$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json) Hash identifier: tp0S7jrNpS1dH28USg2dfSPF3Gg2UFinxmDHks0aRwM= Subject key identifier: C9:38:E4:49:A8:F9:48:0D:9F:BE:B0:C1:7D:01:97:D1:0D:DF:21:6E Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft Manifest number: 73 Signing time: Sat 23 Aug 2025 07:05:30 +0000 Manifest this update: Sat 23 Aug 2025 07:05:30 +0000 Manifest next update: Sat 30 Aug 2025 07:05:30 +0000 Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: 0PnuPmiwHm8W6LlJoG8aqCUm86XRJCCMzz/XApERvYU=) 2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Validity Not Before: Aug 23 07:05:30 2025 GMT Not After : Aug 30 07:05:30 2025 GMT Subject: CN=68a9683a-e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:80:a9:6f:4c:80:15:b9:cb:2b:67:49:33: c0:bd:e9:15:1c:c5:97:3d:0f:8d:65:d7:67:cd:61: 56:4f:fe:c8:fe:c4:e2:f1:79:8a:bf:37:34:25:aa: 58:8e:d4:1e:b6:a8:52:64:ac:c9:d9:c6:a3:41:b0: c4:4a:d8:c5:fb:60:fc:8e:8d:c0:99:f0:a8:70:9a: 4e:f2:bc:01:ff:84:1e:25:07:2d:e1:bc:24:53:36: 27:a1:03:ca:25:5e:d5:b3:d0:4e:a3:85:59:55:ab: 12:00:f5:0c:7a:e9:d7:c5:34:dc:db:b6:dc:0c:40: ef:b7:22:5c:1a:c8:37:88:05:c2:00:9a:65:72:3d: 9c:5f:32:b5:c8:be:97:21:2e:db:b2:bd:af:6a:4a: 35:36:dc:47:30:c4:cd:78:7f:00:3c:8f:1d:67:c3: 9b:16:4d:c6:67:15:7a:0f:32:8b:d7:12:50:13:c4: f7:20:ef:7b:c5:08:3c:ba:08:0c:f5:b4:70:e3:3e: 2c:f2:86:3a:fe:1d:6b:4f:d1:0e:69:e4:95:9f:ae: 70:ad:e5:c1:fe:f6:ec:26:e9:51:74:00:ca:af:0f: e0:9d:ca:9b:4f:60:63:c9:82:f8:08:79:14:b7:6d: 34:0f:1d:bd:78:90:b2:b9:a8:b9:3c:85:1b:dc:d4: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:38:E4:49:A8:F9:48:0D:9F:BE:B0:C1:7D:01:97:D1:0D:DF:21:6E X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:84:8b:33:10:1d:c0:8f:c8:2e:36:9e:93:9e:f5:03:c9:f6: 6c:8d:29:a2:48:d6:40:15:a4:4b:f4:ee:4b:47:25:81:f6:78: 2e:62:f4:4d:e4:57:81:13:28:ec:48:32:16:df:cf:e3:91:f4: a7:12:fc:69:78:4a:10:a3:78:14:cc:7c:b8:1c:65:ed:4c:ee: 84:c7:8f:cd:f6:80:a8:0e:68:b0:ea:3a:cc:49:53:33:28:65: a4:83:7b:95:e3:40:35:43:05:0e:ae:12:cc:45:07:19:93:e8: 7e:99:d9:69:6d:45:f0:26:42:d9:25:85:9b:52:a2:6e:1b:cc: 0f:af:48:dd:e4:25:2c:50:db:2a:4d:cb:9e:ce:63:bc:10:7e: 2e:72:d0:f4:46:6d:9b:2f:f4:43:8d:64:f1:f8:f3:ec:d5:f9: 98:28:0c:7e:88:c2:7f:a5:42:f3:91:d8:c8:e4:70:a9:ac:ba: 81:55:d1:00:ff:16:ab:7f:ea:59:20:f2:9a:a6:aa:b2:6b:0c: 0a:62:28:78:3a:96:ac:05:19:89:55:c3:9e:f8:db:e0:01:c6: f4:55:10:5f:d6:79:87:05:f0:df:31:7c:be:1c:db:09:19:a4: e6:ab:28:14:a4:08:44:bc:76:8e:a9:92:44:d4:59:a0:09:5e: d1:04:70:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMUE2RUI3NUIyQjQ3MTM2MEVENUE5MjVDMzUxQ0M0MEMx OTQxNjgyNzAeFw0yNTA4MjMwNzA1MzBaFw0yNTA4MzAwNzA1MzBaMBgxFjAUBgNV BAMTDTY4YTk2ODNhLWUzZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVyYCpb0yAFbnLK2dJM8C96RUcxZc9D41l12fNYVZP/sj+xOLxeYq/NzQlqliO 1B62qFJkrMnZxqNBsMRK2MX7YPyOjcCZ8Khwmk7yvAH/hB4lBy3hvCRTNiehA8ol XtWz0E6jhVlVqxIA9Qx66dfFNNzbttwMQO+3IlwayDeIBcIAmmVyPZxfMrXIvpch Ltuyva9qSjU23EcwxM14fwA8jx1nw5sWTcZnFXoPMovXElATxPcg73vFCDy6CAz1 tHDjPizyhjr+HWtP0Q5p5JWfrnCt5cH+9uwm6VF0AMqvD+CdyptPYGPJgvgIeRS3 bTQPHb14kLK5qLk8hRvc1LFXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyTjkSaj5 SA2fvrDBfQGX0Q3fIW4wHwYDVR0jBBgwFoAUGm63WytHE2DtWpJcNRzEDBlBaCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzMzMDk2RUM4RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR202M1d5dEhFMkR0V3BKY05SekVEQmxCYUNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzMzMDk2RUM4RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJE dFdwSmNOUnpFREJsQmFDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFyEizMQHcCPyC42npOe9QPJ9myNKaJI1kAVpEv07ktHJYH2eC5i9E3k V4ETKOxIMhbfz+OR9KcS/Gl4ShCjeBTMfLgcZe1M7oTHj832gKgOaLDqOsxJUzMo ZaSDe5XjQDVDBQ6uEsxFBxmT6H6Z2WltRfAmQtklhZtSom4bzA+vSN3kJSxQ2ypN y57OY7wQfi5y0PRGbZsv9EONZPH48+zV+ZgoDH6Iwn+lQvOR2MjkcKmsuoFV0QD/ Fqt/6lkg8pqmqrJrDApiKHg6lqwFGYlVw5742+ABxvRVEF/WeYcF8N8xfL4c2wkZ pOarKBSkCES8do6pkkTUWaAJXtEEcJI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:53 2025 by rpki-client