$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: m6P6njUw4wn0FXMGeZuWJaCMqkdI3UfhBb/NH8S4+ws= Subject key identifier: 99:A4:FF:B3:1C:A8:1E:31:FA:5C:B9:03:F6:D3:97:51:85:52:DC:3D Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 0411 Signing time: Thu 07 Aug 2025 01:02:46 +0000 Manifest this update: Thu 07 Aug 2025 01:02:45 +0000 Manifest next update: Thu 14 Aug 2025 01:02:45 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: t+NeHfCLMcr4hWyMSNlIhuHS5mjgUDfDnLxjexb14Kw=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Aug 7 01:02:45 2025 GMT Not After : Aug 14 01:02:45 2025 GMT Subject: CN=6893fb35-1590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:f0:79:07:96:ce:04:8a:09:b9:a6:cb:be: 77:47:5f:44:6e:60:bb:c2:1c:06:5c:5d:17:ad:b9: f5:28:72:72:5a:8e:76:35:55:65:c5:59:82:db:1d: 6a:93:1b:7b:8c:ad:e6:a2:89:4d:f1:35:c5:d5:fc: 06:49:33:bf:f4:f6:9d:44:2b:12:1b:0f:ec:0c:1f: 1d:8f:13:6d:fd:e1:d9:28:f5:cd:45:e8:65:3e:2e: b3:78:c1:32:6b:65:25:40:c2:7d:96:c7:b4:ba:11: 0b:33:0e:47:8b:4b:98:6b:a7:08:bf:a6:a8:c5:20: 6a:96:f9:99:a2:1d:13:5b:ae:03:1e:04:ed:5f:59: 2e:1c:87:7c:da:ed:83:96:24:fe:63:df:74:33:bd: 3f:07:7d:9a:68:46:ce:8d:85:1b:91:58:05:fa:87: 65:57:02:3e:dc:bf:16:a7:2e:8e:49:bd:c6:f2:ec: cd:e1:57:36:ca:35:e3:52:fd:00:c6:c7:89:0e:5d: 60:56:c3:6a:24:a1:44:00:69:ce:41:a7:48:8d:df: 18:ad:d2:d0:63:9b:76:72:9d:ae:f8:1b:41:61:e9: 33:a5:a5:d5:b0:2f:0b:09:f7:da:6a:3e:44:10:cc: 36:98:22:97:2a:d2:ef:75:7c:ac:9d:7d:30:43:96: 81:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:FF:B3:1C:A8:1E:31:FA:5C:B9:03:F6:D3:97:51:85:52:DC:3D X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:41:6b:d7:17:f2:33:20:73:3a:2b:84:d3:87:ce:47:00:88: 4c:52:79:4c:f3:78:35:1e:38:ed:56:1b:75:d9:85:ea:89:15: c8:77:d3:3f:2b:5c:41:e5:14:b7:d6:d2:d0:ba:ef:49:fb:30: e5:2b:8d:1e:51:e9:22:cd:56:be:52:62:92:53:9b:6b:82:0d: fd:9a:c3:33:1a:b7:35:00:f7:fb:23:bd:da:81:74:94:2c:37: b9:25:f1:17:4e:a1:d6:ab:19:9a:7e:28:f6:d1:bb:e9:78:b3: 07:03:2a:11:b5:7a:88:58:03:3a:bc:68:b9:d3:cd:81:df:b7: 6d:4d:74:fb:11:f3:5b:9e:6e:cc:39:a1:e9:83:f7:2a:ed:d1: b8:19:6d:fd:b7:3b:ec:35:68:a2:ab:cf:dc:b6:04:54:c3:2f: 18:52:0e:89:5a:22:03:6b:d4:93:71:6e:72:4c:82:c6:5c:8d: cc:19:69:66:3a:69:60:02:e0:1a:1a:bd:19:b2:cb:00:fe:7e: d6:6e:6a:a1:11:8c:2b:d8:f0:2e:88:ac:4e:fa:5c:38:e3:89: 6e:bf:e0:e4:41:3c:b3:10:c2:96:f4:35:35:aa:a0:ce:6c:43: 5f:99:11:ba:f5:4f:4a:31:48:57:4f:fa:0e:55:57:8e:8e:e2: 19:67:68:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwODA3MDEwMjQ1WhcNMjUwODE0MDEwMjQ1WjAYMRYwFAYD VQQDEw02ODkzZmIzNS0xNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTzweQeWzgSKCbmmy753R19EbmC7whwGXF0Xrbn1KHJyWo52NVVlxVmC2x1q kxt7jK3moolN8TXF1fwGSTO/9PadRCsSGw/sDB8djxNt/eHZKPXNRehlPi6zeMEy a2UlQMJ9lse0uhELMw5Hi0uYa6cIv6aoxSBqlvmZoh0TW64DHgTtX1kuHId82u2D liT+Y990M70/B32aaEbOjYUbkVgF+odlVwI+3L8Wpy6OSb3G8uzN4Vc2yjXjUv0A xseJDl1gVsNqJKFEAGnOQadIjd8YrdLQY5t2cp2u+BtBYekzpaXVsC8LCffaaj5E EMw2mCKXKtLvdXysnX0wQ5aB5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmk/7Mc qB4x+ly5A/bTl1GFUtw9MB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiQWvXF/IzIHM6K4TTh85HAIhMUnlM83g1HjjtVht12YXqiRXId9M/ K1xB5RS31tLQuu9J+zDlK40eUekizVa+UmKSU5trgg39msMzGrc1APf7I73agXSU LDe5JfEXTqHWqxmafij20bvpeLMHAyoRtXqIWAM6vGi5082B37dtTXT7EfNbnm7M OaHpg/cq7dG4GW39tzvsNWiiq8/ctgRUwy8YUg6JWiIDa9STcW5yTILGXI3MGWlm OmlgAuAaGr0ZsssA/n7WbmqhEYwr2PAuiKxO+lw444luv+DkQTyzEMKW9DU1qqDO bENfmRG69U9KMUhXT/oOVVeOjuIZZ2gM -----END CERTIFICATE-----Generated at Fri Aug 8 13:01:10 2025 by rpki-client