$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: On8sGltndcqFccphADmKK0DLmPKKEEFOqOjTDMaRY2Q= Subject key identifier: 64:73:E3:5F:74:4D:6F:79:5F:50:9D:66:59:50:74:94:22:D3:D3:83 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0C0E Signing time: Fri 22 Aug 2025 18:52:42 +0000 Manifest this update: Fri 22 Aug 2025 18:52:41 +0000 Manifest next update: Fri 29 Aug 2025 18:52:41 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: o6NTg3LTXa1c0AJhT9dI+ldYUeCe6S9gULhE8b6Aka4=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=) 3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: CWmRoXyI8djvZbQWvBLpL+DLa+AiV1dhvDwiE3HLKt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Aug 22 18:52:41 2025 GMT Not After : Aug 29 18:52:41 2025 GMT Subject: CN=68a8bc79-6b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:48:3c:d9:c3:ac:c3:27:29:f4:f3:bc:e2:77: 5d:b2:da:e2:fb:7d:91:4f:ce:7b:80:1f:a3:da:7f: 8d:67:24:d9:63:eb:73:c9:39:93:0e:6b:6b:70:b1: 29:c3:6d:72:cb:c9:5e:8d:4e:57:3c:35:63:05:d0: e7:0d:f9:4a:2f:f7:68:7c:8c:9f:87:dd:e6:e6:36: c8:c0:53:43:45:63:67:e1:86:65:4f:57:bf:0c:9a: 70:ab:48:15:5d:45:b7:8f:d6:de:75:79:cc:f7:41: f7:12:b1:97:69:8f:52:0f:8d:97:94:ad:3e:7c:c4: 7d:a1:48:f8:a3:35:91:78:24:e5:2c:75:cb:66:b3: 8b:8a:55:d8:8b:b0:04:68:c7:57:7e:2d:93:f3:05: 2d:bf:b3:93:d2:0f:e5:6f:ae:e5:3e:e1:36:a7:d7: 93:23:d2:a9:55:21:e5:16:ad:55:1f:9b:52:c9:c4: 4d:40:4a:0e:c7:96:31:26:19:3e:99:a0:85:c6:3f: f0:f5:6c:b1:44:3d:bc:96:cd:e1:d9:84:c3:6c:5f: 88:ee:06:42:f5:21:05:74:04:ba:88:35:8f:d7:56: 01:28:98:7e:e4:c8:ab:76:4b:96:c7:4b:9f:b3:e1: 12:60:4a:81:7c:8e:9a:31:bb:b6:e1:24:b5:92:1b: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:E3:5F:74:4D:6F:79:5F:50:9D:66:59:50:74:94:22:D3:D3:83 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6b:7a:f2:12:28:c0:75:66:4d:b9:d8:80:cb:d5:88:50:11: ba:d7:85:77:ca:8a:0f:93:22:33:9b:74:c4:77:b6:a4:ee:9d: b9:a5:db:51:a2:fc:b2:83:67:c3:cf:d5:76:04:64:93:ec:91: 66:16:97:d8:3d:57:f3:eb:5c:42:ec:5f:2b:0d:32:37:7a:7f: 08:cc:4f:20:f2:24:46:01:b0:a4:0f:55:76:f3:28:d0:8a:bf: 14:6e:3f:a0:c1:22:d5:e7:9d:5e:8d:ce:07:ef:df:3d:00:24: 08:6a:7a:f2:e8:da:d6:79:6c:98:b8:d0:eb:28:cf:12:1d:92: 95:53:a6:02:59:72:74:99:5c:ad:e2:17:71:37:9b:5a:a3:82: ba:16:30:f4:a5:5d:c4:6e:33:9e:01:b9:2a:7c:ae:9d:44:73: d4:ef:33:a1:39:d3:3f:5d:00:2f:66:95:46:1e:0f:2f:77:84: 0e:46:dd:2a:dd:1a:11:8b:9d:b0:51:c0:58:7e:5d:0e:98:b5: f4:b1:ff:6b:e2:10:dc:58:29:fe:92:37:fc:83:8a:4a:e8:fc: a4:80:43:96:73:f8:28:30:d7:26:81:93:53:73:e7:2d:dd:92: d1:03:ad:3e:da:3f:51:aa:82:73:ca:af:db:51:64:f7:6f:02: 0f:0d:0a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwODIyMTg1MjQxWhcNMjUwODI5MTg1MjQxWjAYMRYwFAYD VQQDEw02OGE4YmM3OS02YjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUg82cOswycp9PO84nddstri+32RT857gB+j2n+NZyTZY+tzyTmTDmtrcLEp w21yy8lejU5XPDVjBdDnDflKL/dofIyfh93m5jbIwFNDRWNn4YZlT1e/DJpwq0gV XUW3j9bedXnM90H3ErGXaY9SD42XlK0+fMR9oUj4ozWReCTlLHXLZrOLilXYi7AE aMdXfi2T8wUtv7OT0g/lb67lPuE2p9eTI9KpVSHlFq1VH5tSycRNQEoOx5YxJhk+ maCFxj/w9WyxRD28ls3h2YTDbF+I7gZC9SEFdAS6iDWP11YBKJh+5MirdkuWx0uf s+ESYEqBfI6aMbu24SS1khuAzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRz4190 TW95X1CdZllQdJQi09ODMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARa3ryEijAdWZNudiAy9WIUBG614V3yooPkyIzm3TEd7ak7p25pdtR ovyyg2fDz9V2BGST7JFmFpfYPVfz61xC7F8rDTI3en8IzE8g8iRGAbCkD1V28yjQ ir8Ubj+gwSLV551ejc4H7989ACQIanry6NrWeWyYuNDrKM8SHZKVU6YCWXJ0mVyt 4hdxN5tao4K6FjD0pV3EbjOeAbkqfK6dRHPU7zOhOdM/XQAvZpVGHg8vd4QORt0q 3RoRi52wUcBYfl0OmLX0sf9r4hDcWCn+kjf8g4pK6PykgEOWc/goMNcmgZNTc+ct 3ZLRA60+2j9RqoJzyq/bUWT3bwIPDQqC -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:04 2025 by rpki-client