$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json) Hash identifier: OOb8tOPF4Jtsc24EacufBZe/Ap9ITw/sBM+HhOdpp3E= Subject key identifier: 07:6F:09:68:AA:6A:01:D9:E7:D9:B7:C9:9C:FA:D7:A4:31:F6:9C:A1 Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft Manifest number: 9E Signing time: Sat 23 Aug 2025 06:32:21 +0000 Manifest this update: Sat 23 Aug 2025 06:32:20 +0000 Manifest next update: Sat 30 Aug 2025 06:32:20 +0000 Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: UtUwfkZz1X+Lpt3ogEUN9bEDectWmXVL/0Mhj8ymvQA=) 2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 6wPxK2kdtgMpw3LNHlmnVo9Jz/VjEWx8dJSDP8encJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Validity Not Before: Aug 23 06:32:20 2025 GMT Not After : Aug 30 06:32:20 2025 GMT Subject: CN=68a96074-b405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:7c:0d:2c:4b:b9:df:c6:b7:68:3e:af:62: a3:dd:c0:74:1a:23:bb:4a:8b:15:fe:c3:3e:b7:4f: f4:83:99:b2:a0:70:40:17:8d:7d:d1:b6:04:41:89: 87:06:c4:35:a7:33:97:38:76:68:27:4e:55:bf:fa: 3f:06:be:01:bb:ca:cf:5a:31:60:7d:9f:cf:25:54: 2e:00:43:50:fe:a1:07:29:4e:74:b4:47:9c:f9:18: 1d:7d:d8:c3:69:f0:c8:68:17:31:04:3a:1b:d6:a4: a3:9c:96:9f:96:9a:f4:9b:05:ed:17:dc:8c:af:fa: 47:73:f6:f8:3c:19:e8:8e:c2:d2:3a:92:60:9e:2b: aa:07:2d:e1:41:ac:00:4e:86:81:41:36:85:21:7a: 88:4b:1d:c2:e2:66:45:f0:47:38:66:3d:fe:67:f9: a2:e0:7e:f9:12:ee:4f:f0:6f:84:d8:9e:c7:96:85: db:9c:05:10:d2:46:30:4d:03:59:5b:b8:0e:98:5b: 35:a2:b0:c1:41:11:ef:40:4e:c4:44:52:af:00:ad: b2:36:b0:1a:43:c8:e7:2b:e6:95:0b:df:64:b8:d4: e1:65:52:41:f3:04:7d:7a:68:ff:5a:bd:74:9e:78: 0c:80:04:0b:46:b9:7d:5c:54:6f:55:63:e5:3c:47: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6F:09:68:AA:6A:01:D9:E7:D9:B7:C9:9C:FA:D7:A4:31:F6:9C:A1 X509v3 Authority Key Identifier: keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:5d:05:29:57:80:6e:44:8a:9f:56:75:bf:30:bd:30:b4:99: f8:54:40:14:07:e5:88:cd:d7:aa:e9:50:7b:8b:af:5c:e2:2a: dc:92:4e:b5:40:c5:ef:ab:d6:7f:71:7e:02:c4:b0:3f:6f:c4: 44:d2:34:9d:e3:87:4a:48:51:19:fb:3d:31:78:d6:3f:4a:07: 47:96:cb:ac:0f:9d:93:08:95:6c:f0:93:30:6e:23:30:a8:d7: c8:cf:29:59:54:c5:69:5d:39:a8:c7:c3:6a:bc:3f:c4:44:ea: 80:6e:42:3a:0c:fc:e2:49:b9:f8:b0:2b:12:a2:b2:79:88:80: fb:39:db:31:da:a6:7d:71:aa:c9:db:c8:1d:89:09:ae:fd:b9: 6c:32:ab:09:99:63:4c:16:b7:86:58:bc:35:2b:71:fd:03:2e: 11:da:77:48:e7:dd:dc:d7:52:a8:f2:20:e2:9f:19:a1:74:8c: 20:54:4b:5b:b6:c5:ec:40:26:e2:68:33:db:45:67:0b:73:fd: 1c:71:f9:fe:2f:cc:4a:fd:d5:54:a1:4d:4d:88:a7:66:37:3f: bc:7d:f9:80:94:04:d2:1d:14:54:b1:be:10:61:c9:8e:8d:ef: 59:33:a6:a1:08:9d:eb:15:69:5f:d0:d7:0b:3c:01:69:29:6e: e2:a1:c0:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3MjQxMTAvBgNVBAUTKDE5NjgyOEE4MjFGNDE2QUJBOUNFQ0MzMUFBNzFBMzAz RjQyMTQ3NzgwHhcNMjUwODIzMDYzMjIwWhcNMjUwODMwMDYzMjIwWjAYMRYwFAYD VQQDEw02OGE5NjA3NC1iNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzl8DSxLud/Gt2g+r2Kj3cB0GiO7SosV/sM+t0/0g5myoHBAF4190bYEQYmH BsQ1pzOXOHZoJ05Vv/o/Br4Bu8rPWjFgfZ/PJVQuAENQ/qEHKU50tEec+RgdfdjD afDIaBcxBDob1qSjnJaflpr0mwXtF9yMr/pHc/b4PBnojsLSOpJgniuqBy3hQawA ToaBQTaFIXqISx3C4mZF8Ec4Zj3+Z/mi4H75Eu5P8G+E2J7HloXbnAUQ0kYwTQNZ W7gOmFs1orDBQRHvQE7ERFKvAK2yNrAaQ8jnK+aVC99kuNThZVJB8wR9emj/Wr10 nngMgAQLRrl9XFRvVWPlPEcFzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdvCWiq agHZ59m3yZz616Qx9pyhMB8GA1UdIwQYMBaAFBloKKgh9Barqc7MMapxowP0IUd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81RjlDNkI5Mjkw NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9HV2dvcUNIMEZxdXB6c3d4cW5HakFfUWhS M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXZ29xQ0gwRnF1cHpzd3hxbkdqQV9RaFIzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzcyNC81RjlDNkI5MjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9HV2dvcUNIMEZx dXB6c3d4cW5HakFfUWhSM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZXQUpV4BuRIqfVnW/ML0wtJn4VEAUB+WIzdeq6VB7i69c4irckk61 QMXvq9Z/cX4CxLA/b8RE0jSd44dKSFEZ+z0xeNY/SgdHlsusD52TCJVs8JMwbiMw qNfIzylZVMVpXTmox8NqvD/EROqAbkI6DPziSbn4sCsSorJ5iID7Odsx2qZ9carJ 28gdiQmu/blsMqsJmWNMFreGWLw1K3H9Ay4R2ndI593c11Ko8iDinxmhdIwgVEtb tsXsQCbiaDPbRWcLc/0ccfn+L8xK/dVUoU1NiKdmNz+8ffmAlATSHRRUsb4QYcmO je9ZM6ahCJ3rFWlf0NcLPAFpKW7iocDr -----END CERTIFICATE-----Generated at Sat Aug 23 20:41:41 2025 by rpki-client