$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: 0AnTG4Q3YKzEJN3L6bm3nrLoe/317mxKbNCjkb/P8lw= Subject key identifier: 99:D8:A1:91:D7:B0:90:62:1A:02:4C:C1:C4:A5:8C:22:6A:E7:44:9D Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 04E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 04DA Signing time: Tue 05 Aug 2025 00:15:21 +0000 Manifest this update: Tue 05 Aug 2025 00:15:21 +0000 Manifest next update: Tue 12 Aug 2025 00:15:21 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: aUFLsjIh7gESRHJQcs0nUxV3f1GnsZchYK8zPl4jZE4=) 2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: OgxkGLoBh6HGvCB/fRUVvIfnQUfu5bCnmyvUAGDoCoM=) 3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 7kV6yNtY0OEuz4gBv/+8ihVZGqJgfv8o7qKBHm8GmBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: Aug 5 00:15:21 2025 GMT Not After : Aug 12 00:15:21 2025 GMT Subject: CN=68914d19-9cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:1e:88:f1:8d:ae:a3:ee:aa:56:85:f4:80: 14:df:c5:a9:1c:73:b3:02:09:80:0a:8f:10:d4:53: cc:ca:f3:39:a1:15:de:9f:9e:f3:48:69:83:fb:52: 14:3b:5d:45:0a:22:5f:0d:f6:4b:d1:84:e6:77:a8: 3a:c4:f8:22:c1:29:b2:f2:6f:3c:db:df:47:4c:0f: cc:90:fa:7f:63:1c:0e:34:de:23:e8:33:d2:ba:e5: bc:a1:f4:22:b9:3b:e8:60:05:55:b1:40:11:2a:ac: 6d:31:44:59:2f:1d:0d:c7:ae:6a:4a:f9:a6:3f:ed: 93:80:ea:d3:eb:35:a6:4e:6b:eb:d1:14:ae:74:4e: 35:b8:0a:ee:e5:c6:ae:fe:9d:59:e6:f3:a7:a2:c7: 47:ce:ac:b1:4a:70:d6:23:05:eb:83:a3:56:37:bb: 87:ff:9a:e6:14:6c:bf:08:df:72:ea:0d:c6:3c:56: 1d:fa:82:7f:21:bc:4d:fb:86:20:54:75:52:b1:aa: e1:2f:13:f2:8a:8b:58:f2:0d:f5:bd:e9:59:30:2f: 44:5b:4c:03:d2:df:23:50:33:00:0d:89:ba:2e:10: d0:b7:9f:48:2e:39:11:0a:53:a7:44:a0:0d:5a:fb: cb:65:4d:b1:67:e6:ec:8d:f6:17:b1:20:05:5e:ee: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D8:A1:91:D7:B0:90:62:1A:02:4C:C1:C4:A5:8C:22:6A:E7:44:9D X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6d:60:5f:02:29:36:cc:02:2d:17:05:be:66:64:e4:dd:13: bb:4c:3f:40:91:4e:aa:09:8e:27:cc:ec:ca:3e:50:2e:96:41: 4d:21:47:ce:4a:72:95:ea:48:50:9a:61:6d:41:23:d0:5c:26: a2:a6:98:99:50:c4:c6:cd:26:45:7a:ec:30:12:3f:bd:09:98: 47:ba:f7:99:13:29:76:7c:76:be:8a:89:c7:06:e2:38:d2:db: 8d:af:09:a1:26:75:01:67:65:45:95:d6:e2:5f:10:02:1f:76: 6a:9a:2c:60:b7:61:e6:72:99:1b:a0:d5:ef:31:6e:67:fe:ec: e7:63:8e:09:e0:70:48:a9:99:b5:e9:76:c3:e8:df:e0:c6:91: a1:d0:99:b8:20:1b:f7:ab:a4:71:df:32:3f:b2:40:d9:a7:43: 17:93:66:bc:35:95:e1:8b:bd:c8:a3:a6:94:93:40:eb:28:5d: a1:28:de:3e:77:95:6d:59:80:45:97:45:e7:28:4e:47:9a:c9: 0a:fb:61:b4:ad:23:4c:31:01:3e:84:8d:92:ec:89:eb:29:b9: 2c:c6:86:ab:93:13:d9:ff:15:89:f5:fd:76:c0:70:92:57:e0: b1:74:84:0d:0f:c7:e7:50:af:93:c1:91:2e:15:49:ed:a0:9e: c7:55:2c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjUwODA1MDAxNTIxWhcNMjUwODEyMDAxNTIxWjAYMRYwFAYD VQQDEw02ODkxNGQxOS05Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MAeiPGNrqPuqlaF9IAU38WpHHOzAgmACo8Q1FPMyvM5oRXen57zSGmD+1IU O11FCiJfDfZL0YTmd6g6xPgiwSmy8m88299HTA/MkPp/YxwONN4j6DPSuuW8ofQi uTvoYAVVsUARKqxtMURZLx0Nx65qSvmmP+2TgOrT6zWmTmvr0RSudE41uAru5cau /p1Z5vOnosdHzqyxSnDWIwXrg6NWN7uH/5rmFGy/CN9y6g3GPFYd+oJ/IbxN+4Yg VHVSsarhLxPyiotY8g31velZMC9EW0wD0t8jUDMADYm6LhDQt59ILjkRClOnRKAN WvvLZU2xZ+bsjfYXsSAFXu7kZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnYoZHX sJBiGgJMwcSljCJq50SdMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArbWBfAik2zAItFwW+ZmTk3RO7TD9AkU6qCY4nzOzKPlAulkFNIUfO SnKV6khQmmFtQSPQXCaippiZUMTGzSZFeuwwEj+9CZhHuveZEyl2fHa+ionHBuI4 0tuNrwmhJnUBZ2VFldbiXxACH3Zqmixgt2HmcpkboNXvMW5n/uznY44J4HBIqZm1 6XbD6N/gxpGh0Jm4IBv3q6Rx3zI/skDZp0MXk2a8NZXhi73Io6aUk0DrKF2hKN4+ d5VtWYBFl0XnKE5HmskK+2G0rSNMMQE+hI2S7InrKbksxoarkxPZ/xWJ9f12wHCS V+CxdIQND8fnUK+TwZEuFUntoJ7HVSwq -----END CERTIFICATE-----Generated at Wed Aug 6 00:45:23 2025 by rpki-client