$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft File: gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json) Hash identifier: RZFDmEWOX6XmgQDunRFNCw6ZUNbXC2YoCo9n4kjH+AI= Subject key identifier: 00:3C:20:5C:2C:7A:5F:EA:CC:C0:9D:66:1E:9C:54:30:5D:40:12:45 Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft Manifest number: 34D9 Signing time: Fri 08 Aug 2025 14:27:45 +0000 Manifest this update: Fri 08 Aug 2025 14:27:44 +0000 Manifest next update: Fri 15 Aug 2025 14:27:44 +0000 Files and hashes: 1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: 9np/sDHe394AeNueNHWIsa4zbi43PzsQ16Nm0HDcdFM=) 2: 60020E9436F511F0B22B5E24C4F9AE02.roa (hash: JetDV/3YonU90g4PmXfe9VaHyV+YwCaNx8AIiUOEL+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Validity Not Before: Aug 8 14:27:44 2025 GMT Not After : Aug 15 14:27:44 2025 GMT Subject: CN=68960961-49a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:7b:77:ac:4f:c6:04:1e:32:1f:2e:c9:29: 33:d9:93:4d:bd:69:13:20:ef:fe:ec:b2:2d:28:70: 0a:de:6e:24:47:89:02:a5:43:a1:be:fe:df:c7:18: 17:ea:53:a2:39:8d:c2:57:30:11:8f:f2:15:1f:9f: c1:e6:b9:fb:20:b3:04:ff:2c:cc:6f:5d:bb:08:48: 18:be:67:c9:85:df:42:f5:e8:7e:ec:98:0c:f2:d1: 99:68:b8:e0:51:ed:6d:0b:51:16:c2:21:80:03:c6: a9:8f:68:45:10:30:74:11:0f:8d:4d:b6:c7:c6:2e: 3e:2e:2a:40:d5:29:b7:7c:3d:43:a9:52:fa:46:81: be:6e:bc:06:f9:8f:76:a1:db:87:74:ef:9c:14:ba: 15:f0:6c:ea:cd:c0:0d:35:5a:eb:f7:35:06:a4:1c: 45:0b:5c:f3:64:31:fd:0d:77:59:bb:a6:49:5e:43: 1a:ec:93:a1:b0:07:7b:e6:3f:b0:17:26:63:3a:ae: cd:24:27:a1:38:56:bd:01:76:36:e2:09:9d:af:62: 30:ce:83:60:7e:ce:c4:6d:55:46:c7:2c:9c:18:0a: 1e:d1:a1:5d:3e:4f:b4:22:0d:d4:7e:ed:0f:b1:74: fb:f1:6f:e3:60:b7:fa:64:26:3e:a2:a2:bb:04:44: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3C:20:5C:2C:7A:5F:EA:CC:C0:9D:66:1E:9C:54:30:5D:40:12:45 X509v3 Authority Key Identifier: keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ed:64:91:c0:fb:69:84:8d:d5:5a:b7:c0:3c:dd:39:39:54: f3:02:2d:d1:fb:56:62:7c:fc:d1:4b:dd:36:22:96:1b:a7:55: 3c:dc:fa:f7:2c:58:0f:38:d1:d3:20:0e:69:13:8f:41:c9:db: a6:fb:af:99:86:ac:61:af:ca:8b:80:c5:2d:75:a6:0b:f8:58: b9:3c:dc:34:bb:87:42:d7:b1:7c:d2:63:a9:d9:26:3e:67:e2: b1:52:ce:2f:b8:15:b3:f5:9e:bf:9f:48:4e:ef:20:95:86:b5: c6:d9:d4:4c:6c:6d:de:24:ed:1d:42:58:e9:0b:fa:82:d0:4c: b5:5c:e9:f4:9c:15:59:ed:cc:19:6b:5c:9d:77:75:54:f4:28: fc:3e:bb:db:60:71:04:67:91:e3:36:fd:96:8a:5f:82:f2:e9: 06:83:0a:e9:1b:9f:da:b9:8d:b6:fb:81:67:db:a8:8d:32:96: 11:ae:61:fe:f3:a9:bb:e6:5f:4c:93:d9:6c:90:06:e7:fb:56: 1f:e0:c4:b6:60:2d:da:9c:8d:a2:06:d6:cf:02:d8:6d:ec:48: 3c:48:76:c4:ef:c6:c2:b3:14:d2:0c:77:61:bb:8c:7c:27:2f: 0b:22:df:a1:9c:40:c5:5c:1c:cd:54:6b:c7:ba:e9:b7:c2:47: 33:e8:66:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0 QzQ1MzM0MDUwHhcNMjUwODA4MTQyNzQ0WhcNMjUwODE1MTQyNzQ0WjAYMRYwFAYD VQQDEw02ODk2MDk2MS00OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lt7d6xPxgQeMh8uySkz2ZNNvWkTIO/+7LItKHAK3m4kR4kCpUOhvv7fxxgX 6lOiOY3CVzARj/IVH5/B5rn7ILME/yzMb127CEgYvmfJhd9C9eh+7JgM8tGZaLjg Ue1tC1EWwiGAA8apj2hFEDB0EQ+NTbbHxi4+LipA1Sm3fD1DqVL6RoG+brwG+Y92 oduHdO+cFLoV8GzqzcANNVrr9zUGpBxFC1zzZDH9DXdZu6ZJXkMa7JOhsAd75j+w FyZjOq7NJCehOFa9AXY24gmdr2IwzoNgfs7EbVVGxyycGAoe0aFdPk+0Ig3Ufu0P sXT78W/jYLf6ZCY+oqK7BETouwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA8IFws el/qzMCdZh6cVDBdQBJFMB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkNGQy9CRjg0QjU3NDFEODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMy SDNFMjhKY1p2ODlNUlROQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH7WSRwPtphI3VWrfAPN05OVTzAi3R+1ZifPzRS902IpYbp1U83Pr3 LFgPONHTIA5pE49Bydum+6+Zhqxhr8qLgMUtdaYL+Fi5PNw0u4dC17F80mOp2SY+ Z+KxUs4vuBWz9Z6/n0hO7yCVhrXG2dRMbG3eJO0dQljpC/qC0Ey1XOn0nBVZ7cwZ a1ydd3VU9Cj8PrvbYHEEZ5HjNv2Wil+C8ukGgwrpG5/auY22+4Fn26iNMpYRrmH+ 86m75l9Mk9lskAbn+1Yf4MS2YC3anI2iBtbPAtht7Eg8SHbE78bCsxTSDHdhu4x8 Jy8LIt+hnEDFXBzNVGvHuum3wkcz6GZf -----END CERTIFICATE-----Generated at Sat Aug 9 14:31:06 2025 by rpki-client