$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: z1cWQNVHRNRmhYyZoBzVIZmEyXUylWJuB49woAH3hjA= Subject key identifier: 3E:90:F8:6B:46:8B:D9:88:45:57:D5:57:72:D0:C5:CD:28:50:EF:30 Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 05AA Signing time: Fri 22 Aug 2025 23:21:27 +0000 Manifest this update: Fri 22 Aug 2025 23:21:27 +0000 Manifest next update: Fri 29 Aug 2025 23:21:27 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: DBnQS7L++MiX1vMXyrIL6IgCUL3bdEaIOybJY1Xwb8M=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: ZlGg1d2CMvxXbe2cdJaMpBCrBVtHW8eJFry9EmWD8kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: Aug 22 23:21:27 2025 GMT Not After : Aug 29 23:21:27 2025 GMT Subject: CN=68a8fb77-9fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:61:4e:81:8b:7b:7e:95:16:89:a3:d8:86: 47:3a:90:0f:6b:24:f2:68:a9:62:da:41:e8:80:7a: aa:dd:35:51:6d:64:25:7c:76:ce:4a:4f:a8:fe:db: 5a:9e:75:47:d8:3c:2e:1a:0d:b9:d7:83:1f:85:00: 78:25:b3:fc:b1:b7:cd:d6:ed:4b:70:0b:d1:11:b2: 9e:6b:fc:47:cd:d1:c6:43:45:53:ca:fe:fb:93:7b: dd:2a:22:6b:3c:ae:f8:fa:a2:df:41:87:6b:cd:8f: ee:ec:d1:59:fe:0d:61:71:f9:1e:98:02:d6:aa:bc: 95:2a:a4:80:af:c6:a5:69:65:4a:32:93:ef:98:73: 84:39:0c:23:bb:cd:3e:ec:38:a6:3c:ed:d0:ac:09: 29:63:45:25:a2:ef:4f:ae:fe:03:b2:a6:73:b4:d3: 88:a1:8b:2f:d9:b7:da:05:16:09:b0:21:42:6b:e2: 5f:10:3e:39:d6:cc:86:b1:2f:51:e0:50:06:ee:5d: 54:b3:1e:31:b2:39:69:cd:80:1c:33:ee:9d:5e:09: dc:46:9c:f6:f8:bc:3a:3f:2d:eb:3f:c2:05:29:ae: 77:85:f3:f5:2d:27:35:a7:29:09:c0:cc:48:0b:f2: eb:fa:ad:98:b8:4e:b5:20:0d:ab:9a:29:ea:a3:fe: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:90:F8:6B:46:8B:D9:88:45:57:D5:57:72:D0:C5:CD:28:50:EF:30 X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9d:b3:bc:51:84:90:2a:28:f2:19:8b:5b:15:bb:8e:91:1e: 93:07:26:aa:91:fb:47:7f:98:69:db:5c:e2:d4:66:c8:15:48: 53:1d:35:f7:59:73:78:36:92:2d:82:74:bc:06:04:71:82:cc: f2:f5:c6:8e:41:ce:01:74:49:0a:a5:38:a6:b9:52:bc:96:8f: 1e:55:43:c3:44:e2:8c:35:ce:c0:61:82:48:e6:57:f3:92:97: f1:b0:b2:d6:4e:a0:c4:f4:74:4f:65:a7:a6:14:cd:ca:c3:b8: 91:ac:a4:79:2f:62:d2:5a:76:0b:d7:e6:26:ca:cc:f0:71:09: e6:7e:fd:f1:3a:95:3c:08:4d:07:40:5c:12:3c:6b:b4:fc:9d: 58:92:99:0e:e4:1d:55:29:d5:ad:c1:be:e9:82:51:cd:6f:a1: eb:d0:10:8a:49:5e:de:1c:47:1f:d2:23:8f:e3:e8:6b:46:d0: 76:0d:93:ab:df:62:1c:a5:36:98:eb:a9:4c:e1:42:33:99:1c: b1:c3:fb:df:2d:66:a8:b2:71:43:6f:0d:fa:2d:7a:0c:59:fd: b9:82:08:d5:17:12:e9:3f:44:46:22:01:6b:78:db:01:c5:fe: 05:ec:0b:be:77:c2:10:e9:87:f5:82:b4:76:a2:74:b3:d2:6d: 04:fa:ce:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjUwODIyMjMyMTI3WhcNMjUwODI5MjMyMTI3WjAYMRYwFAYD VQQDEw02OGE4ZmI3Ny05ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPRhToGLe36VFomj2IZHOpAPayTyaKli2kHogHqq3TVRbWQlfHbOSk+o/tta nnVH2DwuGg2514MfhQB4JbP8sbfN1u1LcAvREbKea/xHzdHGQ0VTyv77k3vdKiJr PK74+qLfQYdrzY/u7NFZ/g1hcfkemALWqryVKqSAr8alaWVKMpPvmHOEOQwju80+ 7DimPO3QrAkpY0Ulou9Prv4DsqZztNOIoYsv2bfaBRYJsCFCa+JfED451syGsS9R 4FAG7l1Usx4xsjlpzYAcM+6dXgncRpz2+Lw6Py3rP8IFKa53hfP1LSc1pykJwMxI C/Lr+q2YuE61IA2rminqo/7OYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6Q+GtG i9mIRVfVV3LQxc0oUO8wMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwnbO8UYSQKijyGYtbFbuOkR6TByaqkftHf5hp21zi1GbIFUhTHTX3 WXN4NpItgnS8BgRxgszy9caOQc4BdEkKpTimuVK8lo8eVUPDROKMNc7AYYJI5lfz kpfxsLLWTqDE9HRPZaemFM3Kw7iRrKR5L2LSWnYL1+YmyszwcQnmfv3xOpU8CE0H QFwSPGu0/J1YkpkO5B1VKdWtwb7pglHNb6Hr0BCKSV7eHEcf0iOP4+hrRtB2DZOr 32IcpTaY66lM4UIzmRyxw/vfLWaosnFDbw36LXoMWf25ggjVFxLpP0RGIgFreNsB xf4F7Au+d8IQ6Yf1grR2onSz0m0E+s4w -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:41 2025 by rpki-client