$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: Y3+pXIqGJ1n3w7vDhQDqltdLGsRvj3am/1HAUBCkV/I= Subject key identifier: FF:64:CD:6C:00:74:3A:EC:99:A9:BE:84:D7:40:33:72:A3:80:FD:E8 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 081B Signing time: Sun 10 Aug 2025 20:54:56 +0000 Manifest this update: Sun 10 Aug 2025 20:54:55 +0000 Manifest next update: Sun 17 Aug 2025 20:54:55 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: lMuJMWXbZ97gjHc+KNFnCg3ZdU6bj+QL541JQ3JNKS4=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Aug 10 20:54:55 2025 GMT Not After : Aug 17 20:54:55 2025 GMT Subject: CN=6899071f-8e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:42:47:38:0b:c5:02:f1:67:e6:24:55:8c: cd:53:90:28:6f:ae:6b:9a:e4:3d:ac:38:6c:64:c1: d1:39:c0:33:c5:a2:5c:f3:d2:93:4d:5b:4a:b6:06: e8:d3:b9:0a:f9:7f:b0:aa:fb:17:8b:cc:02:06:94: 1f:5b:be:56:03:01:c3:9e:82:c5:eb:d3:1c:4b:04: e6:e9:c8:ce:1d:a9:e5:e6:b1:c3:22:02:ae:61:ed: 6f:18:83:69:6b:42:ec:c0:aa:6c:ab:a1:1f:67:94: 7b:21:09:8b:56:55:a6:94:91:98:37:31:66:cf:58: 68:84:58:ab:38:ef:a7:33:cb:9b:78:78:d0:5a:68: 5e:19:79:17:9e:c3:07:c4:05:7e:17:8b:0b:3a:58: b3:d6:0a:71:22:e7:e7:ca:b8:fb:92:f7:38:45:47: 3b:b3:95:2e:87:a9:e1:5e:5d:89:85:46:fc:08:1f: d4:a4:a4:ad:78:6a:ec:65:79:3b:cb:c0:1c:eb:15: 7f:88:0d:5e:0b:86:8c:89:26:18:c8:22:e9:ee:1f: 5d:16:d5:f4:fc:a9:7c:7f:1a:92:cb:a4:f5:c9:b1: ce:c6:20:2f:b7:13:e2:8e:05:77:18:e6:93:ee:54: 44:57:f4:cb:ab:45:6a:e7:52:5b:ac:c6:a3:d8:bc: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:64:CD:6C:00:74:3A:EC:99:A9:BE:84:D7:40:33:72:A3:80:FD:E8 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9a:af:03:60:3f:f6:c9:77:0a:aa:01:50:54:be:4b:ae:04: 3d:01:74:f3:06:c3:cb:56:2d:83:ac:18:97:6f:ce:bc:4f:8b: 6e:9d:ea:a1:cb:a8:5c:76:da:e9:05:c2:85:7b:f6:fa:2f:89: 49:27:e0:90:bf:0e:f9:78:1c:70:f8:c2:84:a5:67:c5:a2:b1: d7:b9:5b:7b:4b:e2:f8:2a:97:d0:33:7c:84:45:88:ae:82:55: 5d:67:d7:6e:18:21:fa:cb:4d:3c:c5:db:63:fa:a1:60:2c:1f: 2c:21:e3:32:99:93:b0:b9:5e:ff:3c:ff:5a:b6:57:e2:d5:4a: 76:07:cc:c1:e2:61:a1:9a:b2:51:98:e5:99:50:ba:4e:48:67: 80:29:61:df:4e:56:c7:c1:51:d2:f4:f9:22:48:41:af:61:95: b0:e6:32:23:d8:71:14:b4:ab:64:df:34:a9:14:f3:e3:a1:78: d6:4b:a5:99:82:13:fd:52:39:ae:fa:98:6d:ec:35:64:08:6e: b6:cb:fd:88:d4:b7:4a:6e:78:99:dc:f8:4f:f5:ba:2d:55:a9: 8e:74:86:c8:c3:e2:02:4b:0d:03:f1:6d:f7:99:c3:0f:9a:ac: 81:84:f9:14:20:88:8f:c5:b4:07:c6:86:e4:b7:d9:6e:c5:94: 4c:98:3b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwODEwMjA1NDU1WhcNMjUwODE3MjA1NDU1WjAYMRYwFAYD VQQDEw02ODk5MDcxZi04ZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxBCRzgLxQLxZ+YkVYzNU5Aob65rmuQ9rDhsZMHROcAzxaJc89KTTVtKtgbo 07kK+X+wqvsXi8wCBpQfW75WAwHDnoLF69McSwTm6cjOHanl5rHDIgKuYe1vGINp a0LswKpsq6EfZ5R7IQmLVlWmlJGYNzFmz1hohFirOO+nM8ubeHjQWmheGXkXnsMH xAV+F4sLOliz1gpxIufnyrj7kvc4RUc7s5Uuh6nhXl2JhUb8CB/UpKSteGrsZXk7 y8Ac6xV/iA1eC4aMiSYYyCLp7h9dFtX0/Kl8fxqSy6T1ybHOxiAvtxPijgV3GOaT 7lREV/TLq0Vq51JbrMaj2LwZWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9kzWwA dDrsmam+hNdAM3KjgP3oMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mq8DYD/2yXcKqgFQVL5LrgQ9AXTzBsPLVi2DrBiXb868T4tuneqh y6hcdtrpBcKFe/b6L4lJJ+CQvw75eBxw+MKEpWfForHXuVt7S+L4KpfQM3yERYiu glVdZ9duGCH6y008xdtj+qFgLB8sIeMymZOwuV7/PP9atlfi1Up2B8zB4mGhmrJR mOWZULpOSGeAKWHfTlbHwVHS9PkiSEGvYZWw5jIj2HEUtKtk3zSpFPPjoXjWS6WZ ghP9Ujmu+pht7DVkCG62y/2I1LdKbniZ3PhP9botVamOdIbIw+ICSw0D8W33mcMP mqyBhPkUIIiPxbQHxobkt9luxZRMmDt9 -----END CERTIFICATE-----Generated at Mon Aug 11 07:51:21 2025 by rpki-client