$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: GWqmAG/oYIfqsQK6bsDFfLwekRdprJUXleXzbzdJcP8= Subject key identifier: 53:5C:FF:D8:EC:EA:6E:00:A5:66:5B:BC:1B:2B:29:E6:D0:AF:EA:56 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 03FA Signing time: Sat 23 Aug 2025 00:43:05 +0000 Manifest this update: Sat 23 Aug 2025 00:43:05 +0000 Manifest next update: Sat 30 Aug 2025 00:43:05 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: 6TB89rhmkyGlA5OIrpKsNO5nnT5TRaGC0/O6tTyrd60=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: bpLtQ8qLL6l2ZogXhZIDbdT4T6FC+6P3DrjrNo4piak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: Aug 23 00:43:05 2025 GMT Not After : Aug 30 00:43:05 2025 GMT Subject: CN=68a90e99-a01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:c7:26:ff:94:95:dc:c5:93:7a:ed:f8:8f: 2f:30:1e:d3:1a:3e:6f:c2:6b:04:8c:c2:4d:2c:f2: f9:3c:a5:c7:74:27:7b:e9:2f:62:af:d0:b4:cb:cc: ca:72:9e:a2:d6:fe:15:55:67:63:6d:a7:6c:b7:84: b9:93:8c:36:2c:98:ec:10:ed:53:1e:7c:1c:e6:c7: 1f:b7:e8:80:90:b7:f0:8d:5d:6d:de:0d:96:cb:76: 30:3b:00:1e:87:c0:91:2b:23:03:c1:05:c3:e9:75: 18:8f:4e:a8:e1:d8:34:33:32:67:c1:c7:03:06:87: 00:70:b7:7d:ef:88:2a:f7:ec:20:1c:eb:6c:4a:96: b6:91:2d:34:ad:31:f4:1f:b4:2c:ca:fb:cb:bc:db: 9f:e1:58:21:1b:03:68:5f:c3:f6:b8:81:25:95:27: b7:79:a4:70:8b:05:4d:3a:b5:63:4a:82:55:93:b1: a5:0a:78:ed:3e:c1:21:22:ae:87:7f:2c:a0:49:8c: 84:2b:98:eb:1c:cb:4a:19:ed:9c:01:37:bc:f8:c1: 32:dc:da:3a:f0:38:cf:bf:07:11:09:16:1d:a5:ea: 64:77:31:d5:2b:21:0e:13:3b:30:0f:3a:4e:0c:3a: 19:aa:0b:f9:aa:53:d0:6d:82:15:6d:3a:69:fe:be: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:FF:D8:EC:EA:6E:00:A5:66:5B:BC:1B:2B:29:E6:D0:AF:EA:56 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:af:91:29:ce:ef:c2:ad:34:75:6f:1c:3f:68:43:0d:e7:14: 10:a6:3c:91:9d:8e:7d:04:31:84:a4:dd:f4:06:ec:78:36:05: 98:c0:b0:da:03:86:0c:3d:3a:5a:ba:c6:4f:0c:87:83:e8:3c: 9c:30:57:5c:e8:0b:8b:02:5a:dc:5c:78:7e:05:a0:f1:06:ec: 0c:ef:93:48:22:fb:83:bd:cb:5c:1f:2c:c1:fd:d1:4f:cd:5a: 49:32:1b:75:39:37:6a:3d:d1:81:b4:70:6f:1f:6a:8c:ae:07: 43:44:a9:ee:cb:cc:d0:f7:6b:0e:fe:56:e4:ae:53:2d:00:cc: de:cf:5a:1c:dd:38:06:7a:55:c4:c8:7e:7b:b3:58:b2:c5:1d: bf:c6:63:76:55:1e:98:9e:8c:9d:7e:ac:a1:37:5d:f5:1e:0f: eb:c7:ad:3f:8d:e7:81:12:69:78:8c:9d:b0:a7:94:6b:10:9b: 77:18:d3:ce:7f:ff:5e:fb:63:2a:0e:92:8c:90:3a:60:db:7b: 3e:0b:b6:62:a9:92:64:d3:53:56:90:c6:d2:03:14:85:9c:0f: a1:8f:8b:db:1e:0e:f8:8e:57:95:32:dd:bd:65:31:ee:ee:6f: e3:4b:03:10:e0:68:19:bb:cf:0f:18:09:dd:b4:e6:51:18:19: e8:5c:35:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjUwODIzMDA0MzA1WhcNMjUwODMwMDA0MzA1WjAYMRYwFAYD VQQDEw02OGE5MGU5OS1hMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgbHJv+UldzFk3rt+I8vMB7TGj5vwmsEjMJNLPL5PKXHdCd76S9ir9C0y8zK cp6i1v4VVWdjbadst4S5k4w2LJjsEO1THnwc5scft+iAkLfwjV1t3g2Wy3YwOwAe h8CRKyMDwQXD6XUYj06o4dg0MzJnwccDBocAcLd974gq9+wgHOtsSpa2kS00rTH0 H7QsyvvLvNuf4VghGwNoX8P2uIEllSe3eaRwiwVNOrVjSoJVk7GlCnjtPsEhIq6H fyygSYyEK5jrHMtKGe2cATe8+MEy3No68DjPvwcRCRYdpepkdzHVKyEOEzswDzpO DDoZqgv5qlPQbYIVbTpp/r7lQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNc/9js 6m4ApWZbvBsrKebQr+pWMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASr5Epzu/CrTR1bxw/aEMN5xQQpjyRnY59BDGEpN30Bux4NgWYwLDa A4YMPTpausZPDIeD6DycMFdc6AuLAlrcXHh+BaDxBuwM75NIIvuDvctcHyzB/dFP zVpJMht1OTdqPdGBtHBvH2qMrgdDRKnuy8zQ92sO/lbkrlMtAMzez1oc3TgGelXE yH57s1iyxR2/xmN2VR6YnoydfqyhN131Hg/rx60/jeeBEml4jJ2wp5RrEJt3GNPO f/9e+2MqDpKMkDpg23s+C7ZiqZJk01NWkMbSAxSFnA+hj4vbHg74jleVMt29ZTHu 7m/jSwMQ4GgZu88PGAndtOZRGBnoXDWv -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:37 2025 by rpki-client