$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json) Hash identifier: 6t46iK+r6HphojeQaeJhnWxvUs5P8ZsH8aNBer0HNwQ= Subject key identifier: F0:4A:C3:FF:4F:62:89:A3:37:A2:94:52:9A:78:9A:FB:61:54:E5:DB Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft Manifest number: 07BF Signing time: Sun 10 Aug 2025 21:13:32 +0000 Manifest this update: Sun 10 Aug 2025 21:13:32 +0000 Manifest next update: Sun 17 Aug 2025 21:13:32 +0000 Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: 5eet+jBEsJMNa0puz5fTop1eEStR0lKyqNx2wTq/JRY=) 2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: YgjG4RIq8/AXh0+vxXX2Pz+/mF/LDmvghTRwjTbmhTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: Aug 10 21:13:32 2025 GMT Not After : Aug 17 21:13:32 2025 GMT Subject: CN=68990b7c-03d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:62:32:ca:cf:f1:88:00:5a:06:3c:f0:e1:5b: a9:52:f6:62:7c:29:8e:a6:bc:c7:93:35:eb:20:e2: 66:18:7c:e6:12:6d:3d:2c:2a:91:93:0b:1a:1a:78: 12:5d:cf:11:b7:00:db:42:e9:81:45:55:ee:40:a0: b7:be:4d:03:40:e0:48:aa:8d:b3:75:23:67:0f:e7: aa:e6:56:df:5e:08:93:5f:2d:9a:f4:64:8e:8a:f2: 97:a5:d2:02:03:2c:86:75:0d:1e:b6:af:8e:2c:50: 0e:dc:98:1f:64:72:2a:25:85:b9:b8:77:5f:4c:36: 38:6e:03:6f:65:7b:6f:f8:f7:f4:64:50:f5:2c:5b: ad:e7:e1:ad:43:17:88:16:a5:9f:03:3c:70:96:57: e3:9f:7d:5d:c5:61:ab:0f:46:5c:b8:01:da:e1:2a: 1a:8f:96:47:76:4d:59:e8:bf:d6:99:11:f1:d4:2e: ff:01:fc:7a:86:db:3f:aa:b7:06:9c:1b:ac:34:fb: 74:8f:1a:51:2e:95:5c:4f:38:03:75:e1:56:d6:02: 70:02:5a:ec:60:2e:8f:da:99:63:8a:68:30:bb:cd: 47:ce:e1:0d:9e:6e:58:39:ab:87:e6:bc:1d:fe:6d: 2d:33:53:9b:28:4f:bb:ea:59:27:1d:2b:23:6a:a2: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4A:C3:FF:4F:62:89:A3:37:A2:94:52:9A:78:9A:FB:61:54:E5:DB X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:0d:8e:ba:c3:e9:34:63:78:94:b3:3e:ba:4e:52:65:b7:01: 32:96:d4:a4:0a:8a:38:e3:bf:e3:e6:92:6f:87:60:33:a4:10: d4:74:7b:80:78:5b:13:7f:98:73:0d:50:84:9c:72:31:f9:b1: 6d:25:53:21:18:4d:9e:9b:09:9f:34:9c:98:95:ed:89:5f:c9: 60:ca:bb:c8:37:c2:4b:66:85:83:95:6f:57:83:fa:26:e5:46: b3:e8:c7:0a:fb:d1:bc:e1:20:41:0f:70:18:d1:6a:bc:11:ac: 46:35:a4:f5:d1:0a:45:89:ea:e8:7f:c9:c6:db:40:7c:69:f1: 70:32:5a:56:44:20:4d:28:b3:07:cf:1b:e6:74:f1:1d:2e:ff: 09:a1:24:c2:78:7c:23:07:59:ac:8c:0e:94:ab:a9:5b:85:b9: 54:7b:20:b7:58:60:d7:55:de:71:35:45:46:5c:f9:a1:1d:26: a4:78:57:d5:5b:81:e1:dc:e3:d6:2b:ea:29:75:fc:65:a5:ad: d3:f0:e5:d4:c5:98:91:db:a5:e5:e7:d7:e7:6e:25:73:01:21: 78:50:58:b4:63:f8:5e:ee:18:55:bc:c3:8a:45:90:b8:7f:c3: 32:5c:43:60:d7:63:30:e1:2b:f6:1a:bc:5e:f8:63:04:59:a8: f6:0f:96:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjUwODEwMjExMzMyWhcNMjUwODE3MjExMzMyWjAYMRYwFAYD VQQDEw02ODk5MGI3Yy0wM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82Iyys/xiABaBjzw4VupUvZifCmOprzHkzXrIOJmGHzmEm09LCqRkwsaGngS Xc8RtwDbQumBRVXuQKC3vk0DQOBIqo2zdSNnD+eq5lbfXgiTXy2a9GSOivKXpdIC AyyGdQ0etq+OLFAO3JgfZHIqJYW5uHdfTDY4bgNvZXtv+Pf0ZFD1LFut5+GtQxeI FqWfAzxwllfjn31dxWGrD0ZcuAHa4Soaj5ZHdk1Z6L/WmRHx1C7/Afx6hts/qrcG nBusNPt0jxpRLpVcTzgDdeFW1gJwAlrsYC6P2pljimgwu81HzuENnm5YOauH5rwd /m0tM1ObKE+76lknHSsjaqLtdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBKw/9P YomjN6KUUpp4mvthVOXbMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUY5Ni8wRjg2RTYwRTA2Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3 WW5oRDIxbjZRYS1uODdmRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCDY66w+k0Y3iUsz66TlJltwEyltSkCoo447/j5pJvh2AzpBDUdHuA eFsTf5hzDVCEnHIx+bFtJVMhGE2emwmfNJyYle2JX8lgyrvIN8JLZoWDlW9Xg/om 5Uaz6McK+9G84SBBD3AY0Wq8EaxGNaT10QpFierof8nG20B8afFwMlpWRCBNKLMH zxvmdPEdLv8JoSTCeHwjB1msjA6Uq6lbhblUeyC3WGDXVd5xNUVGXPmhHSakeFfV W4Hh3OPWK+opdfxlpa3T8OXUxZiR26Xl59fnbiVzASF4UFi0Y/he7hhVvMOKRZC4 f8MyXENg12Mw4Sv2Grxe+GMEWaj2D5Yt -----END CERTIFICATE-----Generated at Mon Aug 11 08:48:00 2025 by rpki-client