$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft File: gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json) Hash identifier: fF4jbVr8wNDSoM/UQkftrIWpqmEa0ir0cOI7xaA5uRs= Subject key identifier: 68:FD:9E:CD:1A:F1:C7:41:F5:E4:97:0D:9B:8F:B6:3F:0F:09:28:ED Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft Manifest number: 017A Signing time: Sat 09 Aug 2025 04:09:10 +0000 Manifest this update: Sat 09 Aug 2025 04:09:09 +0000 Manifest next update: Sat 16 Aug 2025 04:09:09 +0000 Files and hashes: 1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: wozBwKEPV8YjlTe7Kt0DyHtJcCu5+LaBUn+zZChKHhk=) 2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: nHROj80zbbVn2fC+9G1lpLSWVwTbw64VZhVPZYK842c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Validity Not Before: Aug 9 04:09:09 2025 GMT Not After : Aug 16 04:09:09 2025 GMT Subject: CN=6896c9e5-45e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:94:b5:e6:22:f1:f0:99:3d:52:f3:c2:44: 9c:b0:57:6c:d1:42:7c:ae:b1:a3:2e:13:4f:e0:9c: 29:b7:a8:5c:1e:77:95:de:18:a9:f4:bc:eb:71:a0: ce:98:80:04:b4:61:87:2c:8c:51:45:07:85:f3:a5: 96:d2:0d:6f:6d:f7:03:95:1e:31:cc:cb:bd:d3:8d: 3f:7c:cc:34:25:1e:6c:87:ba:a4:21:c8:49:28:2e: 26:e8:95:fd:b6:4f:0e:5f:9c:2a:0f:b0:c7:d8:6b: 09:3b:df:4f:fa:07:1b:22:31:db:af:39:b8:71:89: 39:dc:fa:01:ea:d4:b4:ed:1d:68:5e:94:d5:a2:33: 6b:60:66:68:c8:c2:4f:c7:ae:75:53:99:78:25:2a: 1a:1a:94:8c:d1:d9:0d:90:5f:78:2c:e6:e8:e5:bd: 2a:5a:f2:e9:8e:1f:7a:14:e1:65:5b:56:55:cf:9b: 16:08:b4:ab:d2:a1:d3:35:5e:90:b9:59:40:b0:ea: c5:87:a2:cf:0e:0f:8e:1d:7c:18:93:11:aa:ca:29: 1d:0b:b8:d5:a7:dc:1c:b0:31:9a:89:b4:97:c4:e3: 26:f0:11:f8:38:43:7c:a8:c3:17:df:cd:62:4a:c8: 14:3f:6d:06:ee:2a:d2:f4:ba:2f:b9:d4:a4:c1:af: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:9E:CD:1A:F1:C7:41:F5:E4:97:0D:9B:8F:B6:3F:0F:09:28:ED X509v3 Authority Key Identifier: keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:44:2d:2c:40:5d:bc:c4:c3:b7:96:3c:6f:eb:a8:8e:f9:64: 35:29:01:e5:e0:51:b1:82:c3:2f:54:57:49:a5:66:84:34:a9: 6f:3b:21:99:55:36:88:65:18:d3:77:35:22:67:f1:e4:83:78: 42:39:fa:5b:5d:d7:b2:6e:51:c2:f2:97:a5:ae:52:d3:fe:13: 77:a4:8a:64:e5:59:b0:fe:9c:cf:aa:c5:cd:50:7e:b2:0a:a2: ff:9f:58:fa:3b:d0:d4:6f:28:a3:bc:93:e2:ac:a5:f0:f3:40: 04:d1:1a:87:f1:e0:a7:0f:8f:92:37:e7:45:3e:74:89:75:64: 6c:23:6b:5c:d7:f6:fe:68:41:f8:db:4c:7c:7b:57:ba:67:c1: 06:a9:00:59:ad:d5:07:b4:64:55:6c:14:c8:3e:a2:14:c9:17: 9b:12:a6:ac:74:c1:42:72:59:db:6d:57:16:e5:f0:6a:6e:57: 1e:6a:a3:38:4c:9c:40:e9:01:c0:39:ec:c4:51:ef:97:3e:55: 44:b6:22:9e:84:27:af:ff:d0:28:38:dc:16:12:53:00:bd:ad: 10:33:2c:4b:53:9d:6a:bc:70:d8:b3:a3:27:a2:fc:64:6a:cc: 4c:de:1a:13:0c:01:2b:b7:9b:29:f3:8e:0f:16:94:86:96:a2: 0d:74:00:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MjQxMTAvBgNVBAUTKDgxRkY4NUVDQUVDQzUzREI3NDUzMDg2MDcxNDU1OUI3 RTUxODQ1NDEwHhcNMjUwODA5MDQwOTA5WhcNMjUwODE2MDQwOTA5WjAYMRYwFAYD VQQDEw02ODk2YzllNS00NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsaUteYi8fCZPVLzwkScsFds0UJ8rrGjLhNP4Jwpt6hcHneV3hip9LzrcaDO mIAEtGGHLIxRRQeF86WW0g1vbfcDlR4xzMu9040/fMw0JR5sh7qkIchJKC4m6JX9 tk8OX5wqD7DH2GsJO99P+gcbIjHbrzm4cYk53PoB6tS07R1oXpTVojNrYGZoyMJP x651U5l4JSoaGpSM0dkNkF94LObo5b0qWvLpjh96FOFlW1ZVz5sWCLSr0qHTNV6Q uVlAsOrFh6LPDg+OHXwYkxGqyikdC7jVp9wcsDGaibSXxOMm8BH4OEN8qMMX381i SsgUP20G7irS9LovudSkwa/ZsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj9ns0a 8cdB9eSXDZuPtj8PCSjtMB8GA1UdIwQYMBaAFIH/heyuzFPbdFMIYHFFWbflGEVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcyNC84QUQxREI1ODQw OTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5dDBVd2hnY1VWWnQtVVlS VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmLUY3SzdNVTl0MFV3aGdjVVZadC1VWVJVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcyNC84QUQxREI1ODQwOTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5 dDBVd2hnY1VWWnQtVVlSVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhRC0sQF28xMO3ljxv66iO+WQ1KQHl4FGxgsMvVFdJpWaENKlvOyGZ VTaIZRjTdzUiZ/Hkg3hCOfpbXdeyblHC8pelrlLT/hN3pIpk5Vmw/pzPqsXNUH6y CqL/n1j6O9DUbyijvJPirKXw80AE0RqH8eCnD4+SN+dFPnSJdWRsI2tc1/b+aEH4 20x8e1e6Z8EGqQBZrdUHtGRVbBTIPqIUyRebEqasdMFCclnbbVcW5fBqblceaqM4 TJxA6QHAOezEUe+XPlVEtiKehCev/9AoONwWElMAva0QMyxLU51qvHDYs6Mnovxk asxM3hoTDAErt5sp844PFpSGlqINdACr -----END CERTIFICATE-----Generated at Sun Aug 10 05:37:00 2025 by rpki-client