$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: zKYWMbZE8huZrhxZNpx5Gz78Q4YaRMFN7RTJeqsyVqY= Subject key identifier: B1:D8:47:50:02:1D:C8:91:AC:0E:2F:AF:FD:6C:9A:7C:CB:42:80:9C Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: DA Signing time: Sat 09 Aug 2025 05:56:57 +0000 Manifest this update: Sat 09 Aug 2025 05:56:57 +0000 Manifest next update: Sat 16 Aug 2025 05:56:57 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: GgmcfYgM0EXH0TCYh/3yLcZixxUGftoP2e2CA//822E=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Aug 9 05:56:57 2025 GMT Not After : Aug 16 05:56:57 2025 GMT Subject: CN=6896e329-1dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:02:ae:a6:fb:3d:92:85:2a:5b:7a:aa:27:1a: 6a:3f:ce:78:e6:b5:4c:b0:c9:c9:10:f2:e4:69:e0: b8:6d:f3:de:de:61:2c:24:ff:28:d0:98:a7:1d:92: 72:5b:fa:3c:da:32:0e:40:38:d8:20:98:f6:43:e2: f6:da:b5:a4:b2:ec:3f:30:2d:32:75:14:4a:c9:6a: af:0e:c9:22:e6:50:7d:38:d8:a6:f8:66:d8:6e:16: cb:2a:82:d2:76:16:80:b9:e8:4b:6a:27:03:25:93: 4d:36:d6:48:5b:09:66:21:73:cd:a1:47:92:fb:3e: d4:06:dc:44:f4:93:ed:55:3a:32:40:07:a4:7f:68: 0e:7e:35:5b:54:94:86:9e:ab:e0:4f:b3:5a:c2:2e: f7:7f:7c:10:a7:36:5b:28:2a:ed:b6:bc:7c:42:05: 42:a7:4a:87:4b:dd:c5:56:75:3f:ce:60:aa:34:ff: 58:c2:f3:6f:80:21:6c:3e:5c:0f:a4:a9:06:3a:3a: 64:be:14:61:6b:ba:df:90:4a:ef:78:cb:67:fa:50: 6a:b6:ec:fd:76:48:bc:ee:83:f9:49:59:2c:2e:c8: 9d:38:4f:7c:1d:3f:f3:8f:59:71:3c:fc:15:7a:a7: eb:8e:ee:52:5f:80:1f:b3:61:b4:54:90:87:f7:5c: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D8:47:50:02:1D:C8:91:AC:0E:2F:AF:FD:6C:9A:7C:CB:42:80:9C X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:df:f9:a6:f8:5d:62:a2:39:7c:8a:5b:26:9e:55:f5:d4:4f: a4:70:80:aa:2e:ae:a8:53:ca:a6:8f:e2:2d:1a:6e:59:ca:49: 93:b1:ea:ce:b3:c5:5e:d0:32:55:eb:7f:7b:69:8f:fe:fa:28: 07:dc:7d:46:c2:c8:9f:2d:30:41:af:09:36:16:12:d5:0c:7e: 57:2c:95:1d:aa:ea:1c:7e:84:ee:c0:f7:6c:be:6d:0e:51:17: fc:b8:8a:ee:5b:bb:61:d1:f4:8b:2a:31:79:1d:cd:a0:f4:7d: db:7f:bf:5e:ce:31:8c:79:d8:e1:87:c4:28:23:e5:09:04:51: 4e:3a:89:53:c3:c9:4a:80:1e:0b:98:7c:8a:fe:47:40:66:8c: ed:d0:40:87:cc:94:82:19:74:9e:95:77:f1:b4:07:5a:c9:64: c4:62:aa:0b:f4:e9:ea:2f:0b:61:ba:9d:49:a9:c6:eb:72:40: 15:12:ff:d0:ab:2d:11:39:be:19:04:4c:ce:66:e4:bf:5b:f4: cc:77:d4:81:c4:19:06:6c:aa:5b:c6:ce:ef:81:b6:cb:39:8c: 81:88:a8:48:20:e3:42:83:33:46:0a:d0:96:39:36:48:8d:5e: fd:5a:0e:4a:82:b8:ee:b1:33:b3:28:e5:f8:f9:76:69:0c:87: aa:ed:09:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUwODA5MDU1NjU3WhcNMjUwODE2MDU1NjU3WjAYMRYwFAYD VQQDEw02ODk2ZTMyOS0xZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QKupvs9koUqW3qqJxpqP8545rVMsMnJEPLkaeC4bfPe3mEsJP8o0JinHZJy W/o82jIOQDjYIJj2Q+L22rWksuw/MC0ydRRKyWqvDski5lB9ONim+GbYbhbLKoLS dhaAuehLaicDJZNNNtZIWwlmIXPNoUeS+z7UBtxE9JPtVToyQAekf2gOfjVbVJSG nqvgT7Nawi73f3wQpzZbKCrttrx8QgVCp0qHS93FVnU/zmCqNP9YwvNvgCFsPlwP pKkGOjpkvhRha7rfkErveMtn+lBqtuz9dki87oP5SVksLsidOE98HT/zj1lxPPwV eqfrju5SX4Afs2G0VJCH91wE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHYR1AC HciRrA4vr/1smnzLQoCcMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+3/mm+F1iojl8ilsmnlX11E+kcICqLq6oU8qmj+ItGm5ZykmTserO s8Ve0DJV6397aY/++igH3H1GwsifLTBBrwk2FhLVDH5XLJUdquocfoTuwPdsvm0O URf8uIruW7th0fSLKjF5Hc2g9H3bf79ezjGMedjhh8QoI+UJBFFOOolTw8lKgB4L mHyK/kdAZozt0ECHzJSCGXSelXfxtAdayWTEYqoL9OnqLwthup1JqcbrckAVEv/Q qy0ROb4ZBEzOZuS/W/TMd9SBxBkGbKpbxs7vgbbLOYyBiKhIIONCgzNGCtCWOTZI jV79Wg5KgrjusTOzKOX4+XZpDIeq7Qkh -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:34 2025 by rpki-client