$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json) Hash identifier: 6cS5fpCc182JTZOjeax1ZKZkBkKBBCrJ12hjm6xPPM0= Subject key identifier: 2B:1A:20:2E:84:7D:8E:1E:1E:81:EF:B4:C9:6B:0A:37:67:7A:A6:FE Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Certificate serial: 10E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft Manifest number: 1094 Signing time: Sun 10 Aug 2025 17:25:24 +0000 Manifest this update: Sun 10 Aug 2025 17:25:23 +0000 Manifest next update: Sun 17 Aug 2025 17:25:23 +0000 Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: oE7cqlWg5WUOabuKQhCNx+/9GIRJ7B0KkqcZgX166bc=) 2: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE=) 3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: isUw4olTYLhmDXX2L/NMbXVs40srSiQ7QfOKuuisKvs=) 4: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4327 (0x10e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Validity Not Before: Aug 10 17:25:23 2025 GMT Not After : Aug 17 17:25:23 2025 GMT Subject: CN=6898d603-e005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bd:e2:1f:51:8a:53:20:e2:86:16:8d:1c:09: d6:79:79:2d:33:08:4d:31:24:4a:13:35:03:39:e8: 2c:6a:fe:cf:b7:aa:3b:31:cc:72:b4:0a:a2:d6:2d: 88:8b:82:99:4f:65:34:c9:20:a1:6c:7c:15:21:f4: f2:49:20:ca:f6:ba:8e:d8:1c:06:5d:6d:b8:a7:cf: 29:0b:8e:d2:c4:12:1b:2a:bd:1a:a1:f6:29:bf:54: 11:bf:09:62:5e:13:0c:9b:d2:c0:fb:16:f4:23:7e: 08:30:cb:0c:5d:3d:e9:f6:1e:2b:77:86:35:f5:df: 7d:c1:c0:3e:93:ac:93:81:62:e1:57:a9:9a:a3:ae: fc:4a:36:df:7f:04:9e:4c:5b:5d:c9:96:00:51:b1: e4:0c:e3:b9:59:31:3c:52:85:96:6a:98:69:bb:d2: 9f:3f:a5:4b:6b:cc:4b:59:d4:ef:f0:55:fa:aa:bb: 8e:ad:51:c3:b3:c8:c1:eb:f2:63:d2:1d:5f:35:26: 1f:7a:5f:c0:0a:3f:ab:ab:74:8a:ee:82:3a:44:af: c0:e7:c7:1f:f2:36:e1:ea:9c:22:ed:d5:f2:96:1c: d9:02:1d:7b:a2:09:dc:44:32:82:a2:27:40:c4:6f: 25:f0:b7:5a:6d:48:79:05:ca:8e:85:5d:53:c2:40: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1A:20:2E:84:7D:8E:1E:1E:81:EF:B4:C9:6B:0A:37:67:7A:A6:FE X509v3 Authority Key Identifier: keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2f:7f:66:0f:c6:82:6e:2c:64:f1:3e:79:ad:8c:3a:74:59: 7f:78:5d:7a:c6:2e:ba:82:a7:c7:75:9c:12:1d:6a:2c:35:1c: 75:29:65:03:12:66:85:9e:31:4b:92:05:4d:e1:fb:7c:80:eb: 41:e5:85:45:4d:5e:65:90:ec:e6:ab:a0:d3:44:9e:08:bd:94: 87:13:cf:17:18:6b:9c:e6:af:c8:21:15:01:20:35:8c:55:a8: 14:86:1f:2f:61:c9:43:69:69:0f:34:3d:17:cb:b2:f2:d7:88: a1:4b:22:1c:ee:cb:7a:74:61:7b:da:86:b7:1f:dd:69:36:e1: 1b:ef:6a:b6:0d:b9:06:f5:f6:dc:b9:dc:5f:96:de:8c:67:2a: 9c:bf:ae:c0:41:4a:ed:28:04:61:01:67:6b:32:a1:44:fa:fd: d8:0b:5f:88:06:73:21:6b:a8:77:d0:21:c0:d2:44:80:39:9c: 36:ad:65:8f:3a:4c:38:e2:05:e2:28:09:97:2f:dc:61:ed:f8: 35:f6:e9:1e:8d:01:07:b3:23:d4:2c:ac:45:84:08:e5:fb:e8: ee:74:88:26:57:d7:56:e3:cf:1f:08:e1:cd:3c:34:da:fc:2e: fb:a9:55:13:c9:d6:b4:7d:f9:83:4e:c8:f4:e9:9e:7d:0b:80: c5:27:ac:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw RDEzQUFBNTIwHhcNMjUwODEwMTcyNTIzWhcNMjUwODE3MTcyNTIzWjAYMRYwFAYD VQQDEw02ODk4ZDYwMy1lMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r3iH1GKUyDihhaNHAnWeXktMwhNMSRKEzUDOegsav7Pt6o7McxytAqi1i2I i4KZT2U0ySChbHwVIfTySSDK9rqO2BwGXW24p88pC47SxBIbKr0aofYpv1QRvwli XhMMm9LA+xb0I34IMMsMXT3p9h4rd4Y19d99wcA+k6yTgWLhV6mao678SjbffwSe TFtdyZYAUbHkDOO5WTE8UoWWaphpu9KfP6VLa8xLWdTv8FX6qruOrVHDs8jB6/Jj 0h1fNSYfel/ACj+rq3SK7oI6RK/A58cf8jbh6pwi7dXylhzZAh17ogncRDKCoidA xG8l8LdabUh5BcqOhV1TwkCuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsaIC6E fY4eHoHvtMlrCjdneqb+MB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0 NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDREMS9FRjA5NThFRTQ0NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014 NmFyd19YY3FjeWdORTZxbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByL39mD8aCbixk8T55rYw6dFl/eF16xi66gqfHdZwSHWosNRx1KWUD EmaFnjFLkgVN4ft8gOtB5YVFTV5lkOzmq6DTRJ4IvZSHE88XGGuc5q/IIRUBIDWM VagUhh8vYclDaWkPND0Xy7Ly14ihSyIc7st6dGF72oa3H91pNuEb72q2DbkG9fbc udxflt6MZyqcv67AQUrtKARhAWdrMqFE+v3YC1+IBnMha6h30CHA0kSAOZw2rWWP Okw44gXiKAmXL9xh7fg19ukejQEHsyPULKxFhAjl++judIgmV9dW488fCOHNPDTa /C77qVUTyda0ffmDTsj06Z59C4DFJ6yJ -----END CERTIFICATE-----Generated at Mon Aug 11 13:13:51 2025 by rpki-client