$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: EdfSAhtiPJUlq3RaU08QYqeoDh8ei3AOCNiVo1xv7CQ= Subject key identifier: B7:1A:B6:17:B2:91:4E:64:19:9E:9F:6F:6B:5B:90:C1:1D:83:4B:68 Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: 88 Signing time: Sat 09 Aug 2025 07:06:58 +0000 Manifest this update: Sat 09 Aug 2025 07:06:58 +0000 Manifest next update: Sat 16 Aug 2025 07:06:58 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: npzb1LJanP6iZy7yESsKM8VHDaKAXQIwxTTA2QiXD8Q=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Aug 9 07:06:58 2025 GMT Not After : Aug 16 07:06:58 2025 GMT Subject: CN=6896f392-d56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:2e:c1:cb:75:a9:d2:82:f2:07:cb:c6:b7: 83:df:c8:46:ae:a5:1c:3b:2b:4a:8d:60:c3:7e:0e: 63:68:ca:ae:11:88:cd:66:93:fa:33:c7:54:41:15: 26:f1:fc:49:2d:99:55:a1:67:a8:2a:b7:d6:f5:ff: c5:72:9a:98:34:1b:65:d6:bf:f6:2d:51:19:11:ba: 1a:47:10:40:34:ad:1c:0f:8c:be:54:31:4a:52:e6: 0d:7c:0b:01:93:e0:b4:4e:bc:88:20:10:05:e4:95: c5:91:61:a6:3f:f8:90:19:dd:18:6a:6c:f6:4b:49: 57:55:64:d3:8e:4f:d9:3c:64:03:76:d1:04:f6:06: d2:ac:16:1b:e8:e0:2c:7b:fe:ab:9f:82:25:d7:bb: 93:e6:4d:6e:04:22:9d:06:c1:d9:b4:a5:2d:b1:bb: a4:de:68:0e:cc:86:b2:aa:de:61:ad:80:5d:46:1f: e1:6c:4a:1d:0f:bd:28:32:ad:fa:74:36:80:91:1c: 85:90:ca:a1:f0:e5:b0:1d:37:b7:c7:7a:ef:9c:02: d3:c3:76:58:7d:02:9a:b2:62:48:b8:f2:b3:58:ff: f0:df:58:7e:b1:8d:0a:29:2b:16:43:78:9d:0c:8a: e0:13:89:e7:e8:e6:67:84:71:78:f8:e1:4d:5b:21: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1A:B6:17:B2:91:4E:64:19:9E:9F:6F:6B:5B:90:C1:1D:83:4B:68 X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:6f:66:3a:70:e6:78:7b:51:be:7f:47:2d:5c:31:10:b5:91: cb:7a:a8:49:6e:f0:98:f0:73:d7:96:69:74:32:81:a1:02:56: 21:af:cb:ae:8e:da:8e:b2:40:d1:35:2c:98:92:d1:30:34:62: 25:42:ac:99:5e:0a:67:90:4b:94:19:5e:ee:2a:28:92:fa:08: 73:2e:57:08:4d:46:a7:90:ec:dc:07:f2:56:b8:95:5c:6f:dd: b0:51:ef:8f:8e:e9:44:5d:10:c8:e7:b0:1a:e1:a0:6c:f4:ca: cb:ee:ee:40:44:12:e1:b1:f2:92:50:e6:8b:b1:b7:76:e6:35: 4b:5b:0b:12:e1:4c:cc:9b:ea:0c:e0:66:11:af:3c:1e:59:9b: 28:a4:41:11:9a:4b:c2:bb:50:39:30:b2:86:a0:c4:7b:4a:ff: 2a:31:76:56:a3:e0:8b:93:ef:cf:b8:dd:2a:cc:93:d3:cc:5d: 18:19:2a:b6:f4:d7:bf:ea:6d:92:9e:9e:df:28:e6:a5:79:e0: 82:0c:8e:c2:ed:00:3a:90:e4:3e:ee:de:dd:fa:31:c1:39:f6: 4e:73:25:91:a2:75:e4:cd:5e:6b:fe:35:64:e9:bd:98:7c:c8: 47:51:7d:f7:a3:b2:d8:d0:e5:7d:ba:bc:3a:36:82:15:04:53: be:17:fd:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4 RDZBRDk1RUQwHhcNMjUwODA5MDcwNjU4WhcNMjUwODE2MDcwNjU4WjAYMRYwFAYD VQQDEw02ODk2ZjM5Mi1kNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcsuwct1qdKC8gfLxreD38hGrqUcOytKjWDDfg5jaMquEYjNZpP6M8dUQRUm 8fxJLZlVoWeoKrfW9f/FcpqYNBtl1r/2LVEZEboaRxBANK0cD4y+VDFKUuYNfAsB k+C0TryIIBAF5JXFkWGmP/iQGd0Yamz2S0lXVWTTjk/ZPGQDdtEE9gbSrBYb6OAs e/6rn4Il17uT5k1uBCKdBsHZtKUtsbuk3mgOzIayqt5hrYBdRh/hbEodD70oMq36 dDaAkRyFkMqh8OWwHTe3x3rvnALTw3ZYfQKasmJIuPKzWP/w31h+sY0KKSsWQ3id DIrgE4nn6OZnhHF4+OFNWyEvvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcathey kU5kGZ6fb2tbkMEdg0toMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4 OU1UYktkYW1YZUNOYXRsZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3b2Y6cOZ4e1G+f0ctXDEQtZHLeqhJbvCY8HPXlml0MoGhAlYhr8uu jtqOskDRNSyYktEwNGIlQqyZXgpnkEuUGV7uKiiS+ghzLlcITUankOzcB/JWuJVc b92wUe+PjulEXRDI57Aa4aBs9MrL7u5ARBLhsfKSUOaLsbd25jVLWwsS4UzMm+oM 4GYRrzweWZsopEERmkvCu1A5MLKGoMR7Sv8qMXZWo+CLk+/PuN0qzJPTzF0YGSq2 9Ne/6m2Snp7fKOaleeCCDI7C7QA6kOQ+7t7d+jHBOfZOcyWRonXkzV5r/jVk6b2Y fMhHUX33o7LY0OV9urw6NoIVBFO+F/0f -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:12 2025 by rpki-client