1:80:a6:f5:4a:18:7f:34:90:f4:70: f3:d0:2b:ee:a3:0b:41:f4:4d:bd:56:ac:23:14:64: 7c:75:51:57:93:62:d5:3b:f6:10:93:7e:37:c9:c4: 8b:5b:7c:0a:62:c2:f4:70:ba:fd:8b:fc:ff:85:71: 21:b4:fa:98:2a:a1:21:d2:f6:19:dd:6f:d8:75:77: fb:17:c4:75:af:55:70:f5:55:0f:17:14:36:7f:23: 80:1b:97:f6:6a:b1:5c:de:25:63:17:82:cf:71:33: 0f:d3:c0:0f:09:9f:09:f2:7e:82:2d:7e:26:8d:0d: 1a:88:57:62:ae:29:77:36:fc:b7:49:45:ad:c0:46: 0d:a6:35:86:ef:05:a8:4b:8b:a7:d1:d4:0f:e8:49: 03:b1:94:2b:ce:ef:99:8c:55:e3:e7:eb:2d:c7:ff: 68:47:eb:3e:82:8a:ef:05:eb:e3:12:47:4e:19:1f: 8a:25:9f:07:46:53:e0:7d:ce:bd:24:a4:9a:a6:ad: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:B0:91:11:F4:F1:5A:43:9D:9C:E6:F1:C6:52:A7:97:2F:10:4C X509v3 Authority Key Identifier: keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:51:5c:8d:8e:5a:47:4e:28:64:17:f2:73:04:f7:e0:62:89: d7:2b:0e:7f:4f:dc:0f:9f:95:eb:6b:0e:4c:bd:cd:61:7d:68: ae:71:0b:27:75:27:eb:d9:69:15:66:73:81:ef:d1:7f:ce:d3: 36:ca:70:cf:a2:44:7a:79:25:0b:b0:72:76:be:6d:14:b8:cd: e2:9e:9b:a6:e7:d3:94:70:23:38:a3:28:e9:86:e2:cb:ec:11: 9c:8f:6f:79:98:00:de:16:b0:8e:d8:83:2a:a7:af:95:7a:b4: b7:f8:7a:cd:93:06:56:aa:40:e6:74:bc:b5:51:9f:bb:6c:97: 65:56:6c:0c:72:a6:f5:2c:05:c7:6a:59:f5:f2:3a:a3:52:52: db:05:93:de:a0:37:26:57:67:c6:60:49:f3:63:c8:86:a9:5e: 54:c5:bc:0f:f6:8f:72:75:15:6a:a0:c1:2f:97:89:38:69:1e: 2f:0b:cf:67:c7:3f:ae:07:52:ea:57:6b:ee:e3:ac:c3:12:66: 70:a8:f0:9c:67:01:a2:25:7f:79:74:b4:82:18:1b:41:bb:61: 77:7c:12:a2:6b:cc:12:6b:37:6d:1f:3e:81:94:20:87:b7:59: f6:55:29:65:77:7f:35:98:08:b1:e5:f8:27:af:55:03:e3:04: 0f:19:b2:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFCNDY0MzE3RTlF N0FCNzBFRjAeFw0yNTA4MjMwODExMjBaFw0yNTA4MzAwODExMjBaMBgxFjAUBgNV BAMTDTY4YTk3N2E4LWIzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCHN8gMP4UXs7VuCf0NI/STYgzbvViiluIlrndB4ngxos2BVVqX9lB9Laxccpf t41z3eHsGhDCY4UPw5Y94DTBgKb1Shh/NJD0cPPQK+6jC0H0Tb1WrCMUZHx1UVeT YtU79hCTfjfJxItbfApiwvRwuv2L/P+FcSG0+pgqoSHS9hndb9h1d/sXxHWvVXD1 VQ8XFDZ/I4Abl/ZqsVzeJWMXgs9xMw/TwA8JnwnyfoItfiaNDRqIV2KuKXc2/LdJ Ra3ARg2mNYbvBahLi6fR1A/oSQOxlCvO75mMVePn6y3H/2hH6z6Ciu8F6+MSR04Z H4olnwdGU+B9zr0kpJqmrYvXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiiOwkRH0 8VpDnZzm8cZSp5cvEEwwHwYDVR0jBBgwFoAUgmqoO74CQNE5BqurRkMX6eercO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0Y1N0QyMzMwNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ21xb083NENRTkU1QnF1clJrTVg2ZWVyY084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0Y1N0QyMzMwNURERjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5F NUJxdXJSa01YNmVlcmNPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF9RXI2OWkdOKGQX8nME9+BiidcrDn9P3A+fletrDky9zWF9aK5xCyd1 J+vZaRVmc4Hv0X/O0zbKcM+iRHp5JQuwcna+bRS4zeKem6bn05RwIzijKOmG4svs EZyPb3mYAN4WsI7Ygyqnr5V6tLf4es2TBlaqQOZ0vLVRn7tsl2VWbAxypvUsBcdq WfXyOqNSUtsFk96gNyZXZ8ZgSfNjyIapXlTFvA/2j3J1FWqgwS+XiThpHi8Lz2fH P64HUupXa+7jrMMSZnCo8JxnAaIlf3l0tIIYG0G7YXd8EqJrzBJrN20fPoGUIIe3 WfZVKWV3fzWYCLHl+CevVQPjBA8Zsvw= -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:19 2025 by rpki-client