$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: NX6GLqHvVwZ0EzVUO2VxLbuluvJQba/Sc/3njVOmHo4= Subject key identifier: 20:27:83:FF:51:0F:B9:EA:3C:44:25:45:E9:93:EB:45:B6:58:86:68 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 1061 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 104E Signing time: Fri 08 Aug 2025 17:36:43 +0000 Manifest this update: Fri 08 Aug 2025 17:36:43 +0000 Manifest next update: Fri 15 Aug 2025 17:36:43 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: fsUIrrpSUPRBf0MFqpGXN9Lq6jGrdRZwThc9j6UVDrM=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: aqDXfi1cpey7rrA0hnZOJDeXkzojciPz9haEnhZerHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4193 (0x1061) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Aug 8 17:36:43 2025 GMT Not After : Aug 15 17:36:43 2025 GMT Subject: CN=689635ab-d43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:47:d1:9a:12:e3:57:9e:7d:13:ce:87:b4: e4:9d:0a:2a:68:c1:5c:29:8e:85:fb:63:8b:64:9d: 0b:39:01:12:ea:5c:41:da:d9:35:a1:70:ad:25:e0: 85:e5:11:2a:42:37:e3:39:b9:7d:27:b4:d7:89:6c: a4:10:d6:77:25:4f:95:6a:5a:c5:ab:0e:81:cf:f9: b0:c1:c7:fc:c9:02:ad:7a:47:b5:4e:ad:93:86:cf: d3:c2:f4:28:5c:81:b8:82:94:6f:7a:95:97:4c:5f: a9:08:41:8c:7c:12:d2:66:ab:26:5c:34:ca:70:8e: 69:bd:99:e5:e5:08:f9:a1:9d:04:c9:be:00:db:a8: 12:c3:b7:b0:60:74:38:d1:d6:6f:e8:b4:44:c4:a2: 66:e0:ab:81:ae:96:5f:28:fc:be:61:32:dd:a8:dc: 40:0b:21:87:d4:5b:87:ef:55:a7:42:cb:2e:ad:38: 4c:de:d0:6a:cd:99:66:cf:2f:50:b8:a1:30:db:82: ef:f3:ae:48:1e:88:02:e7:dd:79:cf:40:e5:03:d8: f1:91:6b:10:a5:33:32:4a:3b:44:cf:6e:f2:09:41: cf:cb:4c:c2:9e:79:0b:33:b3:19:5a:22:bf:7d:20: d0:6a:98:4a:32:05:4c:01:6d:7e:d4:e8:36:7b:a7: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:27:83:FF:51:0F:B9:EA:3C:44:25:45:E9:93:EB:45:B6:58:86:68 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d4:92:a9:48:c8:e3:95:0a:d1:e1:1a:66:56:f4:6c:dc:13: 8d:9f:35:3d:71:5d:3e:4b:50:5f:25:c1:5b:96:0f:11:0a:22: 49:49:86:d8:d5:48:a0:90:a9:37:87:94:4c:97:d1:72:87:c6: 05:4f:a4:bb:4b:49:03:48:85:21:9e:fe:41:d6:d0:7e:90:f8: 6e:fd:8c:47:ab:97:a3:31:4f:ed:ad:47:25:da:0e:f2:89:23: 45:cb:b8:c1:df:84:38:16:56:68:3a:6b:77:c7:90:13:ee:cb: 03:27:10:ba:6c:c8:91:47:f0:dd:c4:e1:3a:bd:39:30:87:be: 55:2f:48:28:f5:ab:67:40:68:4e:b7:62:07:4b:3c:e6:bc:fd: 36:29:2c:56:ef:69:d1:ec:dc:a8:5d:0c:93:2a:be:34:dc:3f: 65:5e:6c:7e:49:55:ef:89:10:50:a7:d9:84:91:a8:f4:ab:d0: 34:e9:ad:5b:c1:7b:36:58:e8:7e:3c:72:44:f8:92:d2:8d:ec: 82:f5:04:1e:43:80:3f:29:01:15:44:f7:09:1b:54:2b:db:84: 48:c3:1e:e0:19:01:7b:d7:ea:c9:11:32:1f:99:ba:f9:14:fb: de:5b:d4:49:77:8f:1a:f9:f7:39:ab:5b:3b:9a:12:3c:2b:1d: 69:db:8e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwODA4MTczNjQzWhcNMjUwODE1MTczNjQzWjAYMRYwFAYD VQQDEw02ODk2MzVhYi1kNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfdH0ZoS41eefRPOh7TknQoqaMFcKY6F+2OLZJ0LOQES6lxB2tk1oXCtJeCF 5REqQjfjObl9J7TXiWykENZ3JU+ValrFqw6Bz/mwwcf8yQKteke1Tq2Ths/TwvQo XIG4gpRvepWXTF+pCEGMfBLSZqsmXDTKcI5pvZnl5Qj5oZ0Eyb4A26gSw7ewYHQ4 0dZv6LRExKJm4KuBrpZfKPy+YTLdqNxACyGH1FuH71WnQssurThM3tBqzZlmzy9Q uKEw24Lv865IHogC5915z0DlA9jxkWsQpTMySjtEz27yCUHPy0zCnnkLM7MZWiK/ fSDQaphKMgVMAW1+1Og2e6cmMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAng/9R D7nqPEQlRemT60W2WIZoMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH1JKpSMjjlQrR4RpmVvRs3BONnzU9cV0+S1BfJcFblg8RCiJJSYbY 1UigkKk3h5RMl9Fyh8YFT6S7S0kDSIUhnv5B1tB+kPhu/YxHq5ejMU/trUcl2g7y iSNFy7jB34Q4FlZoOmt3x5AT7ssDJxC6bMiRR/DdxOE6vTkwh75VL0go9atnQGhO t2IHSzzmvP02KSxW72nR7NyoXQyTKr403D9lXmx+SVXviRBQp9mEkaj0q9A06a1b wXs2WOh+PHJE+JLSjeyC9QQeQ4A/KQEVRPcJG1Qr24RIwx7gGQF71+rJETIfmbr5 FPveW9RJd48a+fc5q1s7mhI8Kx1p244f -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:55 2025 by rpki-client