$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: vATMbd4TuorXteHRuzz88jUPEgryqMujWe34ZpZknok= Subject key identifier: D8:20:AA:FC:A8:68:AB:B5:77:D5:08:9A:EA:D3:BA:DE:6E:B6:F2:E3 Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 066F Signing time: Fri 08 Aug 2025 22:52:42 +0000 Manifest this update: Fri 08 Aug 2025 22:52:41 +0000 Manifest next update: Fri 15 Aug 2025 22:52:41 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: 9WBI5GMJBBGqJl2TGHYL9SyuuDdMFkYWsGCkNxR6TYU=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: Aug 8 22:52:41 2025 GMT Not After : Aug 15 22:52:41 2025 GMT Subject: CN=68967fba-bf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:af:42:41:5b:f7:9a:c1:83:cb:cb:e5:04: db:b4:2c:b8:ff:21:bc:4a:7e:64:81:bf:76:af:bf: 6b:78:ef:ed:12:58:66:66:69:56:5d:82:aa:f6:26: dd:d0:76:09:fc:ac:fc:6a:27:cc:d1:7e:6d:ab:35: e3:5d:19:19:9b:cb:8a:1c:dd:b6:dd:8a:8c:a5:9b: 40:8e:f9:88:52:c0:28:ee:55:dd:41:f6:b0:bf:7d: 82:9e:1e:8b:92:82:a5:e0:ec:38:85:92:78:74:11: 1d:77:ee:a4:4f:33:d4:5f:c8:53:29:44:b2:54:87: fe:96:1f:e4:0b:7b:7e:db:33:af:72:38:5e:2c:df: 8d:37:d0:08:88:79:62:bb:32:2f:ed:49:c2:88:a3: 00:4f:24:21:25:9e:37:fe:7d:38:27:d2:3a:a1:43: 50:b8:b3:37:50:d5:b8:84:f0:01:e6:d7:1b:3f:9b: 54:9a:ed:c5:bf:28:47:bd:4a:0d:8e:aa:9a:82:44: 1f:62:dd:e2:db:99:f9:8b:19:95:a3:16:36:b9:d5: 3e:0d:e6:61:d8:8a:ac:1d:aa:5c:a9:55:72:5e:08: 51:44:6e:40:9d:a9:4d:f9:41:a2:f7:df:c5:e9:4f: 0e:13:2f:09:24:20:aa:74:b8:d0:c1:88:4d:ce:34: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:20:AA:FC:A8:68:AB:B5:77:D5:08:9A:EA:D3:BA:DE:6E:B6:F2:E3 X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4b:af:00:19:85:88:99:5e:87:56:bf:30:d7:f0:49:4d:85: 44:ee:ed:b9:7d:6e:43:ae:48:7f:67:cc:d8:be:67:87:e3:fc: f8:8a:4b:e3:c8:a9:6b:6d:2c:21:6d:10:d4:d5:8d:77:57:88: 3b:ec:28:64:fd:d6:ef:b0:74:16:90:37:6c:85:22:91:c3:fd: 5d:7c:94:52:da:d6:0a:fc:32:49:12:ab:93:bb:59:7c:9a:72: 14:6f:6f:47:20:46:33:07:b5:04:af:32:4b:64:ab:62:0f:3f: 21:1f:ea:61:88:f6:2f:25:c6:b8:57:97:cb:fe:a9:9c:48:d7: 20:c3:ef:51:7d:5a:2d:c5:cf:10:98:3e:1c:e1:69:52:f2:eb: b3:0d:cc:08:16:87:f0:8c:38:4d:85:bb:20:3b:6c:c1:8f:88: d9:14:4f:b8:8a:02:5d:ec:63:d9:f6:5c:4c:4f:29:3c:1f:de: c6:e1:ad:f0:d8:d2:33:ff:e0:9f:01:57:1c:a6:ce:cb:7e:d6: be:75:a8:06:6b:f5:ae:23:07:32:bc:43:27:ac:d8:3a:8b:0b: cc:01:ba:83:00:b1:68:8d:b1:1e:cb:58:33:ef:8c:ef:ad:0d: 31:a8:46:59:6e:8c:58:e3:d6:72:fe:ff:c8:3c:2f:40:32:ae: 74:23:70:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjUwODA4MjI1MjQxWhcNMjUwODE1MjI1MjQxWjAYMRYwFAYD VQQDEw02ODk2N2ZiYS1iZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQevQkFb95rBg8vL5QTbtCy4/yG8Sn5kgb92r79reO/tElhmZmlWXYKq9ibd 0HYJ/Kz8aifM0X5tqzXjXRkZm8uKHN223YqMpZtAjvmIUsAo7lXdQfawv32Cnh6L koKl4Ow4hZJ4dBEdd+6kTzPUX8hTKUSyVIf+lh/kC3t+2zOvcjheLN+NN9AIiHli uzIv7UnCiKMATyQhJZ43/n04J9I6oUNQuLM3UNW4hPAB5tcbP5tUmu3FvyhHvUoN jqqagkQfYt3i25n5ixmVoxY2udU+DeZh2IqsHapcqVVyXghRRG5AnalN+UGi99/F 6U8OEy8JJCCqdLjQwYhNzjSBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNggqvyo aKu1d9UImurTut5utvLjMB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6S68AGYWImV6HVr8w1/BJTYVE7u25fW5Drkh/Z8zYvmeH4/z4ikvj yKlrbSwhbRDU1Y13V4g77Chk/dbvsHQWkDdshSKRw/1dfJRS2tYK/DJJEquTu1l8 mnIUb29HIEYzB7UErzJLZKtiDz8hH+phiPYvJca4V5fL/qmcSNcgw+9RfVotxc8Q mD4c4WlS8uuzDcwIFofwjDhNhbsgO2zBj4jZFE+4igJd7GPZ9lxMTyk8H97G4a3w 2NIz/+CfAVccps7Lfta+dagGa/WuIwcyvEMnrNg6iwvMAbqDALFojbEey1gz74zv rQ0xqEZZboxY49Zy/v/IPC9AMq50I3Ay -----END CERTIFICATE-----Generated at Sat Aug 9 23:14:43 2025 by rpki-client