$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: GPEiCaFPKDGSLTp3IZr68SmGs7ZJcdVIy4S1XSmykXE= Subject key identifier: 5A:BF:E8:98:4B:6D:1D:60:2E:96:B4:7E:CB:81:76:35:A0:BF:E5:87 Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: 9C Signing time: Sat 23 Aug 2025 06:35:38 +0000 Manifest this update: Sat 23 Aug 2025 06:35:37 +0000 Manifest next update: Sat 30 Aug 2025 06:35:37 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: bnU+ia++6acbTbULTGswacWEo/9druvPDuh6ukgWFsI=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Aug 23 06:35:37 2025 GMT Not After : Aug 30 06:35:37 2025 GMT Subject: CN=68a96139-d909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:eb:02:cf:17:db:49:8a:b2:28:af:bb:d4: ba:82:15:6e:8b:2f:d0:35:21:1f:fb:36:a3:4b:18: 1b:8b:6f:3d:45:a1:45:c7:d5:f4:7e:f7:f5:bc:8b: e0:21:ae:47:35:80:b4:74:2f:a5:96:14:a6:eb:fd: ed:76:1c:42:4e:8d:6e:ba:53:6b:88:15:3f:06:e5: d0:4c:03:00:99:f4:f1:dc:0e:bf:bc:ae:cd:b0:3b: 72:75:40:65:7c:39:bd:c4:75:65:6d:9f:81:16:d8: 6b:21:e9:37:41:2e:94:b4:a2:c3:ec:53:ee:01:6f: 38:33:82:f6:ed:28:0e:9e:05:a6:81:07:ae:df:ff: 6a:5a:f8:03:cc:f0:bc:63:69:0e:5a:eb:8c:8c:aa: 63:59:ba:2b:d5:7d:69:48:b8:77:18:4f:18:bd:4e: 6f:ce:ca:0e:ac:08:ba:39:15:af:43:32:66:84:1c: 7c:1c:9e:01:97:3f:5d:29:f5:15:ef:29:56:00:6e: 80:c8:b9:c5:37:8d:73:6e:8e:a2:b8:80:2d:c5:9d: 08:c5:6e:ff:4e:05:fe:83:1b:39:56:22:09:fb:36: 82:f0:79:4c:8e:c5:5f:5c:70:35:e9:f1:d3:ae:f3: 25:b8:f5:88:42:54:d1:7e:97:84:12:68:d7:c3:e3: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:E8:98:4B:6D:1D:60:2E:96:B4:7E:CB:81:76:35:A0:BF:E5:87 X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:2c:b6:e5:83:c1:9c:f2:67:b3:1b:52:8a:6a:f7:f3:d0:b3: 3b:45:38:a6:77:8f:b1:3b:b7:87:0c:e0:35:0f:7e:c8:5d:1d: 7e:f4:90:c8:f8:14:b9:00:df:2a:5b:d3:98:64:76:27:04:92: 50:e7:6e:39:1a:db:ad:5d:aa:d9:6d:08:cf:6c:26:55:ec:8a: 3c:aa:cf:2f:fd:8d:67:30:21:a3:6a:de:b6:64:d4:74:8f:44: a7:a1:84:64:cb:a5:7f:ac:46:fc:9d:44:66:ce:1e:33:a3:cc: a2:43:5e:a4:e5:78:61:d8:63:21:10:68:91:8b:38:6d:0f:c2: ef:d6:6c:31:eb:7c:44:56:18:7c:1e:0e:a7:39:19:ed:8c:cc: 8d:91:0b:3c:04:f1:90:18:a8:8b:35:4b:46:47:90:e8:cc:09: e0:f8:61:5c:7b:1b:27:2d:df:f2:7b:55:51:d0:08:b6:6f:4d: ee:f5:97:c7:c5:44:e7:c5:43:a0:6f:0b:79:c9:79:ff:c7:8c: c2:b6:27:1e:cd:76:8f:4b:e7:10:03:ec:e2:92:34:97:2f:6e: 82:2e:e8:c9:aa:b2:f1:3a:78:60:70:39:98:0f:55:9f:6f:36: 7c:51:95:a6:c7:93:ae:be:70:11:f3:d9:23:91:64:6d:3d:58: ba:d0:a5:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy NDIyRUI2NkYwHhcNMjUwODIzMDYzNTM3WhcNMjUwODMwMDYzNTM3WjAYMRYwFAYD VQQDEw02OGE5NjEzOS1kOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL3rAs8X20mKsiivu9S6ghVuiy/QNSEf+zajSxgbi289RaFFx9X0fvf1vIvg Ia5HNYC0dC+llhSm6/3tdhxCTo1uulNriBU/BuXQTAMAmfTx3A6/vK7NsDtydUBl fDm9xHVlbZ+BFthrIek3QS6UtKLD7FPuAW84M4L27SgOngWmgQeu3/9qWvgDzPC8 Y2kOWuuMjKpjWbor1X1pSLh3GE8YvU5vzsoOrAi6ORWvQzJmhBx8HJ4Blz9dKfUV 7ylWAG6AyLnFN41zbo6iuIAtxZ0IxW7/TgX+gxs5ViIJ+zaC8HlMjsVfXHA16fHT rvMluPWIQlTRfpeEEmjXw+ODJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq/6JhL bR1gLpa0fsuBdjWgv+WHMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0 bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51 VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJLLblg8Gc8mezG1KKavfz0LM7RTimd4+xO7eHDOA1D37IXR1+9JDI +BS5AN8qW9OYZHYnBJJQ5245GtutXarZbQjPbCZV7Io8qs8v/Y1nMCGjat62ZNR0 j0SnoYRky6V/rEb8nURmzh4zo8yiQ16k5Xhh2GMhEGiRizhtD8Lv1mwx63xEVhh8 Hg6nORntjMyNkQs8BPGQGKiLNUtGR5DozAng+GFcexsnLd/ye1VR0Ai2b03u9ZfH xUTnxUOgbwt5yXn/x4zCticezXaPS+cQA+zikjSXL26CLujJqrLxOnhgcDmYD1Wf bzZ8UZWmx5OuvnAR89kjkWRtPVi60KVF -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:19 2025 by rpki-client