$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: 3at9yA3u+rnJUgNN+c1hzyeg3HXnk6IemKHuDWhNKoU= Subject key identifier: 28:D9:BA:2A:33:E9:99:EA:1A:0B:7D:33:B7:7A:11:9A:B2:9C:52:FB Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 22C7 Signing time: Fri 22 Aug 2025 15:54:15 +0000 Manifest this update: Fri 22 Aug 2025 15:54:14 +0000 Manifest next update: Fri 29 Aug 2025 15:54:14 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: jMOLUdfEyj1hyTzzt7o/U8iBKh/hFIb3LrBpcCR8ruI=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: 2SAdCKQcIWqABPUcECk5L/zG6WToDQOSztNZtA6yviw=) 3: A163C5C869A111ECA4837D28C4F9AE02.roa (hash: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8=) 4: E57A64AA165C11EABB13924AC4F9AE02.roa (hash: Kp1L9OUEsepRZk0KKmtB6S8OnLO2gE492T0DeYXHR/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8969 (0x2309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Aug 22 15:54:14 2025 GMT Not After : Aug 29 15:54:14 2025 GMT Subject: CN=68a892a6-b4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:89:a5:b7:0e:17:3f:79:46:42:c4:10:0c: a9:57:01:b7:d5:b7:84:e8:79:47:ee:df:29:28:79: f7:99:d4:7a:e5:1c:93:47:d2:9e:4a:10:36:11:e2: c5:9c:f6:bd:b3:14:9f:82:e3:5b:5f:44:65:0c:f0: c0:2a:e6:8e:d5:d6:4d:ba:9e:e8:86:1a:87:34:0f: 1b:e1:b3:8b:05:cc:7b:30:db:4e:e7:b3:ae:a4:3d: f0:43:cc:43:5a:2f:7a:cb:0a:27:e7:70:20:1e:0b: f9:d7:82:bf:b1:62:a0:72:fa:7e:b9:ae:c1:b5:d7: 52:90:13:39:c5:02:c6:81:08:ec:f4:41:5c:16:c7: e9:20:5f:77:2d:13:49:ff:35:3c:7d:7d:73:38:cf: 09:98:b9:aa:3d:56:52:c5:25:46:de:5e:67:25:ee: f5:b6:a0:f0:f5:d9:14:01:b2:e2:9d:5f:9c:a2:0e: 48:b9:83:83:53:7f:8b:f7:72:2a:ce:ff:b4:53:23: ef:ab:26:6c:44:4d:c1:38:ad:45:db:b7:8d:87:c6: ad:f6:c5:be:a3:53:3d:6b:55:5b:56:71:33:c0:82: 79:51:54:2e:d8:aa:d9:05:57:41:2a:3e:fd:88:71: e8:73:ea:bb:d0:79:2b:c7:0b:51:9a:3f:52:e7:4d: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D9:BA:2A:33:E9:99:EA:1A:0B:7D:33:B7:7A:11:9A:B2:9C:52:FB X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:67:ea:f9:22:c0:28:ea:3a:2a:7c:1d:af:2b:d9:f2:a9:92: 6d:78:df:64:cd:3a:d5:5b:05:90:ab:a8:65:94:02:ff:34:2b: b3:9a:d4:7f:76:0b:5c:45:ec:d4:12:5a:c6:f6:a7:97:30:0c: 57:ec:81:a1:de:09:63:52:42:53:a2:6f:4a:65:7f:54:df:a4: 20:2b:1e:cc:48:4e:6b:52:04:d3:b6:94:45:2d:35:7c:f7:b8: b1:cb:7d:07:5e:b6:7d:80:82:92:89:58:0c:36:d0:29:0e:0a: e5:20:da:43:09:6a:58:f5:f2:d9:5b:9a:50:3b:35:e6:dc:c4: 8e:05:c7:62:85:99:dc:fd:68:96:25:19:c5:83:b4:c6:29:ab: 57:db:8b:22:3e:b5:bc:2a:e8:99:b5:7f:e6:2d:6a:c0:66:5b: 3b:b2:16:85:ad:81:eb:4d:43:1c:69:9a:e5:44:c7:7c:0f:26: d9:a0:3b:83:f8:55:7e:93:84:9c:e5:03:65:21:c0:1c:6d:93: 82:29:f7:b1:c4:0f:4a:89:15:de:5c:9b:c1:8c:ed:ed:77:98: 5c:f4:94:8c:bd:bc:e4:63:4c:17:95:47:cc:58:08:a5:4d:91: 49:17:7c:04:d4:7d:ce:5e:88:d8:10:c8:65:22:0f:fb:5a:50: cf:48:ec:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUwODIyMTU1NDE0WhcNMjUwODI5MTU1NDE0WjAYMRYwFAYD VQQDEw02OGE4OTJhNi1iNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5KJpbcOFz95RkLEEAypVwG31beE6HlH7t8pKHn3mdR65RyTR9KeShA2EeLF nPa9sxSfguNbX0RlDPDAKuaO1dZNup7ohhqHNA8b4bOLBcx7MNtO57OupD3wQ8xD Wi96ywon53AgHgv514K/sWKgcvp+ua7BtddSkBM5xQLGgQjs9EFcFsfpIF93LRNJ /zU8fX1zOM8JmLmqPVZSxSVG3l5nJe71tqDw9dkUAbLinV+cog5IuYODU3+L93Iq zv+0UyPvqyZsRE3BOK1F27eNh8at9sW+o1M9a1VbVnEzwIJ5UVQu2KrZBVdBKj79 iHHoc+q70HkrxwtRmj9S5003RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjZuioz 6ZnqGgt9M7d6EZqynFL7MB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAZ+r5IsAo6joqfB2vK9nyqZJteN9kzTrVWwWQq6hllAL/NCuzmtR/ dgtcRezUElrG9qeXMAxX7IGh3gljUkJTom9KZX9U36QgKx7MSE5rUgTTtpRFLTV8 97ixy30HXrZ9gIKSiVgMNtApDgrlINpDCWpY9fLZW5pQOzXm3MSOBcdihZnc/WiW JRnFg7TGKatX24siPrW8KuiZtX/mLWrAZls7shaFrYHrTUMcaZrlRMd8DybZoDuD +FV+k4Sc5QNlIcAcbZOCKfexxA9KiRXeXJvBjO3td5hc9JSMvbzkY0wXlUfMWAil TZFJF3wE1H3OXojYEMhlIg/7WlDPSOx+ -----END CERTIFICATE-----Generated at Sat Aug 23 22:37:12 2025 by rpki-client