$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: x3T23kKJ79VOPPD9G0sqkiQDW9dszws89sY1BHTdJ2w= Subject key identifier: 07:13:CA:CE:EE:4C:48:3F:91:D2:42:FE:39:D3:33:4F:9E:6F:FD:9C Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 0572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 0560 Signing time: Fri 22 Aug 2025 23:37:34 +0000 Manifest this update: Fri 22 Aug 2025 23:37:34 +0000 Manifest next update: Fri 29 Aug 2025 23:37:34 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: Inyl6LEet9savsR/ZmRZLVCgoj1VVHKYtSEr9fnBpFI=) 2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: ZDRfk70st2kL6l3vbu2GItPWm8/EuvkzaT+2ep7EeqM=) 3: 533744C46ECF11F0B2785815C4F9AE02.roa (hash: uUR+Mj6HGg21UkWJm4BYFdMGN66Z7qsc9O4hlsYytz4=) 4: 14A59A26E15B11ECA05C9236C4F9AE02.roa (hash: Qt+ZMJoprDK28LqGcHvKCLmc3Omlf+abplideksk7Gc=) 5: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: dy7HlTozJjIKYVnOC7Ac5E0oRz65i8VQkjJrYKePISw=) 6: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: RH9GugeUqxFAlpVwNYGHYX1wxhyc5gJGTmNYoQjg2Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: Aug 22 23:37:34 2025 GMT Not After : Aug 29 23:37:34 2025 GMT Subject: CN=68a8ff3e-e6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:e2:c1:5f:f7:c7:11:02:cd:2e:a4:df:80: 9d:27:e1:32:5b:7b:ed:54:39:b3:7a:ce:b5:16:b6: 29:7f:c6:99:84:20:1d:c9:4d:39:69:0a:8e:0b:6b: 49:3f:6c:29:fd:f3:9f:e7:01:c4:b1:49:3e:be:09: 55:05:30:99:79:2f:45:da:8a:e8:78:a6:00:7a:c2: 8f:81:da:ee:03:f9:0f:2b:02:cc:2b:74:ea:50:33: d1:a6:cf:4b:c3:a0:b8:88:87:5c:ee:f0:e0:66:77: 86:3f:ae:fa:ca:15:29:ce:6d:59:0b:12:8a:b1:ae: 39:33:eb:f4:be:2d:1c:79:7d:55:c3:6e:d5:05:46: e2:af:2c:0d:f4:88:be:c3:85:f1:37:e5:40:ae:8b: c6:40:9f:1c:64:08:5d:e2:92:8d:2c:b0:04:c8:d3: fe:90:48:9a:14:00:30:8c:29:f1:12:b1:ef:eb:09: 21:46:87:a1:01:d9:20:55:cb:d3:68:ea:2d:8d:6a: f8:3b:a9:b6:29:d2:94:19:83:f4:90:3c:3b:cc:c4: 6a:64:13:ec:71:82:00:38:79:10:66:0c:fb:27:35: 91:9d:1d:fc:72:f1:11:5d:57:bb:b9:ac:ea:b3:fd: f7:5d:c1:a3:4e:a5:cf:62:ec:6b:dc:a9:16:b1:19: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:13:CA:CE:EE:4C:48:3F:91:D2:42:FE:39:D3:33:4F:9E:6F:FD:9C X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:38:df:ee:d6:0c:16:48:95:f0:ac:e2:b9:8c:1e:2f:c5:59: e3:40:13:d8:a7:5f:34:83:8a:45:20:d6:b2:f4:36:8e:3f:36: 72:1d:d4:54:2a:64:cb:76:d8:d5:9d:65:ac:b1:aa:b7:d9:e9: 6f:36:97:c4:d4:7b:1a:91:70:de:df:68:9e:33:9c:08:34:f3: e7:91:6d:83:f1:e0:a7:7a:43:39:9b:16:d5:81:d1:a2:7a:fc: 95:b1:55:4f:61:c0:1e:52:21:b5:8a:49:a2:e5:13:e0:d4:ab: 2d:06:6a:80:c5:82:e2:27:b0:d6:87:72:ae:7c:65:a5:d2:08: 82:dd:9c:f4:35:7b:55:62:49:53:a8:15:b9:86:e6:31:37:89: 5d:b1:64:63:42:87:64:d4:01:e2:5b:80:d2:34:f2:72:40:8f: b1:12:7d:45:55:56:86:8b:51:c1:5d:11:05:a2:a7:48:45:85: 5d:e5:53:c4:0f:38:c9:ea:5f:fa:6c:d8:9a:f7:0d:fb:f5:e3: 50:ed:30:90:e1:34:68:8d:77:85:02:84:32:ea:bb:c9:2c:59: 13:32:81:bb:31:e4:fd:82:a0:03:f8:f6:e8:9a:c2:82:ea:c0: 52:e0:b6:a9:2d:61:1e:27:1e:bd:62:11:a7:1b:d3:73:f7:09: 5c:b1:77:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjUwODIyMjMzNzM0WhcNMjUwODI5MjMzNzM0WjAYMRYwFAYD VQQDEw02OGE4ZmYzZS1lNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bfiwV/3xxECzS6k34CdJ+EyW3vtVDmzes61FrYpf8aZhCAdyU05aQqOC2tJ P2wp/fOf5wHEsUk+vglVBTCZeS9F2oroeKYAesKPgdruA/kPKwLMK3TqUDPRps9L w6C4iIdc7vDgZneGP676yhUpzm1ZCxKKsa45M+v0vi0ceX1Vw27VBUbirywN9Ii+ w4XxN+VArovGQJ8cZAhd4pKNLLAEyNP+kEiaFAAwjCnxErHv6wkhRoehAdkgVcvT aOotjWr4O6m2KdKUGYP0kDw7zMRqZBPscYIAOHkQZgz7JzWRnR38cvERXVe7uazq s/33XcGjTqXPYuxr3KkWsRlbawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcTys7u TEg/kdJC/jnTM0+eb/2cMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWON/u1gwWSJXwrOK5jB4vxVnjQBPYp180g4pFINay9DaOPzZyHdRU KmTLdtjVnWWssaq32elvNpfE1HsakXDe32ieM5wINPPnkW2D8eCnekM5mxbVgdGi evyVsVVPYcAeUiG1ikmi5RPg1KstBmqAxYLiJ7DWh3KufGWl0giC3Zz0NXtVYklT qBW5huYxN4ldsWRjQodk1AHiW4DSNPJyQI+xEn1FVVaGi1HBXREFoqdIRYVd5VPE DzjJ6l/6bNia9w379eNQ7TCQ4TRojXeFAoQy6rvJLFkTMoG7MeT9gqAD+PbomsKC 6sBS4LapLWEeJx69YhGnG9Nz9wlcsXcW -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:46 2025 by rpki-client