$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: 7UEej8v4zJZldfKg/v6nPjfIrzUd6zlY7Bw5bR7pt7k= Subject key identifier: 24:58:E6:78:60:AC:FD:C0:47:FE:4B:E0:2B:D5:B8:66:13:19:EE:45 Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 081E Signing time: Fri 08 Aug 2025 21:11:12 +0000 Manifest this update: Fri 08 Aug 2025 21:11:12 +0000 Manifest next update: Fri 15 Aug 2025 21:11:12 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: uzFUGvJbxpUqwtup+kODe/8rI55fAv8vxjK1zGsNA1g=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: letKkI3J7GQM6enE4QxR/GGV62ebNvR+dZGy0HTaYqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: Aug 8 21:11:12 2025 GMT Not After : Aug 15 21:11:12 2025 GMT Subject: CN=689667f0-9eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:b1:a4:31:6b:df:08:7c:88:9b:44:85:09: 78:60:23:20:f5:77:b5:8b:a5:df:e3:3d:ea:6c:79: f8:c2:ee:d5:98:d5:cf:03:5e:b0:5d:d6:15:70:58: 90:cc:73:b7:72:71:2f:d2:c0:64:a5:40:cf:c8:f5: a0:b9:e0:cc:ed:18:f3:e4:a5:2c:85:bc:1e:fa:27: f5:83:b6:8e:00:8c:f8:be:f7:29:6a:96:9f:d7:6c: 3f:a8:d7:04:28:7c:24:20:51:4e:1a:a9:ee:66:03: 40:66:3a:91:5a:ca:7f:30:f4:f4:71:10:6d:98:ec: 0e:66:24:c8:93:4c:34:a6:eb:1c:3a:04:e1:d7:9a: 5a:77:c7:10:9e:13:ef:f0:20:f4:5f:9a:e0:54:e5: 27:15:51:4c:1b:80:d4:49:37:71:6b:90:e9:7c:66: 8d:c5:bf:25:d8:69:53:52:ab:b2:03:8e:7c:29:f5: 31:7e:72:03:ce:ec:0b:9f:d1:d6:82:3d:b0:9e:da: aa:07:26:c0:00:e3:82:ee:ce:44:74:08:b0:d5:21: df:4a:11:27:cf:c0:aa:13:62:47:1a:56:a8:12:eb: 19:43:44:ad:47:82:fd:50:f5:00:b2:ee:63:c7:42: c4:b3:2d:8f:e9:0b:50:69:b9:00:1b:75:f7:ee:8a: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:E6:78:60:AC:FD:C0:47:FE:4B:E0:2B:D5:B8:66:13:19:EE:45 X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ce:88:50:cd:25:07:81:1f:10:e5:57:a1:4d:3a:b6:b8:4f: e1:db:d9:2e:ab:92:7a:3d:46:a6:27:ce:88:2a:ac:4c:d9:41: 12:55:85:a2:d6:56:47:9a:ec:e0:ca:e2:70:58:d4:d6:0a:62: 66:d7:38:71:ad:7f:39:9a:8d:aa:c8:9b:0b:b6:82:11:d5:26: c2:79:5c:de:bd:9f:84:92:80:68:7a:1d:82:16:1e:f1:04:7d: 35:e4:20:bc:90:33:7a:50:66:a1:17:b0:e2:a0:e9:d6:f8:d8: a7:91:06:d3:cb:22:db:45:e4:08:95:0a:4c:9b:b5:3f:cd:e1: e2:60:a8:b1:ab:ff:e5:ba:e6:fb:de:3d:ab:9a:44:a9:00:42: 13:d6:f9:a0:dd:1c:1a:25:79:d0:46:28:c4:a3:44:a8:23:89: 0a:df:f4:e1:53:f0:13:53:26:14:70:ad:48:3e:ff:77:34:f1: aa:79:7c:ff:e3:0d:35:fc:bb:38:5a:2d:65:72:eb:27:92:3b: ab:2b:f8:26:7a:35:2e:54:64:20:fc:73:cd:3c:92:11:40:53: a0:f1:3f:2b:23:ed:98:22:f0:be:c3:4f:93:3f:ba:6a:77:b6: 21:32:d6:23:bc:ed:72:e6:5e:86:45:c3:c4:e7:3e:06:77:04: 25:37:07:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUwODA4MjExMTEyWhcNMjUwODE1MjExMTEyWjAYMRYwFAYD VQQDEw02ODk2NjdmMC05ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvixpDFr3wh8iJtEhQl4YCMg9Xe1i6Xf4z3qbHn4wu7VmNXPA16wXdYVcFiQ zHO3cnEv0sBkpUDPyPWgueDM7Rjz5KUshbwe+if1g7aOAIz4vvcpapaf12w/qNcE KHwkIFFOGqnuZgNAZjqRWsp/MPT0cRBtmOwOZiTIk0w0puscOgTh15pad8cQnhPv 8CD0X5rgVOUnFVFMG4DUSTdxa5DpfGaNxb8l2GlTUquyA458KfUxfnIDzuwLn9HW gj2wntqqBybAAOOC7s5EdAiw1SHfShEnz8CqE2JHGlaoEusZQ0StR4L9UPUAsu5j x0LEsy2P6QtQabkAG3X37orwSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRY5nhg rP3AR/5L4CvVuGYTGe5FMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCszohQzSUHgR8Q5VehTTq2uE/h29kuq5J6PUamJ86IKqxM2UESVYWi 1lZHmuzgyuJwWNTWCmJm1zhxrX85mo2qyJsLtoIR1SbCeVzevZ+EkoBoeh2CFh7x BH015CC8kDN6UGahF7DioOnW+NinkQbTyyLbReQIlQpMm7U/zeHiYKixq//luub7 3j2rmkSpAEIT1vmg3RwaJXnQRijEo0SoI4kK3/ThU/ATUyYUcK1IPv93NPGqeXz/ 4w01/Ls4Wi1lcusnkjurK/gmejUuVGQg/HPNPJIRQFOg8T8rI+2YIvC+w0+TP7pq d7YhMtYjvO1y5l6GRcPE5z4GdwQlNwek -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:07 2025 by rpki-client