$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft File: gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json) Hash identifier: w1wmvGJtob8vXW4eKm/OKQHWIpm6TvHXoq/8IZyC2j8= Subject key identifier: DB:A6:9F:E9:28:BD:75:22:D5:92:87:F2:0D:E3:06:EC:6F:BE:E7:11 Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft Manifest number: 34E0 Signing time: Fri 22 Aug 2025 14:27:42 +0000 Manifest this update: Fri 22 Aug 2025 14:27:41 +0000 Manifest next update: Fri 29 Aug 2025 14:27:41 +0000 Files and hashes: 1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: S8JgIM74PnjiTV0JA74JZKhXuOwx618U/wXr5gQPqPo=) 2: 60020E9436F511F0B22B5E24C4F9AE02.roa (hash: JetDV/3YonU90g4PmXfe9VaHyV+YwCaNx8AIiUOEL+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Validity Not Before: Aug 22 14:27:41 2025 GMT Not After : Aug 29 14:27:41 2025 GMT Subject: CN=68a87e5d-454a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:76:38:d4:bd:f4:4b:35:cf:b4:e2:f2:5d: fd:b2:e2:f0:bc:29:40:75:ec:4d:db:93:47:8f:bf: 6f:82:54:8c:46:9c:68:fb:35:cc:2c:86:5b:12:cb: 55:21:85:05:53:03:7d:b9:e4:90:0c:ef:fc:f1:d1: 9c:d6:b6:74:ca:5b:bd:68:a9:9a:cf:f1:fd:d9:7e: 95:69:94:dc:bb:38:16:ba:af:0f:ff:f0:ec:39:b7: 84:06:92:1d:2c:1d:a5:63:fb:f1:4e:07:d9:5c:e4: 72:95:b1:1c:c4:f5:e6:f7:74:51:86:2d:de:e8:a7: 43:ed:a9:66:b5:ea:1e:9c:6f:1f:db:f7:68:57:56: 43:02:29:fa:ba:7e:11:29:01:ee:93:32:93:20:ad: 78:30:2c:2c:53:49:c4:e4:35:23:77:7b:57:ab:96: b3:ca:fa:e2:4c:f9:f0:49:a5:55:e3:01:e6:e2:52: 8e:d7:62:f7:ae:b0:c6:e2:1f:35:3e:40:9b:9c:61: d4:6f:00:50:c1:07:1b:73:14:25:16:1e:7a:6b:d5: 61:65:c2:df:c1:c7:b1:00:cf:15:5c:65:b0:6b:b2: 7c:fd:bb:8a:a1:d6:50:2d:fc:9f:14:60:6d:d1:04: 93:6d:a4:ce:d4:a4:32:62:dc:f5:bb:80:da:bf:44: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A6:9F:E9:28:BD:75:22:D5:92:87:F2:0D:E3:06:EC:6F:BE:E7:11 X509v3 Authority Key Identifier: keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:35:c1:d4:f9:de:46:13:60:62:47:e1:3b:05:8e:f7:a2:f5: e1:bf:d9:e8:c7:ed:c9:ca:6e:b8:e0:33:44:2a:91:80:c1:b6: c5:5a:06:f8:3d:d9:62:70:39:6a:60:19:b0:f5:1c:89:f0:bd: 13:7c:96:87:00:6a:84:0e:bb:a2:bd:42:28:07:20:d4:8c:da: c8:05:a3:e8:bd:06:15:ec:19:c1:b8:72:e7:1b:ea:47:19:36: 5e:7d:b2:50:da:92:3a:8d:58:e8:84:6a:28:dd:9f:6d:64:a7: 61:63:05:d8:56:a2:6a:aa:6c:c1:5b:f5:52:23:86:ab:2c:ee: 69:9e:d2:70:ee:20:1a:96:2c:7f:f1:81:3f:85:7c:37:e4:11: 0c:e9:62:24:30:70:dc:fd:54:2f:aa:dd:b5:60:1b:1d:4c:7e: 99:ab:6f:87:d7:33:a7:e0:87:9b:0b:bb:05:3b:b1:55:52:55: f5:76:8d:3a:5e:8a:6d:c5:08:26:f7:5e:fa:75:a3:ab:61:c0: e8:cb:32:93:f9:c3:83:88:d0:a9:96:41:a5:d8:0e:45:28:31: 1a:fc:ad:39:53:9a:ff:ee:93:ce:9e:09:02:a7:b5:91:b2:8a: ce:08:28:d5:2e:3f:db:50:81:b7:16:42:cf:02:7a:e0:a6:a9: ae:18:f9:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0 QzQ1MzM0MDUwHhcNMjUwODIyMTQyNzQxWhcNMjUwODI5MTQyNzQxWjAYMRYwFAYD VQQDEw02OGE4N2U1ZC00NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo812ONS99Es1z7Ti8l39suLwvClAdexN25NHj79vglSMRpxo+zXMLIZbEstV IYUFUwN9ueSQDO/88dGc1rZ0ylu9aKmaz/H92X6VaZTcuzgWuq8P//DsObeEBpId LB2lY/vxTgfZXORylbEcxPXm93RRhi3e6KdD7almteoenG8f2/doV1ZDAin6un4R KQHukzKTIK14MCwsU0nE5DUjd3tXq5azyvriTPnwSaVV4wHm4lKO12L3rrDG4h81 PkCbnGHUbwBQwQcbcxQlFh56a9VhZcLfwcexAM8VXGWwa7J8/buKodZQLfyfFGBt 0QSTbaTO1KQyYtz1u4Dav0SzIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNumn+ko vXUi1ZKH8g3jBuxvvucRMB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkNGQy9CRjg0QjU3NDFEODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMy SDNFMjhKY1p2ODlNUlROQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGNcHU+d5GE2BiR+E7BY73ovXhv9nox+3Jym644DNEKpGAwbbFWgb4 PdlicDlqYBmw9RyJ8L0TfJaHAGqEDruivUIoByDUjNrIBaPovQYV7BnBuHLnG+pH GTZefbJQ2pI6jVjohGoo3Z9tZKdhYwXYVqJqqmzBW/VSI4arLO5pntJw7iAalix/ 8YE/hXw35BEM6WIkMHDc/VQvqt21YBsdTH6Zq2+H1zOn4IebC7sFO7FVUlX1do06 XoptxQgm9176daOrYcDoyzKT+cODiNCplkGl2A5FKDEa/K05U5r/7pPOngkCp7WR sorOCCjVLj/bUIG3FkLPAnrgpqmuGPl6 -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:58 2025 by rpki-client