$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json) Hash identifier: /I9Hyl2tdqFocmmk3aHqS2Em+VDIXxVZHR8vKZ+Zj30= Subject key identifier: 06:9B:E5:B5:B4:39:AE:14:77:EA:67:D7:CA:13:EE:03:23:8E:01:E8 Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft Manifest number: 19 Signing time: Sat 09 Aug 2025 05:54:25 +0000 Manifest this update: Sat 09 Aug 2025 05:54:24 +0000 Manifest next update: Sat 16 Aug 2025 05:54:24 +0000 Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: bCATF9aGKx1Ub5SKNZfss80fP4xY96pqzfEJlMUsVog=) 2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Validity Not Before: Aug 9 05:54:24 2025 GMT Not After : Aug 16 05:54:24 2025 GMT Subject: CN=6896e291-18cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:48:67:e1:56:8c:22:2a:aa:e6:bc:f3:79: cf:7d:f5:78:78:32:5e:34:a7:fc:11:51:b9:83:10: fd:55:b6:a8:7e:65:c8:a9:c9:d8:ec:4f:b5:c3:af: 58:be:98:4d:20:03:47:e6:e9:84:f8:2f:52:6c:a4: 0e:f2:9a:75:ff:ee:7a:89:35:bc:b6:ab:5a:f1:75: 63:37:70:86:14:f9:5d:f4:f8:da:1b:1e:a9:05:e7: ee:34:f8:99:0b:ca:b7:2a:0e:57:72:3a:3a:3c:1f: d4:cf:d1:f6:ec:4d:25:34:b7:64:00:09:ae:bc:4b: e2:ca:af:7e:8a:a7:f7:eb:e8:b1:e8:73:fc:e3:bc: 48:ea:78:f5:8e:98:be:71:8c:c6:ee:4c:63:7e:93: 2c:cd:34:33:03:39:ec:3c:38:f8:e6:8a:ef:ef:ec: 91:d4:5d:b8:e2:89:49:08:7f:dc:a3:eb:34:3a:28: 80:cd:20:fd:5a:37:51:18:0d:0e:ad:28:a7:00:98: e6:40:c5:25:74:fb:9b:16:aa:61:ee:8a:19:f0:c2: b2:71:5e:d0:52:1d:94:2b:a8:4c:97:0f:58:d7:ee: c3:ef:b2:10:ea:f1:6a:1b:de:a0:5d:af:af:38:f5: 50:f7:0b:10:6b:f7:48:59:9c:01:e4:83:5f:78:98: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:E5:B5:B4:39:AE:14:77:EA:67:D7:CA:13:EE:03:23:8E:01:E8 X509v3 Authority Key Identifier: keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:85:f8:c7:b5:13:af:46:bd:38:00:45:5c:f8:f1:be:1c:20: 07:13:6e:83:49:81:fe:42:4f:fc:82:87:a9:57:a4:17:d4:0c: c1:73:97:a7:35:1f:72:2a:20:7f:e5:e9:38:de:f6:d7:ee:d5: d3:49:64:4c:ca:7e:4d:65:27:48:e2:31:ee:50:98:b1:72:67: 36:e4:5e:2e:0b:be:a3:23:56:bc:e4:07:2e:a7:fd:d4:4b:9a: 74:bc:6a:05:7c:df:9b:a5:09:11:d2:25:d2:2c:82:40:22:b6: 96:0a:a4:f0:1f:36:42:ea:2c:f5:b2:5a:6b:ff:8f:58:a3:14: 9d:2b:e8:c1:d0:85:c7:e7:33:a4:48:86:ad:d5:6f:93:7c:02: 15:f2:f5:6c:55:9c:af:22:c5:01:29:38:7d:e3:aa:78:2c:52: 1d:cb:a9:74:4e:95:cb:02:ab:3d:80:35:47:db:da:d3:e6:07: d9:2e:af:c8:25:f5:51:59:c3:9f:40:ad:a1:79:63:25:f4:42: 0d:6b:cc:4e:eb:ca:4d:e1:61:3a:84:46:46:2e:b3:d9:83:22: c3:30:41:0b:3c:38:d4:f3:61:45:79:e7:41:89:9b:be:7c:9b: 58:4e:64:aa:4e:3b:49:3e:57:ef:12:18:ee:d0:21:ad:f9:46: 88:88:f9:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoODFBNjU3RUFBQzc1NTRDQUI3QTFBMjg4RjVCM0ZFRURE OEE1Q0M0QjAeFw0yNTA4MDkwNTU0MjRaFw0yNTA4MTYwNTU0MjRaMBgxFjAUBgNV BAMTDTY4OTZlMjkxLTE4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDADkhn4VaMIiqq5rzzec999Xh4Ml40p/wRUbmDEP1Vtqh+ZcipydjsT7XDr1i+ mE0gA0fm6YT4L1JspA7ymnX/7nqJNby2q1rxdWM3cIYU+V30+NobHqkF5+40+JkL yrcqDldyOjo8H9TP0fbsTSU0t2QACa68S+LKr36Kp/fr6LHoc/zjvEjqePWOmL5x jMbuTGN+kyzNNDMDOew8OPjmiu/v7JHUXbjiiUkIf9yj6zQ6KIDNIP1aN1EYDQ6t KKcAmOZAxSV0+5sWqmHuihnwwrJxXtBSHZQrqEyXD1jX7sPvshDq8Wob3qBdr684 9VD3CxBr90hZnAHkg194mO7jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBpvltbQ5 rhR36mfXyhPuAyOOAegwHwYDVR0jBBgwFoAUgaZX6qx1VMq3oaKI9bP+7dilzEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBLzc2MTNGMzE2NTMx MzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2FaWDZxeDFWTXEzb2FLSTliUC03ZGlsekVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBLzc2MTNGMzE2NTMxMzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1x M29hS0k5YlAtN2RpbHpFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHKF+Me1E69GvTgARVz48b4cIAcTboNJgf5CT/yCh6lXpBfUDMFzl6c1 H3IqIH/l6Tje9tfu1dNJZEzKfk1lJ0jiMe5QmLFyZzbkXi4LvqMjVrzkBy6n/dRL mnS8agV835ulCRHSJdIsgkAitpYKpPAfNkLqLPWyWmv/j1ijFJ0r6MHQhcfnM6RI hq3Vb5N8AhXy9WxVnK8ixQEpOH3jqngsUh3LqXROlcsCqz2ANUfb2tPmB9kur8gl 9VFZw59AraF5YyX0Qg1rzE7ryk3hYTqERkYus9mDIsMwQQs8ONTzYUV550GJm758 m1hOZKpOO0k+V+8SGO7QIa35RoiI+Tk= -----END CERTIFICATE-----Generated at Sun Aug 10 03:55:35 2025 by rpki-client