$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: cA1tBD9RRlWoy+nio2B8al4W49XPIa3TBJvwT8PluE0= Subject key identifier: 34:59:AD:48:04:6A:61:04:ED:80:01:67:C8:91:FC:06:9C:C4:12:C1 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 0419 Signing time: Sat 23 Aug 2025 00:42:20 +0000 Manifest this update: Sat 23 Aug 2025 00:42:19 +0000 Manifest next update: Sat 30 Aug 2025 00:42:19 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: 2kOA7cFZmI//l/HAThnu9moyAcJZa83um4FZC2O4Fuw=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Aug 23 00:42:19 2025 GMT Not After : Aug 30 00:42:19 2025 GMT Subject: CN=68a90e6b-ea8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:8e:b6:19:d3:cf:f4:ed:4a:a9:3a:9b:5f: 76:86:68:da:b7:58:f4:cf:f2:ca:03:3d:5f:67:c8: 87:f8:3b:8e:03:d9:58:6c:1e:e0:ed:a2:c8:57:5f: fd:e5:f4:39:2e:0d:74:84:14:f6:68:64:31:fe:f5: 7c:8d:e4:31:0a:e2:37:61:15:54:bc:5b:5a:88:c9: 02:0d:91:01:92:4c:7a:cb:79:de:9d:2a:f7:d9:72: 72:a4:47:e8:e3:19:aa:2f:bd:c0:95:45:8f:ab:fa: a0:1c:35:60:6b:3e:b5:ab:6d:4e:ed:61:f6:5f:03: 1e:e7:d7:b0:be:3d:e8:de:b2:fb:d0:46:3e:0d:95: 01:81:c0:22:67:1d:d5:42:25:78:f1:b4:11:40:74: 96:97:e2:2c:91:b0:3c:fc:6e:eb:69:37:03:d9:06: fc:19:b3:ca:37:1c:44:c7:cc:39:3d:20:1d:5e:54: 75:8a:84:11:14:44:ed:d8:36:20:79:e8:93:8f:50: a7:8e:7a:f6:85:78:5a:ca:be:46:f3:e4:7b:51:db: e7:cc:79:fb:03:58:d5:98:0d:8e:78:04:99:62:19: 24:7a:a7:49:aa:e8:50:97:40:ab:35:49:e5:0b:45: ba:3b:26:d8:4a:ee:30:f8:e2:07:98:c9:15:9a:6b: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:59:AD:48:04:6A:61:04:ED:80:01:67:C8:91:FC:06:9C:C4:12:C1 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:10:6a:80:9f:9a:9f:0f:ec:cb:7e:9b:f3:d1:f2:da:83:de: da:53:fa:9b:3f:58:e6:4e:15:35:14:7d:82:49:1e:bc:15:33: 53:56:1c:b6:3f:ff:92:44:49:cb:16:25:1e:58:41:fc:ae:a0: 8e:e2:af:07:0d:31:73:16:7a:ee:d8:56:e5:64:8d:70:b8:63: 48:d6:83:6c:76:23:07:5a:e6:a1:6c:0f:27:a0:f2:38:e7:07: ad:77:e1:d4:18:9e:3c:45:f0:75:0f:f2:24:8d:6f:3f:67:6d: 39:c2:33:3f:1c:29:69:b9:cd:63:14:2e:3c:fd:c4:fe:92:bb: 0f:92:85:f4:ff:50:74:ed:ed:d2:f8:e1:86:82:3b:0c:7d:48: d4:26:d3:6a:26:a8:d8:e9:57:ff:5b:78:ea:1e:05:d4:4f:04: 02:bb:2e:9b:b8:f6:cb:37:f3:88:8c:02:59:97:5e:39:09:ca: 6a:fe:aa:21:9b:a8:17:76:1c:f6:4a:9c:98:a2:36:70:66:3a: cd:d2:74:d3:17:66:ad:93:72:78:4e:60:b1:38:62:3a:40:29: c1:2a:63:de:4d:d1:40:0e:32:2e:17:b6:3a:2b:73:8f:81:06: 19:f2:dc:85:df:d4:7d:d8:8b:07:6f:bb:fd:d5:f1:e6:c8:87: fd:7b:9f:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwODIzMDA0MjE5WhcNMjUwODMwMDA0MjE5WjAYMRYwFAYD VQQDEw02OGE5MGU2Yi1lYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OKOthnTz/TtSqk6m192hmjat1j0z/LKAz1fZ8iH+DuOA9lYbB7g7aLIV1/9 5fQ5Lg10hBT2aGQx/vV8jeQxCuI3YRVUvFtaiMkCDZEBkkx6y3nenSr32XJypEfo 4xmqL73AlUWPq/qgHDVgaz61q21O7WH2XwMe59ewvj3o3rL70EY+DZUBgcAiZx3V QiV48bQRQHSWl+IskbA8/G7raTcD2Qb8GbPKNxxEx8w5PSAdXlR1ioQRFETt2DYg eeiTj1Cnjnr2hXhayr5G8+R7UdvnzHn7A1jVmA2OeASZYhkkeqdJquhQl0CrNUnl C0W6OybYSu4w+OIHmMkVmmsbpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRZrUgE amEE7YABZ8iR/AacxBLBMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuEGqAn5qfD+zLfpvz0fLag97aU/qbP1jmThU1FH2CSR68FTNTVhy2 P/+SREnLFiUeWEH8rqCO4q8HDTFzFnru2FblZI1wuGNI1oNsdiMHWuahbA8noPI4 5wetd+HUGJ48RfB1D/IkjW8/Z205wjM/HClpuc1jFC48/cT+krsPkoX0/1B07e3S +OGGgjsMfUjUJtNqJqjY6Vf/W3jqHgXUTwQCuy6buPbLN/OIjAJZl145Ccpq/qoh m6gXdhz2SpyYojZwZjrN0nTTF2atk3J4TmCxOGI6QCnBKmPeTdFADjIuF7Y6K3OP gQYZ8tyF39R92IsHb7v91fHmyIf9e5/o -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:51 2025 by rpki-client