$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft File: gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json) Hash identifier: LLmw6gkxiD1wSRs2vQ7TJlgSpOkv/F3HPs2W+wly9OE= Subject key identifier: 00:E4:3F:3F:28:85:5A:AD:17:0C:0B:2A:AD:52:54:F7:94:CF:AE:1D Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft Manifest number: 068A Signing time: Fri 22 Aug 2025 22:30:07 +0000 Manifest this update: Fri 22 Aug 2025 22:30:07 +0000 Manifest next update: Fri 29 Aug 2025 22:30:07 +0000 Files and hashes: 1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: QinwiqFxiKcPDz74k2o9TWQkFwBG9VCZqQqknvQ81bc=) 2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: vkyP11luhnXeWA23/INygAjf676dmOUmLr8+nJsgHpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Validity Not Before: Aug 22 22:30:07 2025 GMT Not After : Aug 29 22:30:07 2025 GMT Subject: CN=68a8ef6f-d89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:6c:1e:18:77:ee:19:5e:ea:0a:81:cb:38: e2:9e:d4:80:1a:8e:fb:de:bb:0b:ba:12:b7:f4:a6: 55:39:7d:f4:35:7a:1f:06:01:83:3c:e6:58:15:83: 62:c3:86:b3:81:cc:6c:40:4b:fb:8d:56:06:2c:02: 54:df:a4:ce:12:66:fa:d0:42:64:e1:01:74:46:43: b1:82:eb:ec:76:66:3a:31:c6:32:4a:73:1a:76:f1: f3:fa:c7:ac:5a:5c:b0:20:ff:f2:80:0d:34:2c:c3: 0c:91:d2:8a:4b:b9:f4:3b:49:9e:d7:b2:8e:21:71: a8:67:18:41:ca:dc:45:54:60:9e:1d:61:29:73:f4: 9a:1d:d0:88:4c:db:f4:d7:5e:69:5a:42:ab:2e:8e: ff:75:37:1d:34:04:7e:ce:36:85:8d:3f:e9:62:e1: 8c:0e:a1:49:3a:93:bc:44:02:8f:cf:c9:3c:09:82: ee:45:d5:56:10:b0:15:3a:20:b8:56:06:54:99:71: 77:1e:4f:e6:fb:02:92:a3:f7:a6:16:42:84:15:75: df:2e:11:a6:db:8f:18:52:18:74:5d:ab:1b:25:30: c7:bd:3c:8b:a9:05:48:52:2e:4f:a3:ba:69:1c:11: dd:a5:0b:44:d0:d5:31:ba:0a:0b:6d:a8:25:d1:df: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:3F:3F:28:85:5A:AD:17:0C:0B:2A:AD:52:54:F7:94:CF:AE:1D X509v3 Authority Key Identifier: keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8d:04:87:65:83:15:fa:d8:d7:37:6f:aa:18:d7:2e:fa:9d: 13:6f:40:41:a1:42:9e:5a:a5:9b:a5:c8:bb:6d:9f:ba:f5:61: ee:ec:53:a9:1c:9a:8a:ec:ae:de:0b:21:e1:57:af:9a:19:27: bd:7d:4e:5e:78:ff:6f:89:e0:14:00:ac:e5:7a:f1:87:96:45: 8b:cb:a6:b5:35:91:f7:ca:e3:3c:a9:96:87:45:29:5b:86:b2: 3f:b2:c9:ab:ac:52:cd:12:79:23:bb:55:41:16:8e:fd:62:f9: ca:2a:ef:a3:2d:ba:f8:a9:a2:4e:b8:d5:ad:64:9b:d1:d7:00: 6d:54:94:24:1c:05:22:b1:86:ad:8f:7d:4e:0c:6e:c6:70:88: 98:e4:bb:ae:8f:8c:8f:ee:15:fc:23:34:6c:c5:3f:4f:d1:d0: f9:6f:d3:c2:4c:76:3a:eb:6b:ca:5d:1b:8c:85:99:50:51:8b: 4e:5b:87:25:9e:9e:88:bd:a6:40:69:bc:34:97:89:c9:4c:bf: e8:31:01:ba:da:27:73:95:59:86:90:54:f6:5b:ac:5e:62:b4: 9e:57:22:88:08:0a:10:4f:c1:e1:dd:f5:73:c8:27:1d:5c:26: 0f:14:25:59:d9:40:67:e9:0a:fb:76:f0:c0:ed:24:8b:b2:a4: 9a:21:de:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE OUNDMTg3MTAwHhcNMjUwODIyMjIzMDA3WhcNMjUwODI5MjIzMDA3WjAYMRYwFAYD VQQDEw02OGE4ZWY2Zi1kODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjlsHhh37hle6gqByzjintSAGo773rsLuhK39KZVOX30NXofBgGDPOZYFYNi w4azgcxsQEv7jVYGLAJU36TOEmb60EJk4QF0RkOxguvsdmY6McYySnMadvHz+ses WlywIP/ygA00LMMMkdKKS7n0O0me17KOIXGoZxhBytxFVGCeHWEpc/SaHdCITNv0 115pWkKrLo7/dTcdNAR+zjaFjT/pYuGMDqFJOpO8RAKPz8k8CYLuRdVWELAVOiC4 VgZUmXF3Hk/m+wKSo/emFkKEFXXfLhGm248YUhh0XasbJTDHvTyLqQVIUi5Po7pp HBHdpQtE0NUxugoLbagl0d/6eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADkPz8o hVqtFwwLKq1SVPeUz64dMB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNENi84M0I2NTE5NjgzRjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83 Y2F4c2FZd0dkVWpaekJoeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6jQSHZYMV+tjXN2+qGNcu+p0Tb0BBoUKeWqWbpci7bZ+69WHu7FOp HJqK7K7eCyHhV6+aGSe9fU5eeP9vieAUAKzlevGHlkWLy6a1NZH3yuM8qZaHRSlb hrI/ssmrrFLNEnkju1VBFo79YvnKKu+jLbr4qaJOuNWtZJvR1wBtVJQkHAUisYat j31ODG7GcIiY5Luuj4yP7hX8IzRsxT9P0dD5b9PCTHY662vKXRuMhZlQUYtOW4cl np6IvaZAabw0l4nJTL/oMQG62idzlVmGkFT2W6xeYrSeVyKICAoQT8Hh3fVzyCcd XCYPFCVZ2UBn6Qr7dvDA7SSLsqSaId6A -----END CERTIFICATE-----Generated at Sat Aug 23 18:37:42 2025 by rpki-client