$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft File: gaOMiwlmciXuBPc67PoJWQ0fQUw.mft (raw, json) Hash identifier: jzNlXlb552W9lKHjOSV+LlqYCP9LSFwSYgxd2xBFVak= Subject key identifier: 38:07:6C:D4:83:44:A3:F6:0E:34:9A:29:D1:85:38:6A:8A:AC:87:E7 Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C Certificate issuer: /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft Manifest number: 02E2 Signing time: Sat 23 Aug 2025 01:35:37 +0000 Manifest this update: Sat 23 Aug 2025 01:35:36 +0000 Manifest next update: Sat 30 Aug 2025 01:35:36 +0000 Files and hashes: 1: gaOMiwlmciXuBPc67PoJWQ0fQUw.crl (hash: oGmaylEbo5ts0e72uaUDcGXm0yqKyrWKYh8pmBp3uro=) 2: 3785A958EF4711EF906AD167C4F9AE02.roa (hash: Xop4pF7LmPiWj4qFmNK9jXxRuc+SVOdI5Rsywj/dhPQ=) 3: 464B4494F7D911EF8EA69265C4F9AE02.roa (hash: kw7ZHY1axLvj55a+YPxHpHPEy1diN3j6tF6SRdvVlY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE35F, serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Validity Not Before: Aug 23 01:35:36 2025 GMT Not After : Aug 30 01:35:36 2025 GMT Subject: CN=68a91ae8-eb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:b5:d3:55:dc:4b:2e:f3:3f:27:58:b8:e5: c7:e9:91:67:76:3c:ea:33:63:a5:8f:44:08:82:39: af:23:41:a6:bd:ff:4d:1b:8b:f5:73:a0:9e:07:2f: 0a:6c:24:bc:fa:9d:2e:94:f7:22:9b:28:32:fb:58: 4a:93:61:8e:93:82:6b:16:2d:78:32:95:8e:ec:1b: e0:b9:32:a9:69:8f:45:bc:47:a4:42:d4:0a:df:e6: 2c:cf:2a:dd:f7:ca:dc:af:ba:c8:60:91:ad:66:53: 8b:64:0f:83:5b:57:77:56:c6:cf:5d:84:36:91:68: c5:eb:a8:13:85:f7:17:13:7d:1b:5d:0f:bc:09:d5: 8b:bd:69:33:5d:01:94:b8:ed:e5:e6:f6:f5:3c:11: 18:1b:e3:21:fe:87:0c:ae:10:b9:46:e5:f8:3b:2a: b7:08:07:0f:0c:bf:89:db:fa:39:c7:1b:cf:ac:b6: 0a:a2:8f:0e:ab:1b:b2:54:8a:a7:e5:c5:95:52:a8: cc:b1:d2:cc:5c:f7:13:97:a6:e0:31:46:fe:f1:bd: 57:3c:a1:f5:dd:ae:9f:7e:72:3a:f4:cc:d1:d6:00: 82:6d:bf:91:ce:44:69:57:f1:68:c1:f8:7c:32:03: 3d:d1:20:f1:d3:b8:1b:87:93:b0:b5:79:82:1b:ed: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:07:6C:D4:83:44:A3:F6:0E:34:9A:29:D1:85:38:6A:8A:AC:87:E7 X509v3 Authority Key Identifier: keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b7:81:16:0a:99:f5:57:9c:c5:c8:f1:83:bd:84:6e:36:bd: c0:83:72:f3:ee:58:63:fb:f3:96:ca:41:b8:01:48:2c:92:e5: e0:e5:8b:fd:a0:65:6b:dc:3d:fb:a2:0a:82:20:d5:da:47:fb: ef:3a:95:13:53:26:e5:7b:f5:3b:e9:a7:18:20:2f:a9:eb:b1: 4b:96:c4:b1:3a:cb:39:01:2f:b7:ce:4f:94:3d:65:34:30:bb: 8b:e9:fa:9c:cd:a8:ad:c0:e0:6b:92:f7:0a:df:f1:45:8f:82: 0b:b8:bd:ac:1b:3d:fa:b4:1f:44:8a:4b:a0:53:da:f5:07:e2: 51:ac:37:dd:e8:a3:44:c3:2a:6a:e0:8c:c1:4c:41:ee:b2:e6: 3e:64:b5:02:b5:d8:25:4a:8f:e1:d6:4d:0d:f2:b5:f6:7a:ad: 81:8d:a3:05:4a:31:09:6a:b4:bd:5c:b3:92:00:6c:fb:bf:64: 9e:c2:85:36:53:73:8d:20:cf:77:4a:35:4e:19:f8:a2:89:da: 9c:f8:82:f3:28:03:8f:2e:1e:8b:d5:51:30:99:57:b9:23:54: 83:cf:d5:c0:b0:cc:81:8b:02:2a:62:9e:d1:48:2e:15:9a:f9: 14:b7:e4:a1:fa:41:bb:5c:a5:3a:f5:2e:fe:2e:21:fe:2e:8c: 60:2a:09:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzNUYxMTAvBgNVBAUTKDgxQTM4QzhCMDk2NjcyMjVFRTA0RjczQUVDRkEwOTU5 MEQxRjQxNEMwHhcNMjUwODIzMDEzNTM2WhcNMjUwODMwMDEzNTM2WjAYMRYwFAYD VQQDEw02OGE5MWFlOC1lYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Si101XcSy7zPydYuOXH6ZFndjzqM2Olj0QIgjmvI0Gmvf9NG4v1c6CeBy8K bCS8+p0ulPcimygy+1hKk2GOk4JrFi14MpWO7BvguTKpaY9FvEekQtQK3+Yszyrd 98rcr7rIYJGtZlOLZA+DW1d3VsbPXYQ2kWjF66gThfcXE30bXQ+8CdWLvWkzXQGU uO3l5vb1PBEYG+Mh/ocMrhC5RuX4Oyq3CAcPDL+J2/o5xxvPrLYKoo8OqxuyVIqn 5cWVUqjMsdLMXPcTl6bgMUb+8b1XPKH13a6ffnI69MzR1gCCbb+RzkRpV/Fowfh8 MgM90SDx07gbh5OwtXmCG+076QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgHbNSD RKP2DjSaKdGFOGqKrIfnMB8GA1UdIwQYMBaAFIGjjIsJZnIl7gT3Ouz6CVkNH0FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM1Ri9FQzM0NzQyQ0Y5 MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNpWHVCUGM2N1BvSldRMGZR VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhT01pd2xtY2lYdUJQYzY3UG9KV1EwZlFVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM1Ri9FQzM0NzQyQ0Y5MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNp WHVCUGM2N1BvSldRMGZRVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClt4EWCpn1V5zFyPGDvYRuNr3Ag3Lz7lhj+/OWykG4AUgskuXg5Yv9 oGVr3D37ogqCINXaR/vvOpUTUyble/U76acYIC+p67FLlsSxOss5AS+3zk+UPWU0 MLuL6fqczaitwOBrkvcK3/FFj4ILuL2sGz36tB9EikugU9r1B+JRrDfd6KNEwypq 4IzBTEHusuY+ZLUCtdglSo/h1k0N8rX2eq2BjaMFSjEJarS9XLOSAGz7v2SewoU2 U3ONIM93SjVOGfiiidqc+ILzKAOPLh6L1VEwmVe5I1SDz9XAsMyBiwIqYp7RSC4V mvkUt+Sh+kG7XKU69S7+LiH+LoxgKgnQ -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:32 2025 by rpki-client