$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json) Hash identifier: qZ4G27aZBt3cVOxkm4tY0xV7MTvS/tNAxmg8sT0xOH0= Subject key identifier: 47:09:47:39:87:45:73:ED:CF:21:86:C9:6F:84:B5:52:5D:D8:E3:C9 Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Certificate serial: 1E84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft Manifest number: 1E83 Signing time: Fri 22 Aug 2025 16:06:37 +0000 Manifest this update: Fri 22 Aug 2025 16:06:36 +0000 Manifest next update: Fri 29 Aug 2025 16:06:36 +0000 Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: c4cgqbuqAVryKpaUfC5gVyoEFiOgn2+TXhImRLOb6w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7812 (0x1e84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Validity Not Before: Aug 22 16:06:36 2025 GMT Not After : Aug 29 16:06:36 2025 GMT Subject: CN=68a8958c-132d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:fa:59:bf:96:17:35:d7:b9:33:fd:04:76: b3:51:b8:6a:bd:4b:61:b0:5e:d8:ff:ff:0e:87:91: d8:88:1f:94:20:5d:49:b1:57:77:12:17:a9:15:c4: ad:42:5f:ac:23:f0:65:7b:3d:94:bb:54:b1:6f:ef: 6e:48:90:34:ee:31:5e:f6:f3:0a:1d:15:11:9a:91: 9b:3c:16:94:5f:37:0e:25:6a:be:8e:31:5b:88:8b: 1e:5b:e4:a0:ac:ea:8e:73:26:5e:9c:63:68:e8:bf: 91:10:64:b6:4f:d6:9c:45:ef:ea:bf:06:fb:a2:a1: 81:3d:0c:74:3f:71:76:de:6a:8a:a3:9e:85:1c:85: 4f:52:f2:07:99:9d:5c:9d:e6:48:cb:86:aa:2e:47: 6e:f2:dc:ed:b5:89:92:72:48:3b:6d:26:73:72:d9: 29:24:d9:6a:a6:63:7c:56:fe:e5:7d:b0:e5:d9:05: 5a:3f:b2:d0:21:76:89:21:8f:0f:9e:3e:24:c2:21: 8f:0d:98:19:dd:f1:ad:16:3e:98:6a:c9:c4:90:cc: 6c:b6:9f:8b:14:80:98:0d:05:dd:f7:12:6d:58:b5: 30:57:3c:82:d7:fa:9e:c4:18:f0:fd:ea:f6:e4:61: 9b:7f:67:47:f7:ee:a7:d4:80:e3:41:54:59:70:22: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:09:47:39:87:45:73:ED:CF:21:86:C9:6F:84:B5:52:5D:D8:E3:C9 X509v3 Authority Key Identifier: keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:03:24:1f:08:c0:4f:7f:30:4f:23:b3:ec:31:42:67:5d:0f: 5d:f2:70:d0:76:1d:11:77:b7:9c:a4:6a:ff:06:67:0f:12:67: 7b:3c:88:37:30:b0:cf:14:f9:2b:68:de:d2:be:5d:32:fa:ae: 9c:b8:88:16:00:0c:a7:e0:2c:a0:67:2b:b5:93:94:3b:f7:ef: 8b:8e:7a:6e:d4:96:11:68:89:b2:9a:f5:23:31:04:75:4a:06: 63:87:86:1b:d3:a8:69:58:2d:7f:78:7e:ef:b4:a6:56:c9:4a: a1:73:08:48:32:d6:96:2c:97:cf:c2:3f:5a:a6:b5:2b:1c:c1: 02:5f:69:2b:31:de:2e:53:19:37:83:91:2c:8f:14:31:8f:98: 8a:c4:20:60:ba:ff:6a:40:23:21:1f:60:ee:b5:33:7b:a7:db: 0e:73:d9:27:9f:a2:d8:2d:a3:13:89:dd:f9:c8:13:c7:d4:80: f0:14:ae:66:a9:97:44:81:06:7f:f4:56:42:af:6a:6f:79:4c: c2:43:eb:35:01:bd:51:dc:ac:72:1d:df:f6:e8:ca:87:c4:d8: 70:66:aa:b8:d2:20:55:d7:d5:dc:4b:db:14:7b:50:a3:9e:b7: 6f:6d:af:12:dd:bc:63:44:09:07:cf:76:e2:4f:bb:22:98:12: 28:fc:82:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2 Rjc2MjVFNjcwHhcNMjUwODIyMTYwNjM2WhcNMjUwODI5MTYwNjM2WjAYMRYwFAYD VQQDEw02OGE4OTU4Yy0xMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPL6Wb+WFzXXuTP9BHazUbhqvUthsF7Y//8Oh5HYiB+UIF1JsVd3EhepFcSt Ql+sI/Blez2Uu1Sxb+9uSJA07jFe9vMKHRURmpGbPBaUXzcOJWq+jjFbiIseW+Sg rOqOcyZenGNo6L+REGS2T9acRe/qvwb7oqGBPQx0P3F23mqKo56FHIVPUvIHmZ1c neZIy4aqLkdu8tzttYmSckg7bSZzctkpJNlqpmN8Vv7lfbDl2QVaP7LQIXaJIY8P nj4kwiGPDZgZ3fGtFj6YasnEkMxstp+LFICYDQXd9xJtWLUwVzyC1/qexBjw/er2 5GGbf2dH9+6n1IDjQVRZcCIBzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcJRzmH RXPtzyGGyW+EtVJd2OPJMB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2 M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxAyQfCMBPfzBPI7PsMUJnXQ9d8nDQdh0Rd7ecpGr/BmcPEmd7PIg3 MLDPFPkraN7Svl0y+q6cuIgWAAyn4CygZyu1k5Q79++Ljnpu1JYRaImymvUjMQR1 SgZjh4Yb06hpWC1/eH7vtKZWyUqhcwhIMtaWLJfPwj9aprUrHMECX2krMd4uUxk3 g5EsjxQxj5iKxCBguv9qQCMhH2DutTN7p9sOc9knn6LYLaMTid35yBPH1IDwFK5m qZdEgQZ/9FZCr2pveUzCQ+s1Ab1R3KxyHd/26MqHxNhwZqq40iBV19XcS9sUe1Cj nrdvba8S3bxjRAkHz3biT7simBIo/IKb -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:16 2025 by rpki-client