$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: oTs4fvv+e3wOlMhd4n56EO742LIdT9jBAdwPnl37lTU= Subject key identifier: 01:6E:10:6F:63:DE:8F:5F:4F:9F:9D:1D:40:D3:31:EB:10:E5:4F:B8 Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 082A Signing time: Fri 22 Aug 2025 20:57:51 +0000 Manifest this update: Fri 22 Aug 2025 20:57:50 +0000 Manifest next update: Fri 29 Aug 2025 20:57:50 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: gF18jP9HlEmtFQEY7g49UlFObrwymLfVDhJcpiUdKQA=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: muRqFTnS2+oQQUYzYuXwP+mAhzn5jlwAwgRQL1uNMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Aug 22 20:57:50 2025 GMT Not After : Aug 29 20:57:50 2025 GMT Subject: CN=68a8d9cf-04f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:8b:44:ca:11:fa:2a:04:4e:0b:77:f6:64: 4c:08:dd:4a:69:b5:d1:31:23:8d:59:7b:52:e4:50: 82:43:c1:22:f5:3c:f1:a9:18:79:8a:3b:ee:df:af: 4c:a0:1d:71:ab:6b:b8:76:6c:24:4b:b5:ac:49:48: 54:68:bf:aa:d7:82:21:bd:81:39:2d:7d:0f:d0:f8: 2d:b2:bc:49:77:f4:39:01:cf:77:31:db:04:97:dd: 93:c3:16:5c:3a:d1:47:a2:6f:f2:60:7f:b5:d8:57: ab:59:36:dc:ec:a5:4a:5f:8c:ab:1f:03:5f:0f:74: 84:4f:3c:cc:7d:38:e6:f0:ff:2e:02:b6:52:24:cf: d8:cd:52:d8:fa:6d:f4:5f:a4:4f:63:22:d4:74:66: 58:88:dd:12:dd:30:94:f9:93:af:da:a6:ba:bd:fd: ae:ac:fc:5b:dc:06:ce:1a:fe:77:9d:2b:56:6f:ad: 09:77:bd:6c:9c:ca:3b:13:70:75:04:7e:46:90:bd: 1c:cd:10:4c:1a:37:bd:8f:ae:15:46:b2:4d:24:74: d0:3b:e0:d3:a3:4c:e4:8e:d6:89:73:c2:c8:f8:9c: f0:79:c8:4c:89:3a:b7:e7:eb:68:56:17:8c:53:a0: 39:4c:92:c1:97:31:46:cc:17:3f:f8:97:d1:26:6f: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6E:10:6F:63:DE:8F:5F:4F:9F:9D:1D:40:D3:31:EB:10:E5:4F:B8 X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:85:d7:71:c8:6e:8e:94:ef:62:4f:8e:ab:fb:81:51:83:45: 46:23:a5:a6:24:51:51:8d:73:31:85:85:2d:74:1c:4f:d2:94: 84:19:43:fe:5c:23:7f:53:ff:c7:bb:89:c8:b4:67:9f:95:61: 72:02:b8:c0:9f:f8:e5:7d:58:2f:28:e9:1d:9e:6b:5b:5f:fc: 9e:d3:d7:03:d7:62:a1:60:ea:bb:83:89:7c:f8:ea:26:34:09: b9:16:d6:81:e0:89:26:ad:a3:30:53:02:8a:ae:53:8e:aa:c2: 80:6b:7d:0b:86:66:32:c6:59:96:fa:bb:6f:ed:ee:c0:79:03: dc:71:66:eb:bf:7b:10:cb:9e:ef:24:4e:e6:33:61:f2:cc:3a: a7:e7:11:28:22:c2:45:f3:bd:95:44:07:a7:07:90:4c:c1:d8: 35:ee:37:31:a7:99:9a:fd:08:f1:ad:f0:8c:e5:f1:2f:f3:d9: 86:4b:1a:3d:4c:78:95:37:4e:8d:9e:b5:8e:92:2c:4a:a4:3f: e2:9f:32:fb:ce:52:e8:f0:bb:66:ab:de:96:ca:8f:23:76:72: 02:8c:22:71:ef:4d:73:54:c1:0a:9a:ce:5d:db:1f:aa:bf:61: 62:d6:11:36:c9:6c:4c:58:a1:94:17:99:29:86:6e:6e:82:13: 90:63:0e:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjUwODIyMjA1NzUwWhcNMjUwODI5MjA1NzUwWjAYMRYwFAYD VQQDEw02OGE4ZDljZi0wNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxaLRMoR+ioETgt39mRMCN1KabXRMSONWXtS5FCCQ8Ei9TzxqRh5ijvu369M oB1xq2u4dmwkS7WsSUhUaL+q14IhvYE5LX0P0PgtsrxJd/Q5Ac93MdsEl92TwxZc OtFHom/yYH+12FerWTbc7KVKX4yrHwNfD3SETzzMfTjm8P8uArZSJM/YzVLY+m30 X6RPYyLUdGZYiN0S3TCU+ZOv2qa6vf2urPxb3AbOGv53nStWb60Jd71snMo7E3B1 BH5GkL0czRBMGje9j64VRrJNJHTQO+DTo0zkjtaJc8LI+JzwechMiTq35+toVheM U6A5TJLBlzFGzBc/+JfRJm/dCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFuEG9j 3o9fT5+dHUDTMesQ5U+4MB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABhddxyG6OlO9iT46r+4FRg0VGI6WmJFFRjXMxhYUtdBxP0pSEGUP+ XCN/U//Hu4nItGeflWFyArjAn/jlfVgvKOkdnmtbX/ye09cD12KhYOq7g4l8+Oom NAm5FtaB4IkmraMwUwKKrlOOqsKAa30LhmYyxlmW+rtv7e7AeQPccWbrv3sQy57v JE7mM2HyzDqn5xEoIsJF872VRAenB5BMwdg17jcxp5ma/QjxrfCM5fEv89mGSxo9 THiVN06NnrWOkixKpD/inzL7zlLo8Ltmq96Wyo8jdnICjCJx701zVMEKms5d2x+q v2Fi1hE2yWxMWKGUF5kphm5ughOQYw7s -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:47 2025 by rpki-client