$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: kOROBCtpvgbW9L4IYSWYVc119t00YtkHFzTXllMPijc= Subject key identifier: 9E:18:A9:8E:14:F9:39:F2:3A:4D:BD:9C:B4:7B:C1:6C:DB:15:B7:7E Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B40 Signing time: Wed 06 Aug 2025 19:25:46 +0000 Manifest this update: Wed 06 Aug 2025 19:25:46 +0000 Manifest next update: Wed 13 Aug 2025 19:25:46 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: STzq0NflZu1nkfzIXI6kW9UQH2sXnzpijfoEUAzF9Ww=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Aug 6 19:25:46 2025 GMT Not After : Aug 13 19:25:46 2025 GMT Subject: CN=6893ac3a-5a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:a2:f0:56:b0:ef:7c:6c:c1:96:e6:db:6f: 6e:41:8e:c8:ef:cd:34:46:af:7f:41:25:ff:5e:3c: 96:6f:a4:90:6c:c3:3a:d0:0a:af:62:5b:e1:4e:8d: 8d:0d:9d:38:9b:86:ea:7a:3e:70:d8:c7:ff:7b:07: 5c:ec:aa:02:21:a5:a7:f5:d3:a4:69:d5:0f:7b:34: e4:4b:4c:c8:28:f0:c8:09:66:42:d0:35:1e:8e:46: 60:25:fc:bf:44:3d:fe:11:95:6f:20:f8:d7:ea:30: 0f:f4:d8:a7:52:e8:ab:80:e3:69:a1:6e:21:7d:2b: e6:9b:43:c3:9d:f7:ba:07:d8:39:68:bb:cf:54:4f: d6:27:94:c5:46:9c:b6:28:3f:65:22:92:7b:22:f3: fc:c9:e9:35:98:db:0f:cf:bd:96:42:e4:0c:68:8f: 86:f4:c6:01:7d:33:56:b6:c3:5d:77:96:99:06:b6: 10:d7:c8:04:d9:c8:52:70:47:f3:4b:0d:62:3b:d6: 04:fe:29:af:83:b4:ea:19:5c:0c:98:00:06:83:d4: 91:b5:b8:b9:7d:c8:8f:1f:d4:7f:fd:39:6a:96:a6: cb:d3:fe:9c:bc:08:ce:cb:9b:29:ae:a8:d4:6d:bc: 13:0b:a1:71:d2:be:53:49:3b:ec:c8:bb:cf:55:f8: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:A9:8E:14:F9:39:F2:3A:4D:BD:9C:B4:7B:C1:6C:DB:15:B7:7E X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:00:78:27:97:24:9f:a4:d1:3d:5e:c7:73:07:41:08:3c:ed: ac:f7:d2:7a:a3:2f:ef:ef:d7:4a:f0:f6:4e:9d:3b:04:26:75: ff:80:92:7f:18:36:ff:6e:69:ff:f0:36:cc:52:31:58:83:4c: a9:67:24:e2:fe:26:8d:db:10:7f:54:e7:3d:2c:fc:b6:27:71: 8d:c3:93:ab:62:27:b0:3a:c9:00:33:f7:02:07:8b:2e:94:e7: 71:34:3c:36:16:25:72:4d:9a:d4:9e:10:e7:24:d0:42:b1:84: bd:9c:be:20:30:2e:70:5a:7e:92:6e:1e:89:07:fd:e5:4b:ad: 15:b7:c8:7b:d3:7c:4f:df:94:55:86:7a:dc:70:4f:ef:f4:23: 2e:79:eb:22:f9:ad:83:a6:50:39:a8:e0:5c:a3:36:df:58:35: 82:80:03:00:8a:31:8f:f9:c0:d9:50:46:62:b4:d7:e9:7a:5a: 94:0a:18:fd:17:9a:93:cb:59:70:df:aa:88:5c:54:14:7d:1c: 5d:85:88:0e:c5:9b:a6:f3:db:f3:a2:fe:da:5c:b3:9a:a8:aa: f5:69:9e:75:b5:05:1b:15:4b:f3:65:a2:a2:54:79:ce:88:ba: 13:c4:b9:d8:ab:6c:b4:03:77:04:6e:3c:02:20:53:2f:a1:4a: 50:08:1a:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUwODA2MTkyNTQ2WhcNMjUwODEzMTkyNTQ2WjAYMRYwFAYD VQQDEw02ODkzYWMzYS01YTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHqi8Faw73xswZbm229uQY7I7800Rq9/QSX/XjyWb6SQbMM60AqvYlvhTo2N DZ04m4bqej5w2Mf/ewdc7KoCIaWn9dOkadUPezTkS0zIKPDICWZC0DUejkZgJfy/ RD3+EZVvIPjX6jAP9NinUuirgONpoW4hfSvmm0PDnfe6B9g5aLvPVE/WJ5TFRpy2 KD9lIpJ7IvP8yek1mNsPz72WQuQMaI+G9MYBfTNWtsNdd5aZBrYQ18gE2chScEfz Sw1iO9YE/imvg7TqGVwMmAAGg9SRtbi5fciPH9R//TlqlqbL0/6cvAjOy5sprqjU bbwTC6Fx0r5TSTvsyLvPVfhCSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4YqY4U +TnyOk29nLR7wWzbFbd+MB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2AHgnlySfpNE9XsdzB0EIPO2s99J6oy/v79dK8PZOnTsEJnX/gJJ/ GDb/bmn/8DbMUjFYg0ypZyTi/iaN2xB/VOc9LPy2J3GNw5OrYiewOskAM/cCB4su lOdxNDw2FiVyTZrUnhDnJNBCsYS9nL4gMC5wWn6Sbh6JB/3lS60Vt8h703xP35RV hnrccE/v9CMueesi+a2DplA5qOBcozbfWDWCgAMAijGP+cDZUEZitNfpelqUChj9 F5qTy1lw36qIXFQUfRxdhYgOxZum89vzov7aXLOaqKr1aZ51tQUbFUvzZaKiVHnO iLoTxLnYq2y0A3cEbjwCIFMvoUpQCBou -----END CERTIFICATE-----Generated at Fri Aug 8 20:58:06 2025 by rpki-client