$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: HaQyxwtJ8mJESbtmUYto2KLLCwc+O33dWDsNBLo1ZAk= Subject key identifier: F9:87:D7:25:C6:B0:54:9E:F1:B4:33:C6:9B:40:D8:65:2D:52:03:2B Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 06AE Signing time: Tue 12 Aug 2025 22:30:38 +0000 Manifest this update: Tue 12 Aug 2025 22:30:38 +0000 Manifest next update: Tue 19 Aug 2025 22:30:38 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: /xsJCFSm2i3ar3tQnNC1nt6MErsbhBJ2yCmxiihaFGw=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: m/HWFJ3zaTbb526BBQjKgkfjO3ab/2s+A2oNRFabdSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Aug 12 22:30:38 2025 GMT Not After : Aug 19 22:30:38 2025 GMT Subject: CN=689bc08e-d820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:d0:0e:ee:b0:9c:94:c0:23:32:26:46:d9: 12:2f:35:3d:52:1e:41:c0:6c:f2:3a:5b:59:e6:95: 18:5d:e8:27:9c:02:b2:c1:af:a7:bd:dd:b8:d1:2d: b4:d5:18:cf:f4:28:05:31:c5:8e:44:69:8c:f4:af: a7:4a:6e:92:3e:86:27:08:0b:54:ba:40:c1:25:ed: c6:3c:b3:d2:29:7d:64:75:67:c8:34:3b:9b:5a:88: 00:17:c6:0f:56:d5:23:2d:c0:ac:c0:72:13:92:92: d5:ae:b8:88:9e:07:eb:98:94:fa:f3:c3:04:be:b7: 71:07:e8:6c:cd:c6:ae:ba:f0:ef:2e:fe:e7:da:fd: 17:a8:0e:30:ee:93:ab:0b:c9:2f:1d:69:33:18:cb: be:f6:55:78:fe:eb:13:5b:c1:63:18:15:ba:c9:30: a7:db:35:c5:03:b3:80:48:15:ca:3d:f0:be:e7:15: 22:93:94:ec:50:db:ed:92:be:29:e4:89:99:00:34: 9b:31:a6:29:5f:e5:d8:4b:f7:29:2f:2b:c3:09:60: f3:8b:ec:d3:8d:d8:cf:87:94:ba:c8:f1:7c:76:78: a4:28:67:d3:ac:55:0c:4e:51:81:a6:a4:3c:0e:a8: b3:94:5a:6a:ae:19:d7:63:4f:ea:45:73:56:ce:4e: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:87:D7:25:C6:B0:54:9E:F1:B4:33:C6:9B:40:D8:65:2D:52:03:2B X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e4:bd:a9:eb:b3:0b:46:68:40:d8:da:af:cd:a0:90:d6:30: f0:13:d3:9e:2f:17:9f:2b:97:cb:b2:38:3b:72:a9:7b:cb:31: 38:db:49:d0:19:20:13:4d:63:45:f8:d3:ae:2f:4d:17:44:88: 9e:61:9b:9f:7e:a3:89:25:40:1d:c0:3e:14:27:0d:74:80:4f: 62:19:c0:ae:b8:61:e6:29:e2:0f:23:18:5d:a8:91:79:a8:df: 2e:b7:f4:f9:cb:16:75:42:3a:9e:be:7e:a3:c6:00:2a:24:49: 21:e7:cc:cc:87:7d:c7:4f:b0:29:56:d7:d4:25:f0:6b:53:69: bc:e7:fb:d9:1a:c3:8c:9b:d3:d2:1c:0a:3a:c9:e6:c5:3b:41: 5a:69:84:66:14:68:bb:0c:a6:70:26:28:ae:fb:d2:1c:2d:e2: 3b:2a:72:a9:fe:01:db:8f:19:92:f9:95:c0:c5:29:1e:fc:df: d1:73:e5:da:5b:69:8e:ee:d7:41:89:92:6b:f7:77:35:e3:38: 8d:7c:77:2d:76:14:d8:ba:ae:c1:2f:c6:98:d9:14:03:82:17: d2:5c:7d:31:bf:7d:2a:e5:e3:26:d3:db:0f:f7:84:84:44:e8: b6:ff:32:d1:62:ba:81:ad:1f:c7:79:e2:ca:f3:1b:ae:b9:26: 48:8c:ce:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUwODEyMjIzMDM4WhcNMjUwODE5MjIzMDM4WjAYMRYwFAYD VQQDEw02ODliYzA4ZS1kODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgPQDu6wnJTAIzImRtkSLzU9Uh5BwGzyOltZ5pUYXegnnAKywa+nvd240S20 1RjP9CgFMcWORGmM9K+nSm6SPoYnCAtUukDBJe3GPLPSKX1kdWfINDubWogAF8YP VtUjLcCswHITkpLVrriIngfrmJT688MEvrdxB+hszcauuvDvLv7n2v0XqA4w7pOr C8kvHWkzGMu+9lV4/usTW8FjGBW6yTCn2zXFA7OASBXKPfC+5xUik5TsUNvtkr4p 5ImZADSbMaYpX+XYS/cpLyvDCWDzi+zTjdjPh5S6yPF8dnikKGfTrFUMTlGBpqQ8 DqizlFpqrhnXY0/qRXNWzk6PYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmH1yXG sFSe8bQzxptA2GUtUgMrMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR5L2p67MLRmhA2NqvzaCQ1jDwE9OeLxefK5fLsjg7cql7yzE420nQ GSATTWNF+NOuL00XRIieYZuffqOJJUAdwD4UJw10gE9iGcCuuGHmKeIPIxhdqJF5 qN8ut/T5yxZ1Qjqevn6jxgAqJEkh58zMh33HT7ApVtfUJfBrU2m85/vZGsOMm9PS HAo6yebFO0FaaYRmFGi7DKZwJiiu+9IcLeI7KnKp/gHbjxmS+ZXAxSke/N/Rc+Xa W2mO7tdBiZJr93c14ziNfHctdhTYuq7BL8aY2RQDghfSXH0xv30q5eMm09sP94SE ROi2/zLRYrqBrR/HeeLK8xuuuSZIjM7o -----END CERTIFICATE-----Generated at Wed Aug 13 04:31:15 2025 by rpki-client