$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: TXOiS5FWnI++JFVtdq0Rd3J3hR14JDu6AIhjhA4UQIc= Subject key identifier: FD:DF:50:3F:46:77:D9:B8:70:6C:54:BF:39:60:0D:03:3E:89:F7:7A Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 1045 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 103D Signing time: Fri 08 Aug 2025 17:36:36 +0000 Manifest this update: Fri 08 Aug 2025 17:36:35 +0000 Manifest next update: Fri 15 Aug 2025 17:36:35 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: EEtEzphrCJPXt7cL0OPwxbHyozL4POMA7m9h/vBjv4g=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: C3t+NehZCmSbxSRABiEsj0jBSfoJdT1ufKsC9pvYusY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4165 (0x1045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Aug 8 17:36:35 2025 GMT Not After : Aug 15 17:36:35 2025 GMT Subject: CN=689635a3-e384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:94:d9:64:ec:fe:ec:18:28:76:8a:3a:18: 49:84:4f:4e:b7:8f:c3:c8:5b:24:ec:ba:7b:1a:a7: be:1b:44:49:f4:d9:77:54:6e:54:5b:67:f9:29:56: c5:a4:c4:7d:d1:8c:3f:b2:1c:4a:05:48:0b:94:02: a9:8d:69:8d:a5:6a:ac:7b:51:5d:c2:78:01:46:4c: ae:59:da:1a:78:ce:47:eb:35:9f:4b:89:4d:7b:20: e7:b2:09:c7:da:d9:99:c2:29:ac:3c:e0:ed:40:e3: 2c:54:c2:f6:13:7a:fe:50:b5:86:54:9b:2f:65:79: b8:7a:21:f0:4c:f3:63:17:a0:19:32:a6:a8:98:91: ee:75:40:fb:21:21:2c:aa:c8:12:f7:6c:70:60:da: 79:fc:c1:f3:bf:e4:f8:0e:f3:e5:24:09:6b:2f:2d: e7:5e:a6:a9:f0:50:75:b2:11:b3:f9:95:0f:83:c9: 23:c9:0d:34:59:af:4f:99:c1:df:c9:d6:2b:92:20: 71:7c:b4:c7:a2:ba:02:d4:4b:57:03:aa:1f:05:55: 7a:06:28:75:60:25:6c:62:c5:76:20:e8:f4:49:21: 97:2e:ed:03:71:d7:2a:44:47:aa:ad:de:a5:6d:a5: 2e:5b:b9:3b:72:ea:df:1a:18:9b:47:fd:f0:52:a1: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DF:50:3F:46:77:D9:B8:70:6C:54:BF:39:60:0D:03:3E:89:F7:7A X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e7:0c:c3:44:db:2f:7d:20:c8:87:94:ba:d8:5f:48:5e:bf: 22:b6:21:22:80:fb:6a:46:c1:00:aa:17:36:9b:f7:33:6d:f1: 59:56:63:4b:45:de:3c:9d:97:43:a3:6f:ff:6f:ca:ef:3e:05: fa:13:0b:87:b7:bf:6b:d4:fd:8f:d5:68:37:4e:54:27:dc:88: d2:68:a1:24:93:26:60:b2:8f:78:3c:7c:9d:eb:35:95:9d:9b: 80:0c:ec:d1:51:54:fa:81:c4:ea:2a:40:f1:b0:65:41:18:c0: a4:51:d0:c1:a7:8a:6c:70:81:90:68:d3:95:c4:5a:43:94:ca: 0e:97:73:6c:76:74:6e:64:4e:75:99:59:42:df:2e:7f:6d:5a: 60:58:95:94:5f:72:fe:07:d8:17:69:74:4e:08:93:bb:27:6b: aa:1f:f4:13:3f:8d:07:a3:1e:0e:d7:82:62:c6:b0:28:f4:a8: e9:fe:29:57:71:a1:f8:d9:e6:52:4c:d2:41:1e:52:2d:b2:37: 14:ac:07:67:38:cd:76:eb:d1:11:85:1a:3c:1e:53:e9:55:71: 89:e4:80:59:ff:b8:7b:ec:37:97:69:64:78:33:93:56:6a:48: 9f:50:3d:9c:38:70:76:38:41:65:08:06:36:ad:3a:ec:fd:fd: 3e:04:e3:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUwODA4MTczNjM1WhcNMjUwODE1MTczNjM1WjAYMRYwFAYD VQQDEw02ODk2MzVhMy1lMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQiU2WTs/uwYKHaKOhhJhE9Ot4/DyFsk7Lp7Gqe+G0RJ9Nl3VG5UW2f5KVbF pMR90Yw/shxKBUgLlAKpjWmNpWqse1FdwngBRkyuWdoaeM5H6zWfS4lNeyDnsgnH 2tmZwimsPODtQOMsVML2E3r+ULWGVJsvZXm4eiHwTPNjF6AZMqaomJHudUD7ISEs qsgS92xwYNp5/MHzv+T4DvPlJAlrLy3nXqap8FB1shGz+ZUPg8kjyQ00Wa9PmcHf ydYrkiBxfLTHoroC1EtXA6ofBVV6Bih1YCVsYsV2IOj0SSGXLu0DcdcqREeqrd6l baUuW7k7curfGhibR/3wUqGg7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3fUD9G d9m4cGxUvzlgDQM+ifd6MB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP5wzDRNsvfSDIh5S62F9IXr8itiEigPtqRsEAqhc2m/czbfFZVmNL Rd48nZdDo2//b8rvPgX6EwuHt79r1P2P1Wg3TlQn3IjSaKEkkyZgso94PHyd6zWV nZuADOzRUVT6gcTqKkDxsGVBGMCkUdDBp4pscIGQaNOVxFpDlMoOl3NsdnRuZE51 mVlC3y5/bVpgWJWUX3L+B9gXaXROCJO7J2uqH/QTP40Hox4O14JixrAo9Kjp/ilX caH42eZSTNJBHlItsjcUrAdnOM1269ERhRo8HlPpVXGJ5IBZ/7h77DeXaWR4M5NW akifUD2cOHB2OEFlCAY2rTrs/f0+BOPY -----END CERTIFICATE-----Generated at Sat Aug 9 10:54:11 2025 by rpki-client