$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: IUfgcNu41Ii4WEpj+Z3w+W7tPGKBZkYv/Bo3aV8fz9I= Subject key identifier: 95:A8:2A:11:ED:85:E2:6B:B7:3A:8E:58:3E:24:1A:49:32:36:CC:BD Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 01D0 Signing time: Fri 22 Aug 2025 17:42:55 +0000 Manifest this update: Fri 22 Aug 2025 17:42:55 +0000 Manifest next update: Fri 29 Aug 2025 17:42:55 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: cwIyAB14JthYQKcZ3l0oxsKqgTi9fppnXOMmvJJdsSA=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Aug 22 17:42:55 2025 GMT Not After : Aug 29 17:42:55 2025 GMT Subject: CN=68a8ac1f-1143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c0:6d:6f:92:42:b6:ce:88:2e:29:25:9e:e9: 91:16:d4:3f:c8:2a:ea:1a:cb:62:63:04:59:47:3b: bb:6b:66:8e:70:14:37:15:1f:d1:e7:98:b9:ac:f6: 9b:26:1e:2f:b6:11:bc:11:06:49:08:d7:6a:78:32: 89:62:b8:63:6d:ca:9a:95:1d:39:de:ea:fe:d3:e2: fe:9b:94:22:95:54:13:ae:7b:3f:2b:ca:3b:9f:a6: f9:93:94:69:9f:1e:49:d0:e4:7f:49:af:d7:b7:89: 02:a9:f4:2b:d6:8c:11:7b:7d:ce:89:37:00:bf:af: f3:b9:69:21:50:d8:3f:7d:47:6d:e8:7f:e4:3b:d3: d9:d8:ff:bf:cb:87:7b:60:ec:8d:85:39:2a:4c:bc: 6e:cf:24:71:db:cf:50:6f:40:67:6e:bb:44:95:de: 81:ed:17:f3:91:c5:8d:74:10:a7:10:05:0a:a0:fc: ee:ab:7c:1c:53:5a:74:1a:81:8e:fe:1b:9c:7f:0e: 6c:6a:95:7a:76:c1:a1:fb:09:56:10:66:23:15:06: c5:4f:6f:a0:f2:d2:f1:73:b2:57:55:76:39:25:41: b9:39:b4:70:16:3f:ca:27:0d:8a:77:eb:b6:2a:03: 76:0f:fd:f7:48:ad:be:6d:36:3d:d0:34:aa:55:68: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:2A:11:ED:85:E2:6B:B7:3A:8E:58:3E:24:1A:49:32:36:CC:BD X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:32:02:7c:d2:f4:5e:1b:50:7b:69:7c:f4:8e:40:86:b9:f2: b7:95:ea:07:d3:90:24:39:90:d5:6f:73:48:82:9a:33:68:20: 2d:52:b7:1a:96:65:c5:8b:90:1a:6f:e8:ce:19:3d:a8:8a:db: 14:cd:d4:c3:04:ac:79:1b:e1:48:8c:df:d3:fc:06:18:bf:bb: de:04:f3:d8:bb:21:3c:1a:b3:d1:57:ad:52:90:06:fe:55:a9: 03:b4:90:bc:71:6b:ba:eb:5d:10:69:54:2b:08:18:41:4a:f2: c4:c3:9f:8f:93:b2:60:a7:84:2f:77:07:fb:fd:16:fa:e1:56: a6:ed:04:5f:20:a0:85:e9:7e:52:13:d5:09:16:20:c4:af:be: da:54:9e:e5:3d:64:93:30:c2:33:e3:f0:a2:f8:e3:7d:02:ae: 65:5b:26:64:df:e6:24:eb:07:1e:da:7f:8b:8b:0c:1a:b4:82: bb:ad:36:1f:ad:bc:df:24:36:36:30:89:86:89:1c:77:25:aa: 09:4e:eb:00:3a:6a:40:1f:a5:44:98:52:60:9d:b2:bc:23:56: 99:31:1b:f2:50:ed:91:3b:55:79:2f:13:95:06:31:36:43:35: 30:c9:9e:b9:cb:16:69:bf:0a:4f:10:de:44:0e:5d:22:ec:e3: 0b:57:9b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUwODIyMTc0MjU1WhcNMjUwODI5MTc0MjU1WjAYMRYwFAYD VQQDEw02OGE4YWMxZi0xMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMBtb5JCts6ILiklnumRFtQ/yCrqGstiYwRZRzu7a2aOcBQ3FR/R55i5rPab Jh4vthG8EQZJCNdqeDKJYrhjbcqalR053ur+0+L+m5QilVQTrns/K8o7n6b5k5Rp nx5J0OR/Sa/Xt4kCqfQr1owRe33OiTcAv6/zuWkhUNg/fUdt6H/kO9PZ2P+/y4d7 YOyNhTkqTLxuzyRx289Qb0BnbrtEld6B7RfzkcWNdBCnEAUKoPzuq3wcU1p0GoGO /hucfw5sapV6dsGh+wlWEGYjFQbFT2+g8tLxc7JXVXY5JUG5ObRwFj/KJw2Kd+u2 KgN2D/33SK2+bTY90DSqVWiKJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWoKhHt heJrtzqOWD4kGkkyNsy9MB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnMgJ80vReG1B7aXz0jkCGufK3leoH05AkOZDVb3NIgpozaCAtUrca lmXFi5Aab+jOGT2oitsUzdTDBKx5G+FIjN/T/AYYv7veBPPYuyE8GrPRV61SkAb+ VakDtJC8cWu6610QaVQrCBhBSvLEw5+Pk7Jgp4Qvdwf7/Rb64Vam7QRfIKCF6X5S E9UJFiDEr77aVJ7lPWSTMMIz4/Ci+ON9Aq5lWyZk3+Yk6wce2n+LiwwatIK7rTYf rbzfJDY2MImGiRx3JaoJTusAOmpAH6VEmFJgnbK8I1aZMRvyUO2RO1V5LxOVBjE2 QzUwyZ65yxZpvwpPEN5EDl0i7OMLV5so -----END CERTIFICATE-----Generated at Sat Aug 23 22:15:11 2025 by rpki-client