$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json) Hash identifier: OPqnTkDkcEh/3qVoUD1N0+Zm+iBYqVcYyWiLQ0d+0Pc= Subject key identifier: 92:8B:70:1B:D8:44:D7:0A:7B:A9:B1:94:6A:7C:4C:3D:1E:86:19:F2 Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft Manifest number: 11 Signing time: Sat 09 Aug 2025 08:33:41 +0000 Manifest this update: Sat 09 Aug 2025 08:33:40 +0000 Manifest next update: Sat 16 Aug 2025 08:33:40 +0000 Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: Q0w4vi8DNC/zlVC5V0lmcXI/M3O/njEOiuZxay0URF4=) 2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: x4FID5zbs9gmZN9FkmWfh+nLmyFuv96NIL9YO3x5RdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Validity Not Before: Aug 9 08:33:40 2025 GMT Not After : Aug 16 08:33:40 2025 GMT Subject: CN=689707e4-2ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:97:c3:40:67:b0:63:b0:67:a7:5f:12:ba: df:af:8f:97:ca:8f:fe:ed:18:b2:8b:2d:86:ad:a7: ee:8e:2a:01:71:9f:ec:d6:2c:54:71:9d:0b:aa:2a: 17:bb:22:6a:ec:44:c9:0f:db:e9:e7:9d:af:e4:a2: d3:9e:88:33:58:da:64:da:07:93:50:e6:95:92:28: 1b:91:3a:34:b5:88:d9:52:4b:27:f4:a7:a0:f7:4b: 39:82:10:ec:81:86:58:44:98:f0:f3:27:8f:87:0a: a9:1c:86:3c:6e:dd:55:61:4e:65:00:82:eb:ca:4e: 2b:9e:c6:aa:3b:5b:88:ea:4b:79:49:88:bb:ad:34: 13:13:38:2f:99:33:86:de:7c:dc:13:1c:99:bb:d0: f0:8f:8e:f1:0d:c0:bc:53:14:5b:9e:69:03:9d:e3: b6:33:7f:17:0a:93:77:e9:3d:26:27:96:63:30:3c: aa:92:de:66:1c:97:87:bd:f4:eb:fb:21:34:2c:47: 66:55:93:e3:91:39:a5:03:06:04:af:c3:c2:91:8f: 75:05:59:29:c8:d6:33:fe:65:5b:b6:e6:84:21:4c: 39:18:35:4c:18:f9:b5:3f:6f:0d:57:2d:c7:12:cf: 54:54:1b:6e:34:5d:5d:a7:c8:34:05:dd:93:bb:99: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8B:70:1B:D8:44:D7:0A:7B:A9:B1:94:6A:7C:4C:3D:1E:86:19:F2 X509v3 Authority Key Identifier: keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9d:1d:3e:18:2c:62:82:a5:90:6a:c1:57:be:7c:6a:c6:73: 8b:51:44:5d:07:53:3f:77:39:90:33:7d:01:23:82:f0:a7:19: d0:50:1f:36:cd:af:5e:71:cd:54:5b:37:09:73:bc:b7:5d:cd: 1c:f7:10:2d:df:ab:49:df:95:dc:69:ba:be:81:65:46:d0:9a: 15:1e:a2:16:20:96:5f:10:10:79:c4:b0:7c:af:4e:be:ff:76: aa:89:f6:f1:23:96:33:a3:2d:7f:b7:72:50:20:74:26:ea:87: 14:1c:b5:b4:1b:2e:8d:5d:51:5b:8e:81:0d:09:7b:19:f7:6b: 95:56:e0:56:24:a4:59:0a:fb:45:d8:0b:d0:75:e1:f9:f7:24: 71:4b:28:3b:0b:69:de:6b:90:de:fe:c9:59:71:eb:79:30:14: fa:38:ac:51:b9:5c:97:35:a5:64:8e:b3:b0:46:e4:5b:c9:32: 0a:12:38:38:91:1d:e3:b6:31:f1:58:ec:a0:86:8d:81:69:0e: 2a:a9:c9:e7:1d:0d:18:05:ce:6c:63:b5:d9:46:35:3d:a3:da: 4b:7d:6a:36:20:bf:20:62:d3:78:3f:81:25:88:67:62:f2:71: ae:f6:fa:79:8c:f7:c1:e6:ef:ea:6c:cc:35:df:1d:68:c3:19: 5b:ac:56:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFCNDY0MzE3RTlF N0FCNzBFRjAeFw0yNTA4MDkwODMzNDBaFw0yNTA4MTYwODMzNDBaMBgxFjAUBgNV BAMTDTY4OTcwN2U0LTJlZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWo5fDQGewY7Bnp18Sut+vj5fKj/7tGLKLLYatp+6OKgFxn+zWLFRxnQuqKhe7 ImrsRMkP2+nnna/kotOeiDNY2mTaB5NQ5pWSKBuROjS1iNlSSyf0p6D3SzmCEOyB hlhEmPDzJ4+HCqkchjxu3VVhTmUAguvKTiuexqo7W4jqS3lJiLutNBMTOC+ZM4be fNwTHJm70PCPjvENwLxTFFueaQOd47YzfxcKk3fpPSYnlmMwPKqS3mYcl4e99Ov7 ITQsR2ZVk+OROaUDBgSvw8KRj3UFWSnI1jP+ZVu25oQhTDkYNUwY+bU/bw1XLccS z1RUG240XV2nyDQF3ZO7mduNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkotwG9hE 1wp7qbGUanxMPR6GGfIwHwYDVR0jBBgwFoAUgmqoO74CQNE5BqurRkMX6eercO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0Y1N0QyMzMwNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ21xb083NENRTkU1QnF1clJrTVg2ZWVyY084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0Y1N0QyMzMwNURERjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5F NUJxdXJSa01YNmVlcmNPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKdHT4YLGKCpZBqwVe+fGrGc4tRRF0HUz93OZAzfQEjgvCnGdBQHzbN r15xzVRbNwlzvLddzRz3EC3fq0nfldxpur6BZUbQmhUeohYgll8QEHnEsHyvTr7/ dqqJ9vEjljOjLX+3clAgdCbqhxQctbQbLo1dUVuOgQ0Jexn3a5VW4FYkpFkK+0XY C9B14fn3JHFLKDsLad5rkN7+yVlx63kwFPo4rFG5XJc1pWSOs7BG5FvJMgoSODiR HeO2MfFY7KCGjYFpDiqpyecdDRgFzmxjtdlGNT2j2kt9ajYgvyBi03g/gSWIZ2Ly ca72+nmM98Hm7+pszDXfHWjDGVusVo4= -----END CERTIFICATE-----Generated at Sun Aug 10 18:58:59 2025 by rpki-client