$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: qWAeXY1fY82iaeNcMzDWLgInTuKZMlnyFdFZ+KfAhuY= Subject key identifier: B9:CD:CB:2F:0C:F2:D9:97:2B:FD:CF:B3:DA:F1:9F:FC:BE:44:DD:59 Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 05:58:34 +0000 Manifest this update: Sat 23 Aug 2025 05:58:33 +0000 Manifest next update: Sat 30 Aug 2025 05:58:33 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: HtzRCgwa3ODtaq5oadOv7vZbd53h2i8YYCUpCVb+Aqg=) 2: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (hash: DfXJNnGu5R78q4knIp+T6nbwy/V4l/65/i/LBotIC/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Aug 23 05:58:33 2025 GMT Not After : Aug 30 05:58:33 2025 GMT Subject: CN=68a9588a-8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:74:f6:6c:46:10:4a:f1:43:25:b9:15:59: 63:db:e1:e0:d7:bc:8f:40:33:30:a4:8e:e8:fa:68: 33:bf:11:3e:08:a3:39:11:1f:69:04:43:74:7b:b3: 80:73:52:7a:b8:8a:af:88:57:1d:87:9b:c0:fe:94: d4:2d:2f:d8:68:85:0a:ee:45:64:4b:93:7f:a0:fd: e9:7a:5a:31:e8:79:dd:1b:62:6f:fc:67:48:1f:79: 24:76:92:a0:c3:f7:fc:62:4c:68:5a:7e:39:6e:ba: bc:a1:77:46:3e:6b:e0:05:46:2d:3d:a1:d3:04:3c: f8:c0:75:a5:d4:49:d0:fb:2e:e9:7a:38:92:b0:17: 1a:9c:a5:2c:17:93:2c:ed:88:43:6c:63:02:de:72: 7d:47:31:77:49:ee:39:27:45:d2:73:fb:af:01:b5: 8d:81:13:76:a8:14:9b:26:74:aa:ad:c9:d2:ef:62: 08:d6:8b:ab:a2:49:e4:e6:37:e5:b1:fb:be:66:eb: 24:28:d0:85:9f:9e:d6:99:d5:5e:fa:14:65:6b:1e: de:8d:9a:41:31:c6:01:a0:3d:eb:90:f3:0c:21:5e: d2:86:d3:e9:1a:45:e3:56:ed:17:52:b2:d5:fb:84: cf:58:4c:8c:61:d8:04:9c:1b:f8:a2:bc:f1:df:5b: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CD:CB:2F:0C:F2:D9:97:2B:FD:CF:B3:DA:F1:9F:FC:BE:44:DD:59 X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:4e:b3:b8:3a:58:40:18:05:49:9b:c1:1f:6c:7a:20:ca:af: 01:5e:5e:8b:49:57:92:fb:3b:61:c9:be:70:fd:af:51:c0:ed: 93:5c:7d:3a:8c:c5:e8:e5:78:9e:d7:79:52:ea:16:fa:d5:ba: a2:41:9c:29:6c:b6:55:5b:9e:19:5c:87:b6:32:12:a4:e3:45: 36:a7:11:ad:ca:c4:03:42:a0:77:75:d3:7f:65:b0:96:74:6f: 82:b4:a2:a3:da:4a:d8:01:8c:a4:4b:61:3a:2e:14:fa:0c:e0: d7:f6:3a:8d:76:19:af:97:05:7a:87:84:86:f0:12:c0:1c:77: 70:8e:29:84:43:c4:38:7f:c9:e7:a4:38:69:d8:da:58:23:8d: a7:87:95:a5:51:05:bd:49:12:5a:a7:5b:98:4c:5b:4b:5d:c7: 8f:ec:c6:64:8c:91:63:71:e2:33:60:ce:32:6f:22:ec:91:b6: be:d7:fe:36:0a:35:2e:29:4e:00:49:65:bf:01:b4:1f:d4:a4: 9d:9a:43:c3:c6:e7:a8:c5:65:25:c7:ef:ad:8a:9e:b0:9a:6a: a5:76:6b:63:fa:c6:28:0d:8e:e2:81:bf:eb:c8:25:64:8a:27: 80:e2:8a:8f:1d:e0:13:95:6b:cb:61:43:21:c0:dd:cf:bb:e1: 9e:bb:5d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZGNkJBMEI2RUQ2 Q0M0MUUxMEIwHhcNMjUwODIzMDU1ODMzWhcNMjUwODMwMDU1ODMzWjAYMRYwFAYD VQQDEw02OGE5NTg4YS04OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybJ09mxGEErxQyW5FVlj2+Hg17yPQDMwpI7o+mgzvxE+CKM5ER9pBEN0e7OA c1J6uIqviFcdh5vA/pTULS/YaIUK7kVkS5N/oP3pelox6HndG2Jv/GdIH3kkdpKg w/f8YkxoWn45brq8oXdGPmvgBUYtPaHTBDz4wHWl1EnQ+y7pejiSsBcanKUsF5Ms 7YhDbGMC3nJ9RzF3Se45J0XSc/uvAbWNgRN2qBSbJnSqrcnS72II1ouroknk5jfl sfu+ZuskKNCFn57WmdVe+hRlax7ejZpBMcYBoD3rkPMMIV7ShtPpGkXjVu0XUrLV +4TPWEyMYdgEnBv4orzx31uw6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnNyy8M 8tmXK/3Ps9rxn/y+RN1ZMB8GA1UdIwQYMBaAFIGZSTrSZa0txzOW9roLbtbMQeEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREMzMi8wRjA5Mjg1NDVB REUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJTM0hNNWIydWd0dTFzeEI0 UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJT M0hNNWIydWd0dTFzeEI0UXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnTrO4OlhAGAVJm8EfbHogyq8BXl6LSVeS+zthyb5w/a9RwO2TXH06 jMXo5Xie13lS6hb61bqiQZwpbLZVW54ZXIe2MhKk40U2pxGtysQDQqB3ddN/ZbCW dG+CtKKj2krYAYykS2E6LhT6DODX9jqNdhmvlwV6h4SG8BLAHHdwjimEQ8Q4f8nn pDhp2NpYI42nh5WlUQW9SRJap1uYTFtLXceP7MZkjJFjceIzYM4ybyLskba+1/42 CjUuKU4ASWW/AbQf1KSdmkPDxueoxWUlx++tip6wmmqldmtj+sYoDY7igb/ryCVk iieA4oqPHeATlWvLYUMhwN3Pu+Geu124 -----END CERTIFICATE-----Generated at Sun Aug 24 04:58:36 2025 by rpki-client