$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: dwv55YCEYUCxG/wM6utIwbkoiOgHGhUHPmJU+W0hxv4= Subject key identifier: 5B:95:59:F4:8A:9C:C2:E4:60:C6:38:F4:72:2B:B1:6E:0D:AA:AD:16 Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 0825 Signing time: Fri 22 Aug 2025 20:56:28 +0000 Manifest this update: Fri 22 Aug 2025 20:56:28 +0000 Manifest next update: Fri 29 Aug 2025 20:56:28 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: X/1bdT6MoaOY8IHvI9UhsxDp8sGmVTMhO9SWNa/ueEY=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: Aug 22 20:56:28 2025 GMT Not After : Aug 29 20:56:28 2025 GMT Subject: CN=68a8d97c-8425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:9b:76:f9:5d:21:6b:06:18:ce:5f:4a:14: cf:fb:35:8f:45:bf:66:44:35:a1:e1:97:74:7b:b8: 63:4a:8e:81:d8:5c:9b:95:e5:a0:98:4c:7d:f2:00: b7:ab:f2:8a:f7:c5:50:0c:6d:12:a5:f0:5e:fa:48: 06:88:97:a0:9e:f9:05:98:a5:56:f3:19:6e:2b:1c: c9:59:eb:84:c4:04:7c:6b:cc:d5:b7:4e:c6:c3:a7: 36:c5:82:f5:7c:bb:31:42:23:f9:82:93:6b:fe:40: dc:e9:52:ed:9f:49:ca:09:31:24:1b:b5:74:15:cf: 8b:0f:d2:d7:b2:fb:99:a7:f9:28:84:03:60:af:be: 17:7c:b5:4a:3c:79:b5:34:23:5e:2d:5f:90:d8:f8: a6:07:b6:6a:28:6e:22:06:a3:b5:c3:4b:cc:74:0d: 79:af:ac:2f:b3:ce:c0:4c:20:b4:b0:8c:20:3b:12: 2d:7d:9e:ae:50:57:1d:fc:f1:c5:e5:6c:1d:28:4f: 10:1e:b6:5a:7e:f0:48:d9:02:d5:15:c8:af:d4:50: 06:6d:8e:c0:29:5d:a8:8d:1f:01:12:fd:f8:ab:08: c7:e8:84:a9:ef:6c:09:21:ca:c9:2b:2b:fa:95:f1: 13:cb:bc:f6:60:92:32:e9:62:d3:a4:44:5c:15:39: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:95:59:F4:8A:9C:C2:E4:60:C6:38:F4:72:2B:B1:6E:0D:AA:AD:16 X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:11:fd:40:59:04:a6:af:e7:6a:71:7e:78:99:6f:de:bd:03: e1:f0:2d:9d:f2:a8:6a:33:20:81:d1:00:e2:6a:5d:84:e7:c5: 81:c3:6c:99:3d:25:c6:24:09:63:08:5c:ac:e9:1a:fa:f3:34: ca:52:05:ce:b9:fc:4f:21:22:86:06:7c:da:51:64:4b:3b:d4: 8b:d4:a5:f1:3b:3c:10:e9:10:76:19:fa:91:e1:ab:67:33:51: 2e:ce:5d:6f:1d:e2:9b:d5:0e:88:85:ca:48:cc:3d:05:b2:31: 6a:a8:dd:4c:be:10:c8:11:4b:66:df:97:6c:af:4f:f6:8e:80: bc:0d:19:ec:14:ff:0d:96:00:55:b4:75:5b:6c:33:a2:a3:1d: fb:74:76:f2:d2:53:02:5c:fe:17:06:86:c4:ba:21:27:4f:ca: 0a:c3:0e:9d:ca:ab:a3:f6:8b:b2:2c:3c:69:31:8a:a2:ff:a1: 51:a6:4a:a7:ff:31:ad:aa:de:da:b3:d8:aa:d2:4d:f8:97:9d: 0f:b7:db:fb:f8:0b:2f:92:78:5b:5b:11:02:03:d8:e9:1a:03: b7:68:ce:34:e6:75:b8:3e:60:5e:81:26:de:a8:69:45:00:15: 87:5f:4e:f8:15:c3:b9:ac:8a:c3:6a:f8:69:64:f8:8b:4f:c2: d1:f8:16:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUwODIyMjA1NjI4WhcNMjUwODI5MjA1NjI4WjAYMRYwFAYD VQQDEw02OGE4ZDk3Yy04NDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue2bdvldIWsGGM5fShTP+zWPRb9mRDWh4Zd0e7hjSo6B2FybleWgmEx98gC3 q/KK98VQDG0SpfBe+kgGiJegnvkFmKVW8xluKxzJWeuExAR8a8zVt07Gw6c2xYL1 fLsxQiP5gpNr/kDc6VLtn0nKCTEkG7V0Fc+LD9LXsvuZp/kohANgr74XfLVKPHm1 NCNeLV+Q2PimB7ZqKG4iBqO1w0vMdA15r6wvs87ATCC0sIwgOxItfZ6uUFcd/PHF 5WwdKE8QHrZafvBI2QLVFciv1FAGbY7AKV2ojR8BEv34qwjH6ISp72wJIcrJKyv6 lfETy7z2YJIy6WLTpERcFTkc1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuVWfSK nMLkYMY49HIrsW4Nqq0WMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEEf1AWQSmr+dqcX54mW/evQPh8C2d8qhqMyCB0QDial2E58WBw2yZ PSXGJAljCFys6Rr68zTKUgXOufxPISKGBnzaUWRLO9SL1KXxOzwQ6RB2GfqR4atn M1Euzl1vHeKb1Q6IhcpIzD0FsjFqqN1MvhDIEUtm35dsr0/2joC8DRnsFP8NlgBV tHVbbDOiox37dHby0lMCXP4XBobEuiEnT8oKww6dyquj9ouyLDxpMYqi/6FRpkqn /zGtqt7as9iq0k34l50Pt9v7+AsvknhbWxECA9jpGgO3aM405nW4PmBegSbeqGlF ABWHX074FcO5rIrDavhpZPiLT8LR+BYi -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:13 2025 by rpki-client