$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: SjoXUp89PbZ6NUuroosUzI/YBT2w45YmQNgs2R/t7ag= Subject key identifier: 66:9B:CE:F9:B3:E5:B1:6D:BA:06:EF:18:29:DA:93:07:29:C2:A6:CA Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 9C Signing time: Sat 05 Jul 2025 06:41:22 +0000 Manifest this update: Sat 05 Jul 2025 06:41:21 +0000 Manifest next update: Sat 12 Jul 2025 06:41:21 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: /4osd86zjAAq7YqUC/zeVaInwl1eifTy7XnN+4KAB1I=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: k8bmIEi5AkEe4xzWalacEnF3qdgyVE7VkZI11nYD+RY=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: pcx/18jLnM6NqrvyQgLayio0TPjGkJNNnKGVPlHBYO8=) 4: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: rPvzorCtxEUQHBw6HlxY0A29sySWnjRa4667RhmeUc8=) 5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: FsiT3oYazNjnPtPEe7G6GkJ5HTMUOkycbdZ+8LjujNs=) 6: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: d+1sX6tY5J0jwkyX1i5fUM/tk/BpB8/UlFulaWgxJOc=) 7: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: L5hcVKih/+nBko6kW7js31KvZiJs+q86I/1/tFKfyVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Jul 5 06:41:21 2025 GMT Not After : Jul 12 06:41:21 2025 GMT Subject: CN=6868c912-c52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:f9:87:04:16:85:e2:f1:ba:18:47:09:46: dd:37:9c:47:f8:11:8a:59:ee:49:94:64:25:0e:a7: d1:01:c0:a6:ad:63:33:2e:1d:b3:ec:43:08:5b:7a: 4a:8b:a6:0c:7f:f6:92:02:c6:b5:43:18:d8:88:a1: c1:f6:a3:13:97:ba:a8:4e:9e:0b:26:cf:33:cd:29: 9c:25:96:9f:f2:ed:7f:dc:be:16:20:d1:65:b9:1c: 70:ac:cf:30:81:e9:24:74:44:6c:49:93:4c:0e:b0: 54:b9:32:35:4b:09:80:68:30:77:1d:0e:17:22:21: 21:3a:2b:45:a4:44:7b:80:76:c1:73:0e:30:b7:13: 0c:88:86:1e:f7:4a:8f:74:81:ae:07:63:e1:7f:cd: 6b:a4:c2:37:86:44:88:44:a5:04:51:c3:5e:ec:a4: a6:8e:81:71:38:ac:2d:49:40:dd:c0:59:21:3b:dd: bb:5d:aa:16:ac:5b:51:62:a3:28:12:a3:42:4a:44: 17:4b:9e:b0:7b:d8:a1:93:54:f9:fd:e3:95:6a:ae: 35:d8:cc:fe:f9:d5:ab:55:41:fe:f1:db:c7:a4:b7: 8f:f1:b1:b4:fe:a7:df:85:2b:fc:9f:2d:17:eb:98: f2:0d:ca:d4:cf:1c:75:29:7a:fa:2f:d8:e5:68:98: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:CE:F9:B3:E5:B1:6D:BA:06:EF:18:29:DA:93:07:29:C2:A6:CA X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1d:6a:6d:52:a7:9a:bf:ae:35:58:1b:c1:1b:51:e9:7d:18: 63:9e:c7:50:0a:d4:6f:96:e7:7d:c5:dd:3e:43:a0:04:e5:14: a9:da:a8:e1:20:dd:93:fd:c3:28:09:cb:17:8c:34:29:1a:18: 00:f7:f7:10:ca:07:48:f9:43:fb:7f:07:ad:14:3e:19:bc:fa: 80:60:61:63:16:ec:68:a1:e4:22:dd:59:45:67:4a:cc:70:4d: 4d:d9:74:25:cf:0d:fc:d0:07:7c:c1:8e:70:fb:b1:59:97:6b: 58:6a:6e:fa:0d:a2:9a:31:79:62:e6:9d:70:ff:ad:1b:3b:57: c9:5b:45:14:54:46:70:fd:06:7b:49:9d:79:3c:02:c7:21:62: fa:dc:bc:7c:72:0a:68:c1:28:d1:fb:f4:ba:41:16:e0:9b:e6: 33:f8:36:fe:f6:30:8d:bc:52:3e:a1:66:41:b7:1d:31:8c:48: 1e:29:44:cd:15:2a:21:7f:63:53:89:68:db:d4:3d:cf:49:a3: 23:0f:49:a8:96:26:77:73:27:e9:83:7d:5b:32:64:0c:33:89: fa:ba:63:2f:01:3f:f9:3c:63:62:73:62:9a:7c:8b:1a:0f:5f: 28:ec:e3:d6:6d:17:3c:d3:43:1d:47:f3:69:8c:52:34:eb:09: df:95:bf:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUwNzA1MDY0MTIxWhcNMjUwNzEyMDY0MTIxWjAYMRYwFAYD VQQDEw02ODY4YzkxMi1jNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3En5hwQWheLxuhhHCUbdN5xH+BGKWe5JlGQlDqfRAcCmrWMzLh2z7EMIW3pK i6YMf/aSAsa1QxjYiKHB9qMTl7qoTp4LJs8zzSmcJZaf8u1/3L4WINFluRxwrM8w gekkdERsSZNMDrBUuTI1SwmAaDB3HQ4XIiEhOitFpER7gHbBcw4wtxMMiIYe90qP dIGuB2Phf81rpMI3hkSIRKUEUcNe7KSmjoFxOKwtSUDdwFkhO927XaoWrFtRYqMo EqNCSkQXS56we9ihk1T5/eOVaq412Mz++dWrVUH+8dvHpLeP8bG0/qffhSv8ny0X 65jyDcrUzxx1KXr6L9jlaJgm0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGabzvmz 5bFtugbvGCnakwcpwqbKMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQHWptUqeav641WBvBG1HpfRhjnsdQCtRvlud9xd0+Q6AE5RSp2qjh IN2T/cMoCcsXjDQpGhgA9/cQygdI+UP7fwetFD4ZvPqAYGFjFuxooeQi3VlFZ0rM cE1N2XQlzw380Ad8wY5w+7FZl2tYam76DaKaMXli5p1w/60bO1fJW0UUVEZw/QZ7 SZ15PALHIWL63Lx8cgpowSjR+/S6QRbgm+Yz+Db+9jCNvFI+oWZBtx0xjEgeKUTN FSohf2NTiWjb1D3PSaMjD0moliZ3cyfpg31bMmQMM4n6umMvAT/5PGNic2KafIsa D18o7OPWbRc800MdR/NpjFI06wnflb8P -----END CERTIFICATE-----Generated at Sat Jul 5 12:17:18 2025 by rpki-client