$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json) Hash identifier: kev27A0ivpGMxL27ZUfguH6ut+yPOnwOfd5qT2ohMiU= Subject key identifier: 42:55:4A:53:F2:E3:B3:F8:1C:3D:7D:E0:E2:8D:2A:C5:3B:3B:EE:5C Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft Manifest number: 43 Signing time: Sat 09 Aug 2025 08:03:08 +0000 Manifest this update: Sat 09 Aug 2025 08:03:08 +0000 Manifest next update: Sat 16 Aug 2025 08:03:08 +0000 Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: A0Tc0rjMtxALsJShYTAYmOFMwoEoUFoNXSBbEP6EmYE=) 2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=) 3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Validity Not Before: Aug 9 08:03:08 2025 GMT Not After : Aug 16 08:03:08 2025 GMT Subject: CN=689700bc-8e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9c:e5:e8:db:05:12:24:76:8a:70:57:1f:d3: f0:f6:f1:9b:89:04:2e:72:93:9a:ac:01:d8:bb:48: 8f:66:0b:6d:49:28:9c:fe:80:d8:04:dc:36:23:cc: 25:20:ba:9c:e8:11:88:d7:4e:9f:e6:56:2a:55:08: 22:88:27:48:ec:41:9a:b5:72:b1:1b:f2:11:4b:24: 72:eb:e8:1c:3d:01:c5:5c:5e:bd:04:51:75:19:40: 69:51:22:b5:3d:20:88:76:59:52:c7:a5:ad:7f:a9: 53:c3:01:e5:9e:bf:a6:6c:1c:0f:c2:76:f8:28:d2: 72:be:bf:39:8a:14:48:4d:5a:e8:b3:47:0b:4c:9f: 60:4e:84:f3:e4:da:14:7a:44:6c:32:40:bf:d5:87: 78:c9:20:b1:2b:43:be:25:92:59:22:8f:7d:2f:80: f5:7a:ef:33:48:91:b2:0a:59:4e:32:9c:44:31:e5: 06:9e:e2:01:d3:3f:94:e4:cd:86:fa:c6:62:ab:e5: a2:ac:66:59:7f:84:07:4a:fa:c0:3c:60:a7:78:d3: 8c:01:a6:3c:5f:d1:a2:d1:12:03:b3:4e:9d:2f:2c: 53:da:1c:15:22:32:d8:f3:7d:35:1e:b7:8b:0d:4f: ae:d8:a0:15:96:e0:f8:0c:b6:a9:5c:d1:06:cd:d1: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:4A:53:F2:E3:B3:F8:1C:3D:7D:E0:E2:8D:2A:C5:3B:3B:EE:5C X509v3 Authority Key Identifier: keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b3:d7:ec:6e:ff:28:3c:70:46:4c:75:c3:e8:93:22:c4:27: d3:52:e6:47:e2:83:3c:72:d5:f4:ed:6d:eb:a7:c8:67:26:62: f0:03:89:46:ba:72:76:86:fc:39:a4:ce:0e:bb:f4:cf:30:5e: 4c:24:26:d1:df:9b:36:67:3a:86:05:c4:44:ed:ab:f0:c4:9c: f4:d1:1c:d2:57:1a:85:30:9e:57:83:a4:b0:15:f3:5f:41:bf: b8:ec:e0:6a:01:e0:8f:f2:03:eb:db:95:89:14:d9:5a:fd:a8: 8e:0a:9c:5c:b0:6c:89:66:41:45:b7:d0:83:09:3e:59:b9:0e: ec:84:ac:c6:2d:6b:dd:67:30:a8:29:13:5c:1d:1f:82:ff:ca: 77:40:f9:19:c9:d5:a1:4b:90:da:68:26:0b:27:a6:0d:d3:d1: 66:1d:c8:cb:f7:98:1d:47:58:f8:39:16:9f:b9:d3:c1:06:67: b5:59:76:4a:b3:81:2e:41:f3:b6:87:12:ea:ad:7c:67:04:44: 82:af:78:64:a5:71:42:77:02:d1:ce:fe:51:eb:a0:8a:b6:b4: 33:a2:60:88:e1:97:8d:55:0d:f9:28:cf:ab:f7:4f:9a:25:7e: 49:c2:06:c1:3b:3d:cd:ec:7a:49:9d:27:56:d4:a2:9f:dc:c5: ea:a4:30:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0QyMTExMC8GA1UEBRMoODE4QkI5MDMzMjcxN0Y5MzU3MzBEQUYxNDcwOEZGQzJG NjA1RjA1RjAeFw0yNTA4MDkwODAzMDhaFw0yNTA4MTYwODAzMDhaMBgxFjAUBgNV BAMTDTY4OTcwMGJjLThlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlnOXo2wUSJHaKcFcf0/D28ZuJBC5yk5qsAdi7SI9mC21JKJz+gNgE3DYjzCUg upzoEYjXTp/mVipVCCKIJ0jsQZq1crEb8hFLJHLr6Bw9AcVcXr0EUXUZQGlRIrU9 IIh2WVLHpa1/qVPDAeWev6ZsHA/Cdvgo0nK+vzmKFEhNWuizRwtMn2BOhPPk2hR6 RGwyQL/Vh3jJILErQ74lklkij30vgPV67zNIkbIKWU4ynEQx5Qae4gHTP5TkzYb6 xmKr5aKsZll/hAdK+sA8YKd404wBpjxf0aLREgOzTp0vLFPaHBUiMtjzfTUet4sN T67YoBWW4PgMtqlc0QbN0eh5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQlVKU/Lj s/gcPX3g4o0qxTs77lwwHwYDVR0jBBgwFoAUgYu5AzJxf5NXMNrxRwj/wvYF8F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRDIxLzM4QzI2MUU0MUMz ODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1l1NUF6SnhmNU5YTU5yeFJ3al93dllGOEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RDIxLzM4QzI2MUU0MUMzODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVO WE1OcnhSd2pfd3ZZRjhGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2z1+xu/yg8cEZMdcPokyLEJ9NS5kfigzxy1fTtbeunyGcmYvADiUa6 cnaG/Dmkzg679M8wXkwkJtHfmzZnOoYFxETtq/DEnPTRHNJXGoUwnleDpLAV819B v7js4GoB4I/yA+vblYkU2Vr9qI4KnFywbIlmQUW30IMJPlm5DuyErMYta91nMKgp E1wdH4L/yndA+RnJ1aFLkNpoJgsnpg3T0WYdyMv3mB1HWPg5Fp+508EGZ7VZdkqz gS5B87aHEuqtfGcERIKveGSlcUJ3AtHO/lHroIq2tDOiYIjhl41VDfkoz6v3T5ol fknCBsE7Pc3sekmdJ1bUop/cxeqkMJc= -----END CERTIFICATE-----Generated at Sun Aug 10 03:57:39 2025 by rpki-client