$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: asLy+RUYJnHjGQOtUXevzIZpBc6mpdkI0X4fiO1SE08= Subject key identifier: 5A:55:0F:89:83:42:35:E1:3A:89:1B:4F:7F:C7:EA:62:F2:78:F8:DB Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: BA Signing time: Sat 23 Aug 2025 06:19:04 +0000 Manifest this update: Sat 23 Aug 2025 06:19:03 +0000 Manifest next update: Sat 30 Aug 2025 06:19:03 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: Q0nCSM9OR3mtv2ZnAX+FhQzbcHCssyzvsgVOkgeIsaM=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: KCUoweqEDh9jHcBtb7W3HaJWTeDZFQpve4LjGr9WIOQ=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: cAiqdNWzTF0sxkzvHv6yM/PcMz/pHk5XzQwUuq8wOgo=) 4: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: SHadC7K9t4sf0FTRuN25Sqtx5daSfJ2m5VktpFS9BJc=) 5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: aNcYj3A/gGnj4dxbU3z5mV3zt63Nh4QrgMIUUabFzuw=) 6: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: 3FjaUGxyX9keX6h1j1EjjACKPn/PD276JgWOPNcm8Oo=) 7: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: he2Yg9YLqUGBktzqkNPe9zTZfzSefhfrBKHZ0mm0MXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Aug 23 06:19:03 2025 GMT Not After : Aug 30 06:19:03 2025 GMT Subject: CN=68a95d58-43e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:ce:78:4f:73:e9:7a:14:27:70:cd:1e:92: 69:fa:80:c0:8e:ec:bc:36:4a:4b:31:30:fe:11:36: 10:06:3b:48:9a:39:0a:c0:2e:98:b8:a2:15:7d:2a: 17:a3:0a:ad:f9:07:b4:1f:c2:b3:63:d2:f6:10:ce: 17:df:7d:f3:7a:51:a1:77:1a:b8:41:29:d3:79:22: fa:e6:5a:75:14:74:42:7f:92:f6:f3:4c:56:00:30: fc:33:b6:e4:e3:69:e8:95:c8:45:a3:4c:23:b2:8c: d6:44:c1:85:59:74:3c:12:93:d9:3b:cb:76:12:2c: 2c:9d:59:8f:2e:a0:b2:64:af:33:aa:47:31:d3:be: 8d:c2:61:38:6f:aa:83:05:89:cf:5a:66:fb:fe:c9: 08:b1:18:d1:c3:d1:89:09:62:dd:4f:96:c7:ac:58: 06:9a:df:a3:e7:a9:18:a7:e8:16:83:7d:18:d6:d3: d3:6e:ef:d7:b7:90:cc:06:f9:21:16:d1:f5:6a:bb: 78:37:a3:80:27:e4:05:a3:36:60:d4:56:e9:bb:62: f6:35:95:7f:5c:a2:f3:ec:6e:a6:11:be:c7:b4:5a: 8c:35:32:df:86:15:dc:a7:99:aa:9d:11:6c:b0:5d: ff:40:38:0b:f6:31:0f:b1:48:24:d9:e1:e1:fb:8e: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:55:0F:89:83:42:35:E1:3A:89:1B:4F:7F:C7:EA:62:F2:78:F8:DB X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d3:93:82:00:10:0b:a5:62:bf:73:fd:8f:a0:b9:59:13:11: 42:f2:2c:39:d7:db:b0:97:b5:78:81:f0:c9:4b:c4:37:c9:d8: a2:69:0c:dc:a8:7f:2c:95:61:c5:91:2c:58:57:63:26:5b:5b: 81:58:20:ba:80:a2:c2:f4:a4:d5:48:d0:d0:c6:e5:a9:9b:fe: 5b:6d:db:21:ee:95:a8:e8:3a:2d:0b:2d:bb:5f:e6:d9:48:ea: ca:12:41:0f:1c:49:6a:8c:28:a7:04:0e:e3:cb:12:9a:58:5d: 55:e8:61:c7:47:71:b8:ae:44:a7:97:69:b8:fe:bf:22:74:c8: 34:ea:e6:5f:89:c3:01:e1:9e:55:3a:e5:8f:ea:a9:a8:a7:45: 26:9f:51:bb:1a:75:36:75:5c:7b:e4:b2:d1:b7:02:ed:82:64: 86:76:df:95:12:27:67:ca:57:44:39:ec:d2:bd:6d:d2:fd:e2: fa:65:f1:be:6f:1c:55:8c:6f:36:53:f6:c0:82:4b:38:08:56: 53:26:d8:0e:15:3b:a2:cf:21:a7:41:25:82:8b:12:3d:6f:86: 26:d3:db:cf:c5:4d:59:09:8d:22:d7:46:37:42:25:ba:68:1f: 81:e6:f2:30:29:3e:29:c0:e4:5e:cf:aa:0d:9a:7d:e2:93:62: 51:38:54:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUwODIzMDYxOTAzWhcNMjUwODMwMDYxOTAzWjAYMRYwFAYD VQQDEw02OGE5NWQ1OC00M2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38jOeE9z6XoUJ3DNHpJp+oDAjuy8NkpLMTD+ETYQBjtImjkKwC6YuKIVfSoX owqt+Qe0H8KzY9L2EM4X333zelGhdxq4QSnTeSL65lp1FHRCf5L280xWADD8M7bk 42nolchFo0wjsozWRMGFWXQ8EpPZO8t2EiwsnVmPLqCyZK8zqkcx076NwmE4b6qD BYnPWmb7/skIsRjRw9GJCWLdT5bHrFgGmt+j56kYp+gWg30Y1tPTbu/Xt5DMBvkh FtH1art4N6OAJ+QFozZg1Fbpu2L2NZV/XKLz7G6mEb7HtFqMNTLfhhXcp5mqnRFs sF3/QDgL9jEPsUgk2eHh+47jSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpVD4mD QjXhOokbT3/H6mLyePjbMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl05OCABALpWK/c/2PoLlZExFC8iw519uwl7V4gfDJS8Q3ydiiaQzc qH8slWHFkSxYV2MmW1uBWCC6gKLC9KTVSNDQxuWpm/5bbdsh7pWo6DotCy27X+bZ SOrKEkEPHElqjCinBA7jyxKaWF1V6GHHR3G4rkSnl2m4/r8idMg06uZficMB4Z5V OuWP6qmop0Umn1G7GnU2dVx75LLRtwLtgmSGdt+VEidnyldEOezSvW3S/eL6ZfG+ bxxVjG82U/bAgks4CFZTJtgOFTuizyGnQSWCixI9b4Ym09vPxU1ZCY0i10Y3QiW6 aB+B5vIwKT4pwORez6oNmn3ik2JROFSQ -----END CERTIFICATE-----Generated at Sat Aug 23 21:39:50 2025 by rpki-client