$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: 2YxYMh0C2ocCtm7LP+rkGxbqJWywoofRAo14Arg7iHE= Subject key identifier: 02:1C:3B:06:3C:12:73:1C:79:36:55:03:AB:67:AA:1C:3D:89:56:27 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 035E Signing time: Mon 11 Aug 2025 01:10:17 +0000 Manifest this update: Mon 11 Aug 2025 01:10:16 +0000 Manifest next update: Mon 18 Aug 2025 01:10:16 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: CjjyQeutHujNz1WNHoJqeZnfNgm8o9fdtS5yF+XhsuY=) 2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Aug 11 01:10:16 2025 GMT Not After : Aug 18 01:10:16 2025 GMT Subject: CN=689942f8-da8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:dd:19:1c:45:ad:dd:f6:61:2f:27:b4:79: 90:d9:56:36:52:e4:44:d6:4d:f0:88:fb:bc:4a:ab: e8:84:54:08:f6:6f:45:33:b7:37:7e:e7:90:e9:ed: 95:ed:28:84:d6:8f:8a:72:ed:98:db:92:10:17:21: be:2a:81:5e:3b:47:68:1e:f1:df:cd:ac:a7:41:aa: 65:11:32:be:21:2b:8c:0b:42:34:ce:52:18:a1:8f: ba:23:6b:22:ad:6e:49:12:49:03:1a:18:79:69:01: d0:5e:75:5d:30:73:2d:0f:c9:01:24:70:69:4a:98: 20:90:a9:dd:71:4a:71:75:f3:a7:62:59:51:3c:47: b1:08:f6:89:37:48:33:c4:16:88:6c:1d:1e:93:80: bd:42:67:72:1c:70:57:da:4b:07:43:0e:d3:e8:9f: 3e:92:c5:66:a2:61:fa:61:12:11:96:f2:06:f3:46: d9:3e:d5:dc:9d:37:e0:42:f8:48:28:e0:4b:03:03: 53:b4:59:e9:20:c9:37:0a:93:05:66:42:5e:23:d4: ee:77:87:5f:05:b7:18:26:6b:2a:ed:a6:1d:18:9f: e0:07:7d:22:cd:96:a8:3d:d1:c8:90:c6:56:69:bd: 4d:f6:0d:97:23:d9:94:19:16:c0:b6:ec:93:a4:f6: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1C:3B:06:3C:12:73:1C:79:36:55:03:AB:67:AA:1C:3D:89:56:27 X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:da:a0:98:fa:27:d4:25:90:85:1a:c7:74:a9:52:df:1c:de: 7e:4d:3e:3c:75:41:b8:f3:a1:ff:4a:5f:d6:96:31:8f:85:fb: 14:b2:1d:c4:a1:53:a6:9d:0d:99:b7:b2:93:01:23:b6:cc:0f: 87:c5:59:72:07:ca:ec:7e:db:9c:c6:8a:b3:c5:f8:94:fc:9b: aa:6c:39:c6:d7:f4:2b:dc:f5:3e:6e:5f:67:b6:d3:06:ca:51: 99:e6:c5:3e:8a:34:96:b0:09:2f:72:a1:8e:d2:cb:37:2a:dd: 8c:6f:e4:ad:b1:52:ff:9a:22:d2:48:d3:49:4c:b9:92:5a:4b: c9:cd:e5:fd:c4:de:1d:8b:c9:9f:c7:54:56:6d:b8:46:29:cd: ea:2e:a8:c7:1a:9c:ef:95:38:b4:3f:63:50:f0:29:b1:7c:07: de:47:d9:d4:c3:0d:27:7d:bd:7b:d5:0e:6b:ab:fd:5d:33:32: 8c:a8:fe:61:8f:94:95:fa:c0:27:27:6d:03:84:6f:de:26:bd: 65:a5:c0:db:69:54:80:2c:b1:df:d9:49:63:2f:73:52:4a:17: 6b:d9:69:64:82:5c:99:9a:81:8a:23:bd:74:bb:78:92:db:d1: 2b:be:ce:50:6b:fc:1d:ac:a3:e3:99:20:0e:d7:14:51:2a:66: c9:48:36:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwODExMDExMDE2WhcNMjUwODE4MDExMDE2WjAYMRYwFAYD VQQDEw02ODk5NDJmOC1kYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2fdGRxFrd32YS8ntHmQ2VY2UuRE1k3wiPu8SqvohFQI9m9FM7c3fueQ6e2V 7SiE1o+Kcu2Y25IQFyG+KoFeO0doHvHfzaynQaplETK+ISuMC0I0zlIYoY+6I2si rW5JEkkDGhh5aQHQXnVdMHMtD8kBJHBpSpggkKndcUpxdfOnYllRPEexCPaJN0gz xBaIbB0ek4C9QmdyHHBX2ksHQw7T6J8+ksVmomH6YRIRlvIG80bZPtXcnTfgQvhI KOBLAwNTtFnpIMk3CpMFZkJeI9Tud4dfBbcYJmsq7aYdGJ/gB30izZaoPdHIkMZW ab1N9g2XI9mUGRbAtuyTpPZzzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIcOwY8 EnMceTZVA6tnqhw9iVYnMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx2qCY+ifUJZCFGsd0qVLfHN5+TT48dUG486H/Sl/WljGPhfsUsh3E oVOmnQ2Zt7KTASO2zA+HxVlyB8rsftucxoqzxfiU/JuqbDnG1/Qr3PU+bl9nttMG ylGZ5sU+ijSWsAkvcqGO0ss3Kt2Mb+StsVL/miLSSNNJTLmSWkvJzeX9xN4di8mf x1RWbbhGKc3qLqjHGpzvlTi0P2NQ8CmxfAfeR9nUww0nfb171Q5rq/1dMzKMqP5h j5SV+sAnJ20DhG/eJr1lpcDbaVSALLHf2UljL3NSShdr2WlkglyZmoGKI710u3iS 29Ervs5Qa/wdrKPjmSAO1xRRKmbJSDZK -----END CERTIFICATE-----Generated at Mon Aug 11 10:00:56 2025 by rpki-client