$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: eRXZArJUl7f8laIAxcyxy0W5fBV8hNoo+AvR7Om1Zo4= Subject key identifier: 8A:44:CB:CD:3A:A1:FF:CF:62:76:67:1A:69:67:1F:40:88:51:90:53 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 52 Signing time: Sat 09 Aug 2025 07:47:12 +0000 Manifest this update: Sat 09 Aug 2025 07:47:12 +0000 Manifest next update: Sat 16 Aug 2025 07:47:12 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: 7I9/AsomiWeSbFYM3XLNcLmyfVwaU5M/rYwdrBYwSik=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: Aug 9 07:47:12 2025 GMT Not After : Aug 16 07:47:12 2025 GMT Subject: CN=6896fd00-8de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:55:57:ec:1c:8b:dc:55:54:e1:28:0a:cd:11: 60:b2:28:fd:a8:ba:eb:59:18:48:9c:fb:9c:8f:0d: fb:87:c3:5d:8b:f5:a3:b6:15:f1:f3:af:5e:07:93: 78:c7:07:86:3a:af:84:c9:06:b0:4b:80:f7:8d:ab: 12:33:40:cb:45:96:82:ca:26:eb:ce:5c:52:d9:b4: 20:4f:ca:3c:92:90:79:18:76:35:24:e7:b6:ed:c5: 0c:f5:83:b2:e5:37:72:21:a7:ee:8d:41:7b:b7:15: 94:b8:77:8d:56:87:d5:dd:f5:da:42:c6:12:88:17: 5c:f2:2f:de:d5:c5:bd:7d:7c:1c:c0:b7:c6:03:60: f4:fc:bc:cf:af:2f:65:cc:d0:85:19:dd:c4:29:4a: 35:71:a7:89:4a:50:23:54:8c:97:28:b0:eb:ef:be: e4:6d:36:4c:97:61:df:6f:d7:e1:9a:7f:94:35:d5: 88:cf:ec:c6:e9:e8:7f:f5:72:2b:42:eb:5d:0a:1f: 17:b0:5f:78:45:88:ef:52:ae:a8:7f:b0:f0:da:db: ee:0e:72:2f:c6:51:9a:a2:7c:70:e4:24:f3:0f:28: 22:af:61:fa:8b:85:70:bb:76:4c:b5:49:0e:4e:ef: 13:5f:ef:c3:1d:49:48:b7:48:bd:b7:75:76:4d:81: 80:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:44:CB:CD:3A:A1:FF:CF:62:76:67:1A:69:67:1F:40:88:51:90:53 X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d9:09:79:47:1b:f9:f2:87:60:55:f2:31:8c:65:f1:4e:5b: 74:92:97:76:4a:47:05:22:d9:c8:6c:86:0f:c7:4d:dc:d1:a9: 0a:dc:00:3c:99:3a:0f:b6:e7:da:47:3c:99:4f:8a:46:e5:b3: fa:91:03:ae:49:69:23:3f:e1:ac:44:02:d3:dd:0a:db:4f:b3: ee:2b:6d:80:f8:46:f6:d3:f0:31:95:96:86:79:78:a8:e6:30: ae:e4:d1:e1:81:ff:d1:fe:71:78:f3:15:3a:2f:41:4f:8d:e9: 6c:42:e1:b3:10:aa:77:d0:1b:39:5e:04:b1:ef:2c:f6:eb:f9: 1a:b2:e4:6c:be:96:3f:49:aa:fe:4c:c6:9b:b5:a2:54:07:62: fb:7f:1f:5b:bb:90:f8:36:2e:84:18:39:22:59:3f:d8:f4:f4: 07:47:05:1b:06:92:4c:6f:a0:4b:e3:b8:6a:d5:17:03:53:08: bb:16:5a:7d:1e:cc:a2:43:a0:5a:37:13:c1:7d:5e:fc:be:c3: d9:e7:d6:ff:7e:66:46:43:bf:ac:c7:9e:3f:28:31:18:4f:2d: 5d:d2:e0:93:4b:f4:8c:42:89:da:ce:f7:0c:d5:f0:a2:c3:1b: 2b:78:62:eb:99:a4:7c:dd:07:0e:dc:b2:4e:c3:f4:e6:67:02: 9b:be:e5:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTA4MDkwNzQ3MTJaFw0yNTA4MTYwNzQ3MTJaMBgxFjAUBgNV BAMTDTY4OTZmZDAwLThkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqVVfsHIvcVVThKArNEWCyKP2ouutZGEic+5yPDfuHw12L9aO2FfHzr14Hk3jH B4Y6r4TJBrBLgPeNqxIzQMtFloLKJuvOXFLZtCBPyjySkHkYdjUk57btxQz1g7Ll N3Ihp+6NQXu3FZS4d41Wh9Xd9dpCxhKIF1zyL97Vxb19fBzAt8YDYPT8vM+vL2XM 0IUZ3cQpSjVxp4lKUCNUjJcosOvvvuRtNkyXYd9v1+Gaf5Q11YjP7Mbp6H/1citC 610KHxewX3hFiO9Srqh/sPDa2+4Oci/GUZqifHDkJPMPKCKvYfqLhXC7dky1SQ5O 7xNf78MdSUi3SL23dXZNgYAFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUikTLzTqh /89idmcaaWcfQIhRkFMwHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RURFLzU5MDREOTcwRkI1QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1D SWFPWW5VZ29hRFlxSDhFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjZCXlHG/nyh2BV8jGMZfFOW3SSl3ZKRwUi2chshg/HTdzRqQrcADyZ Og+259pHPJlPikbls/qRA65JaSM/4axEAtPdCttPs+4rbYD4RvbT8DGVloZ5eKjm MK7k0eGB/9H+cXjzFTovQU+N6WxC4bMQqnfQGzleBLHvLPbr+Rqy5Gy+lj9Jqv5M xpu1olQHYvt/H1u7kPg2LoQYOSJZP9j09AdHBRsGkkxvoEvjuGrVFwNTCLsWWn0e zKJDoFo3E8F9Xvy+w9nn1v9+ZkZDv6zHnj8oMRhPLV3S4JNL9IxCidrO9wzV8KLD Gyt4YuuZpHzdBw7csk7D9OZnApu+5VY= -----END CERTIFICATE-----Generated at Sun Aug 10 21:04:42 2025 by rpki-client