$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json) Hash identifier: 80Dh0+wwNB0FZrNOCy5OSUug4jS4Bu45S5G2fCcLaiA= Subject key identifier: 40:0D:DB:00:DF:75:D2:C0:35:C1:EA:12:57:F8:5B:3B:22:5E:7E:94 Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft Manifest number: 01CA Signing time: Tue 05 Aug 2025 03:17:56 +0000 Manifest this update: Tue 05 Aug 2025 03:17:56 +0000 Manifest next update: Tue 12 Aug 2025 03:17:56 +0000 Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: fBefixJFPFhU7CRynuGb4eAtdZJZN76W6N0KFDB9mTI=) 2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: vlOK1RJCHtSR0rcREKWIrzl7luUJenVcTiEDALCfBP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Validity Not Before: Aug 5 03:17:56 2025 GMT Not After : Aug 12 03:17:56 2025 GMT Subject: CN=689177e4-19b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:46:75:9b:51:2f:0b:9a:3e:25:3f:82:33: 5c:7c:c4:8f:ba:94:97:aa:c0:21:41:6c:a5:c7:4e: af:63:47:03:3b:56:13:a7:cf:13:a2:5e:bd:4c:36: 15:32:46:23:74:21:6c:c1:58:3c:c5:42:7f:23:1e: 20:68:45:79:8c:0b:3e:d3:1f:ba:1e:43:7b:6b:10: ad:0f:ff:ba:7a:2c:fa:eb:a1:28:ba:71:e5:18:71: 4f:79:0d:39:f4:5b:4e:ac:4a:c3:e0:5c:cc:ca:ad: d2:dd:f0:5e:02:10:37:9d:ac:fd:51:5a:ca:b9:3d: 3c:0a:c9:ee:ae:be:03:e0:f2:f2:fc:5b:f3:74:a2: ed:5a:58:46:0f:ab:5d:3c:7c:1e:e3:5e:19:8c:b6: d7:97:62:fe:59:27:e9:a1:42:ba:a1:48:23:55:77: 89:0b:96:b4:f1:48:d7:bc:46:dc:cf:37:c0:05:28: 92:3d:56:e6:00:0b:0a:df:63:ec:fd:8e:96:61:39: df:d3:64:d8:2b:a3:40:a9:cf:52:c3:33:7b:7a:5c: 8c:a3:69:1b:3f:c9:96:70:73:2e:fc:0f:58:26:06: ae:91:66:ca:f1:22:eb:57:e9:88:1d:f4:4a:45:23: c8:05:89:b4:88:8f:e6:29:79:86:d8:e3:e0:47:c2: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0D:DB:00:DF:75:D2:C0:35:C1:EA:12:57:F8:5B:3B:22:5E:7E:94 X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:59:c5:5b:2e:29:0d:da:f9:b2:08:2e:46:40:5d:8d:f9:45: 39:77:96:b9:3f:89:22:f0:35:d8:36:19:a5:ac:bf:97:44:51: b1:83:e1:6e:e3:75:a4:8a:4a:e4:ff:f1:8c:d6:e8:d3:1c:22: 20:b4:88:11:c3:50:13:fc:c2:c2:d8:4f:e2:bd:73:e5:53:57: 91:ed:d0:72:57:57:44:7c:a5:8e:30:98:f7:dd:64:84:41:c3: 46:88:35:46:2e:19:ff:7f:f1:b7:22:8b:8f:a9:71:52:32:4b: 65:66:8d:94:62:50:30:57:ff:85:93:7b:df:f1:2f:34:3a:d9: a6:c0:cf:0a:fb:27:c0:79:55:1b:6c:9a:94:78:1c:d1:4d:40: d6:2f:48:2c:77:62:ac:2b:bb:78:d5:3b:05:af:49:82:c3:86: 35:8e:b2:a4:38:87:7f:9e:5c:8f:31:79:c9:cc:c2:90:b4:7c: eb:66:3f:a4:fa:93:3a:4d:a3:3a:63:da:d9:47:81:35:87:0f: 52:17:df:12:db:a2:a9:63:3c:81:2b:79:15:64:7e:38:e9:d2: 87:69:51:42:60:09:3e:ae:d6:cb:de:28:5b:c1:84:1e:24:1b: 56:bf:1a:ac:77:aa:fb:c8:0b:06:2d:d3:6a:3b:fb:f8:7c:f7: b6:ed:18:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjUwODA1MDMxNzU2WhcNMjUwODEyMDMxNzU2WjAYMRYwFAYD VQQDEw02ODkxNzdlNC0xOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApx1GdZtRLwuaPiU/gjNcfMSPupSXqsAhQWylx06vY0cDO1YTp88Tol69TDYV MkYjdCFswVg8xUJ/Ix4gaEV5jAs+0x+6HkN7axCtD/+6eiz666EounHlGHFPeQ05 9FtOrErD4FzMyq3S3fBeAhA3naz9UVrKuT08Csnurr4D4PLy/FvzdKLtWlhGD6td PHwe414ZjLbXl2L+WSfpoUK6oUgjVXeJC5a08UjXvEbczzfABSiSPVbmAAsK32Ps /Y6WYTnf02TYK6NAqc9SwzN7elyMo2kbP8mWcHMu/A9YJgaukWbK8SLrV+mIHfRK RSPIBYm0iI/mKXmG2OPgR8LFZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAN2wDf ddLANcHqElf4WzsiXn6UMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3 ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeWcVbLikN2vmyCC5GQF2N+UU5d5a5P4ki8DXYNhmlrL+XRFGxg+Fu 43Wkikrk//GM1ujTHCIgtIgRw1AT/MLC2E/ivXPlU1eR7dByV1dEfKWOMJj33WSE QcNGiDVGLhn/f/G3IouPqXFSMktlZo2UYlAwV/+Fk3vf8S80OtmmwM8K+yfAeVUb bJqUeBzRTUDWL0gsd2KsK7t41TsFr0mCw4Y1jrKkOId/nlyPMXnJzMKQtHzrZj+k +pM6TaM6Y9rZR4E1hw9SF98S26KpYzyBK3kVZH446dKHaVFCYAk+rtbL3ihbwYQe JBtWvxqsd6r7yAsGLdNqO/v4fPe27Rgl -----END CERTIFICATE-----Generated at Wed Aug 6 14:18:55 2025 by rpki-client