$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: 0ydBV31Pa8biLBST19jWkzxezFFnCKSr1NN3kkhezzM= Subject key identifier: 0E:17:5F:B9:17:2C:B9:32:6C:D9:BE:50:CB:D9:8A:65:87:FF:FD:A9 Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 04E3 Signing time: Fri 22 Aug 2025 23:58:04 +0000 Manifest this update: Fri 22 Aug 2025 23:58:04 +0000 Manifest next update: Fri 29 Aug 2025 23:58:04 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: RS9Cz9NMmIkZH6awhtwvX8GH7mGiqCJ+/c+90dzazNE=) 2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: OgxkGLoBh6HGvCB/fRUVvIfnQUfu5bCnmyvUAGDoCoM=) 3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 7kV6yNtY0OEuz4gBv/+8ihVZGqJgfv8o7qKBHm8GmBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: Aug 22 23:58:04 2025 GMT Not After : Aug 29 23:58:04 2025 GMT Subject: CN=68a9040c-591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:93:6a:a6:90:d9:61:e0:02:f1:1b:0e:49: 50:43:75:01:3d:b8:69:ae:c6:1f:c3:1b:2b:5a:19: 2f:5f:24:1c:a9:e8:dd:6d:4e:15:0a:4a:58:b3:46: 15:d6:45:76:a6:57:7e:69:c6:4f:13:1a:74:d8:86: bb:8c:fe:ae:b1:7d:3f:af:b2:78:c1:f8:a9:16:3e: eb:b3:31:2b:e0:73:a0:93:9d:20:b2:3e:61:3e:e7: 22:87:48:6c:d1:95:43:17:af:b2:3f:93:b4:20:9c: 62:3b:c7:9e:38:9f:2c:d3:da:62:a7:13:91:34:b3: 8f:37:06:ad:69:b3:bc:39:5c:bb:d3:63:c0:46:2f: 4d:4a:25:ce:74:20:07:1b:af:2c:d9:f7:6a:f4:2a: b0:79:b8:a8:ed:f9:5d:f7:07:32:03:b3:ee:fd:56: cb:8b:c9:d0:d1:be:b0:24:ef:0c:c9:cd:26:9f:83: 9f:f7:74:2f:25:0a:47:30:66:a1:a5:28:32:5d:e1: 62:7e:3b:56:1d:7d:93:ba:f9:c3:2e:86:f5:f3:35: 80:c6:d2:7c:58:b7:97:59:6e:ef:99:48:fd:ba:7d: f7:2a:c6:8c:f4:9c:22:1a:ea:e7:f8:18:60:b2:bd: fd:33:89:c5:3d:92:8d:0a:45:81:3e:a9:cc:17:87: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:5F:B9:17:2C:B9:32:6C:D9:BE:50:CB:D9:8A:65:87:FF:FD:A9 X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:cb:5a:72:4f:63:c0:23:1b:22:69:dc:35:3f:df:3b:c1:86: ac:ec:b8:72:8b:70:5e:79:9b:60:37:3c:3b:b3:00:cd:2d:22: 7b:ec:55:49:80:0b:78:9b:4d:df:6c:0c:70:50:52:65:c2:11: c1:fb:f6:19:b7:06:be:96:e5:10:ac:0c:7f:c0:ec:f3:e7:d3: 8d:55:1c:a1:0b:72:e2:f1:02:87:ca:fb:46:92:8f:8d:b4:8e: 83:94:d5:76:c5:c7:fb:89:f0:b6:61:41:f7:21:1b:b2:00:ad: ba:62:ea:76:84:ac:e6:ac:e1:cc:fc:b0:ac:3b:42:b0:6d:49: 6d:e5:29:cf:a1:a4:1e:32:44:10:53:10:28:e7:a9:68:10:c1: f7:92:c9:91:a4:9a:f2:31:9c:ee:23:aa:59:34:9a:cf:f7:54: 68:69:44:39:09:20:60:f1:68:b7:a7:d9:30:06:a4:47:c8:9c: a4:d1:93:ad:fe:7a:9b:6c:a6:e4:b7:25:ed:b3:03:da:78:b4: ee:91:03:19:28:6b:63:27:6b:e3:28:57:a9:0a:90:59:13:3a: d7:1e:73:b5:1a:7e:42:68:c7:3f:22:09:1d:5d:ed:fc:2f:a3: 30:e8:3b:4a:99:49:96:2d:02:ec:fa:8d:97:cf:e7:74:7d:17: c3:50:67:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjUwODIyMjM1ODA0WhcNMjUwODI5MjM1ODA0WjAYMRYwFAYD VQQDEw02OGE5MDQwYy01OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUeTaqaQ2WHgAvEbDklQQ3UBPbhprsYfwxsrWhkvXyQcqejdbU4VCkpYs0YV 1kV2pld+acZPExp02Ia7jP6usX0/r7J4wfipFj7rszEr4HOgk50gsj5hPucih0hs 0ZVDF6+yP5O0IJxiO8eeOJ8s09pipxORNLOPNwatabO8OVy702PARi9NSiXOdCAH G68s2fdq9Cqwebio7fld9wcyA7Pu/VbLi8nQ0b6wJO8Myc0mn4Of93QvJQpHMGah pSgyXeFifjtWHX2TuvnDLob18zWAxtJ8WLeXWW7vmUj9un33KsaM9JwiGurn+Bhg sr39M4nFPZKNCkWBPqnMF4ce3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4XX7kX LLkybNm+UMvZimWH//2pMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxy1pyT2PAIxsiadw1P987wYas7Lhyi3BeeZtgNzw7swDNLSJ77FVJ gAt4m03fbAxwUFJlwhHB+/YZtwa+luUQrAx/wOzz59ONVRyhC3Li8QKHyvtGko+N tI6DlNV2xcf7ifC2YUH3IRuyAK26Yup2hKzmrOHM/LCsO0KwbUlt5SnPoaQeMkQQ UxAo56loEMH3ksmRpJryMZzuI6pZNJrP91RoaUQ5CSBg8Wi3p9kwBqRHyJyk0ZOt /nqbbKbktyXtswPaeLTukQMZKGtjJ2vjKFepCpBZEzrXHnO1Gn5CaMc/IgkdXe38 L6Mw6DtKmUmWLQLs+o2Xz+d0fRfDUGdn -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:30 2025 by rpki-client