$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json) Hash identifier: vYVztRDjVXXAJUkUb2a6dLZFZYnvIEwkY/CoifPyXyM= Subject key identifier: B0:A3:92:85:BA:A8:23:F0:F7:61:29:88:9D:FA:92:3B:8F:BE:D7:43 Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft Manifest number: 0148 Signing time: Sat 09 Aug 2025 04:37:33 +0000 Manifest this update: Sat 09 Aug 2025 04:37:33 +0000 Manifest next update: Sat 16 Aug 2025 04:37:33 +0000 Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: y4a8vpr9SkPbnR2BkmACtnPZjdJsWgdsBefNw1L38Bc=) 2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE Validity Not Before: Aug 9 04:37:33 2025 GMT Not After : Aug 16 04:37:33 2025 GMT Subject: CN=6896d08d-84b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:d7:10:99:88:45:eb:4f:05:79:76:cc:cf: df:68:aa:df:94:89:12:cd:cf:19:71:f5:da:95:ee: 26:6d:4b:6c:6d:f8:2f:78:18:eb:1d:32:00:24:4c: 5b:fa:b4:b8:15:59:3f:a8:9f:81:2e:54:13:0a:6a: 3c:85:57:c4:49:2a:41:fc:c6:f1:c4:af:1a:05:dc: db:38:98:23:c9:ab:32:c2:8e:c2:fe:a5:98:cc:9a: 30:de:79:9f:ea:00:06:d3:b8:37:ff:48:24:0a:32: de:44:4d:a7:ac:f2:1c:4e:4f:ed:65:64:6d:55:c2: b0:41:cb:0f:ec:4f:5b:67:b4:9c:ac:6a:a5:53:9e: a8:77:ea:54:11:c1:59:3e:76:3a:a9:ce:2f:74:2e: 30:c1:57:ad:a9:73:e4:ff:b8:b0:f2:25:5a:2a:8c: 58:4e:93:73:bf:83:33:2a:2b:41:d2:ba:2b:83:94: 95:50:6a:6d:d6:03:39:6c:14:9d:dc:45:59:f5:99: aa:fe:1b:0a:7f:08:eb:e2:3b:6e:be:b0:f0:1e:b1: 85:c3:f9:eb:48:e9:3e:06:26:d2:5c:cc:21:d2:44: 4a:05:e0:08:18:8a:41:bf:03:a1:47:93:1a:58:13: 4c:43:a6:7e:f6:6b:06:3a:06:59:cf:71:1c:fe:e9: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A3:92:85:BA:A8:23:F0:F7:61:29:88:9D:FA:92:3B:8F:BE:D7:43 X509v3 Authority Key Identifier: keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8c:82:5d:3b:c5:e9:ef:3f:7c:fa:db:c5:24:3b:38:d0:c6: 55:60:95:56:e4:ed:a2:00:a0:9c:3a:e9:e5:ff:fe:a8:3d:66: 82:c4:f2:47:db:08:87:06:c6:95:a2:f1:8e:90:59:ab:01:1d: a7:b1:3b:46:bb:6c:2e:28:dd:13:ea:65:96:ff:36:d1:3d:3d: e9:d8:67:7f:c4:6c:2a:23:d9:2a:82:1a:89:1c:44:d5:22:72: 09:08:89:3b:ee:56:6a:a6:1d:1f:18:e7:d2:81:8a:3f:07:58: 12:56:1b:5c:65:1d:a9:3f:bb:03:b1:c5:5d:1b:7e:88:b9:d4: e6:53:76:50:ef:8a:e4:ad:f3:f2:03:a8:44:76:f9:1a:38:31: f5:49:7a:1b:2a:c8:c5:59:84:97:e5:a2:9b:cc:63:d8:06:32: b8:bd:7a:6f:c1:96:e4:8f:01:06:f6:50:b4:b8:17:53:dd:d0: ac:94:80:75:c8:09:69:4d:bf:3b:88:db:c2:c5:06:ce:a7:16: 18:3d:23:27:bb:5b:11:5a:4d:cc:74:d3:6a:5b:d0:cd:21:ae: 15:b5:05:97:f3:a2:87:b4:8b:51:04:97:e4:d7:a4:78:14:65: 03:f2:4f:de:2a:c2:d5:7b:0a:aa:89:5a:55:c7:7c:30:29:2a: 3d:7b:71:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQwOEExMTAvBgNVBAUTKDgxNkE0NzhEODZFN0UyMUJGMzE3ODUxMEI4NTg1MzI1 NTgzNDMwRUUwHhcNMjUwODA5MDQzNzMzWhcNMjUwODE2MDQzNzMzWjAYMRYwFAYD VQQDEw02ODk2ZDA4ZC04NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx/XEJmIRetPBXl2zM/faKrflIkSzc8ZcfXale4mbUtsbfgveBjrHTIAJExb +rS4FVk/qJ+BLlQTCmo8hVfESSpB/MbxxK8aBdzbOJgjyasywo7C/qWYzJow3nmf 6gAG07g3/0gkCjLeRE2nrPIcTk/tZWRtVcKwQcsP7E9bZ7ScrGqlU56od+pUEcFZ PnY6qc4vdC4wwVetqXPk/7iw8iVaKoxYTpNzv4MzKitB0rorg5SVUGpt1gM5bBSd 3EVZ9Zmq/hsKfwjr4jtuvrDwHrGFw/nrSOk+BibSXMwh0kRKBeAIGIpBvwOhR5Ma WBNMQ6Z+9msGOgZZz3Ec/un52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCjkoW6 qCPw92EpiJ36kjuPvtdDMB8GA1UdIwQYMBaAFIFqR42G5+Ib8xeFELhYUyVYNDDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDA4QS9DMEY0RTg2NDc4 OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRodnpGNFVRdUZoVEpWZzBN TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dXcEhqWWJuNGh2ekY0VVF1RmhUSlZnME1PNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDA4QS9DMEY0RTg2NDc4OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRo dnpGNFVRdUZoVEpWZzBNTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfjIJdO8Xp7z98+tvFJDs40MZVYJVW5O2iAKCcOunl//6oPWaCxPJH 2wiHBsaVovGOkFmrAR2nsTtGu2wuKN0T6mWW/zbRPT3p2Gd/xGwqI9kqghqJHETV InIJCIk77lZqph0fGOfSgYo/B1gSVhtcZR2pP7sDscVdG36IudTmU3ZQ74rkrfPy A6hEdvkaODH1SXobKsjFWYSX5aKbzGPYBjK4vXpvwZbkjwEG9lC0uBdT3dCslIB1 yAlpTb87iNvCxQbOpxYYPSMnu1sRWk3MdNNqW9DNIa4VtQWX86KHtItRBJfk16R4 FGUD8k/eKsLVewqqiVpVx3wwKSo9e3FU -----END CERTIFICATE-----Generated at Mon Aug 11 04:13:07 2025 by rpki-client