$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: c2yVscfjq1ykI4E6kEmg/fjrVpj+J3A3+SmoPvkUFvU= Subject key identifier: 3A:1E:4E:2B:6A:DA:4A:AC:45:6A:F5:EC:8D:5C:5A:7E:A7:ED:9B:14 Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 05A2 Signing time: Wed 06 Aug 2025 23:37:12 +0000 Manifest this update: Wed 06 Aug 2025 23:37:12 +0000 Manifest next update: Wed 13 Aug 2025 23:37:12 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: lRGqSZQ3HbULIr8KyFkgwjPJ3+uifZJstke1EFPqrJU=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: ZlGg1d2CMvxXbe2cdJaMpBCrBVtHW8eJFry9EmWD8kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: Aug 6 23:37:12 2025 GMT Not After : Aug 13 23:37:12 2025 GMT Subject: CN=6893e728-213b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:da:3f:04:b7:9c:3c:02:73:ba:40:ab:44: 4a:c6:a1:ec:53:50:ac:e5:9a:ec:f1:5b:13:47:85: 04:e0:7a:d6:d6:68:bd:8a:9f:b0:df:28:ca:c3:ba: cb:5a:06:c7:54:65:d6:de:0c:83:4f:98:df:2e:3d: c2:68:be:05:66:db:d6:d3:aa:36:11:f3:51:f3:10: 2e:b6:0d:8f:59:78:bf:ac:6a:ca:67:c4:8e:e9:83: 05:8a:07:f2:e6:2c:55:cb:cd:f6:ab:80:7d:a8:1c: 9f:b1:1f:a8:ff:a1:61:5b:07:09:24:b0:f4:0b:ef: 83:2b:c8:1d:33:a1:5c:fe:3d:1f:27:65:f4:ff:a6: 40:76:a9:e2:6e:c5:f6:dc:78:12:ab:51:36:98:ee: 10:f4:f2:7e:90:02:fd:5f:db:59:6a:5a:ad:1c:f5: e7:1f:85:6a:fd:52:f0:51:6f:b8:90:36:51:2f:5b: f8:a1:da:56:91:88:76:4d:f5:58:db:d2:30:b0:6a: e4:25:3e:3a:a2:ff:98:9d:f7:cd:5e:f7:b6:75:d6: c5:d5:f9:ae:98:59:31:47:0a:dd:fb:aa:2b:bf:ed: a0:f2:9b:78:8a:6a:9d:a6:ba:26:c4:0b:11:c5:98: 4a:43:6d:42:04:70:f8:5a:75:d1:0c:bb:d2:88:ef: b1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1E:4E:2B:6A:DA:4A:AC:45:6A:F5:EC:8D:5C:5A:7E:A7:ED:9B:14 X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1a:fc:62:b2:84:23:8d:1c:cd:68:47:72:c2:78:20:5a:d1: 0a:76:28:36:9c:02:dd:7b:f0:a5:bf:5a:96:9a:49:64:c2:be: b5:1d:46:69:02:ea:5b:eb:18:08:ad:ff:c3:38:7d:5f:d9:c9: a7:07:e3:e4:b1:32:ec:da:9c:85:6e:17:96:b2:57:d2:e3:52: c8:05:d1:4e:9f:55:29:d2:5a:7b:56:15:7f:35:6b:03:41:72: cd:a2:63:c2:1e:e3:11:98:7b:ab:8b:1e:df:42:45:0a:bf:a3: 7d:d8:1e:42:43:a5:3a:6b:f3:e8:7d:cf:5b:fb:95:c0:53:2f: 3c:38:aa:f0:0f:b3:e3:3d:a2:96:f5:8d:56:c3:ec:81:89:e4: fa:b0:11:8b:17:9c:58:99:02:d7:f8:42:1a:1e:bc:7f:a0:de: 2b:f1:04:e2:7d:95:a1:fd:8b:26:42:12:8d:a1:e8:51:81:9a: c2:6c:49:22:4c:05:f0:f1:8d:f0:a1:10:42:cf:6c:e1:48:05: d3:61:08:b3:28:b1:19:04:62:69:0e:d7:7c:dc:93:27:a1:f4: e3:c7:f4:98:3a:78:be:99:8e:84:cf:ac:1a:a0:be:22:95:38: e5:eb:9d:70:41:35:d3:3c:31:c7:a7:c0:56:f3:2f:1c:3d:09: cf:c6:ad:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjUwODA2MjMzNzEyWhcNMjUwODEzMjMzNzEyWjAYMRYwFAYD VQQDEw02ODkzZTcyOC0yMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRHaPwS3nDwCc7pAq0RKxqHsU1Cs5Zrs8VsTR4UE4HrW1mi9ip+w3yjKw7rL WgbHVGXW3gyDT5jfLj3CaL4FZtvW06o2EfNR8xAutg2PWXi/rGrKZ8SO6YMFigfy 5ixVy832q4B9qByfsR+o/6FhWwcJJLD0C++DK8gdM6Fc/j0fJ2X0/6ZAdqnibsX2 3HgSq1E2mO4Q9PJ+kAL9X9tZalqtHPXnH4Vq/VLwUW+4kDZRL1v4odpWkYh2TfVY 29IwsGrkJT46ov+YnffNXve2ddbF1fmumFkxRwrd+6orv+2g8pt4imqdpromxAsR xZhKQ21CBHD4WnXRDLvSiO+xiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoeTitq 2kqsRWr17I1cWn6n7ZsUMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoGvxisoQjjRzNaEdywnggWtEKdig2nALde/Clv1qWmklkwr61HUZp Aupb6xgIrf/DOH1f2cmnB+PksTLs2pyFbheWslfS41LIBdFOn1Up0lp7VhV/NWsD QXLNomPCHuMRmHurix7fQkUKv6N92B5CQ6U6a/Pofc9b+5XAUy88OKrwD7PjPaKW 9Y1Ww+yBieT6sBGLF5xYmQLX+EIaHrx/oN4r8QTifZWh/YsmQhKNoehRgZrCbEki TAXw8Y3woRBCz2zhSAXTYQizKLEZBGJpDtd83JMnofTjx/SYOni+mY6Ez6waoL4i lTjl651wQTXTPDHHp8BW8y8cPQnPxq14 -----END CERTIFICATE-----Generated at Thu Aug 7 14:40:17 2025 by rpki-client