$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: deXipebbqOZlnUgfkgcBbzKAOCANTKPFmvEa7YDEiSo= Subject key identifier: C1:46:58:D8:01:CF:EF:4C:7E:92:23:65:93:0B:BB:9F:1C:70:F6:62 Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 4A Signing time: Sat 09 Aug 2025 08:02:12 +0000 Manifest this update: Sat 09 Aug 2025 08:02:11 +0000 Manifest next update: Sat 16 Aug 2025 08:02:11 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: rDXJlHU51MW0Js/FxJFJReG9Tv6D7wE3+rIM2myv4YY=) 2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=) 3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=) 4: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=) 5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=) 6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=) 7: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=) 8: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=) 9: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=) 10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: Aug 9 08:02:11 2025 GMT Not After : Aug 16 08:02:11 2025 GMT Subject: CN=68970084-d06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:90:8a:af:62:7a:93:89:88:ae:09:58:1a: 40:ee:0f:1e:0e:8b:93:ac:87:84:2b:c5:ac:4c:16: 8a:e2:78:de:6b:c3:42:90:67:8e:53:02:46:44:e0: 67:3c:83:a6:66:02:e2:ce:23:0a:b6:e8:57:b4:bc: 39:01:4d:49:32:68:db:9a:92:1c:9c:78:71:83:bd: ea:13:1b:2d:1c:73:84:2b:f9:52:fe:ed:96:9d:10: a9:71:dd:3a:b6:e3:69:e3:35:df:6c:ff:68:b7:79: 9a:db:ea:57:9d:35:14:89:ac:3e:df:df:79:72:15: fe:2c:8f:bb:e9:8b:6d:68:e2:64:78:c4:e1:50:4e: 94:03:c0:c4:a6:36:c9:22:a3:c8:0c:33:f3:4d:19: d5:24:6b:89:b4:31:f0:b9:b1:48:06:be:a9:84:48: 28:fe:ee:ab:c9:af:75:06:24:ab:2c:20:92:ae:ba: 4c:d7:54:c1:99:67:d4:2a:1a:de:9e:c3:15:b7:97: 2d:57:1c:2e:ff:da:10:80:64:49:d6:5b:7f:c5:3a: 91:e2:61:34:cf:8d:d5:e6:6c:7d:7b:1e:0a:5c:4a: 3d:66:ad:7c:70:2b:ce:3b:c2:51:72:52:2b:63:51: 87:c6:53:97:0b:a2:6b:74:59:4d:df:09:f7:08:59: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:46:58:D8:01:CF:EF:4C:7E:92:23:65:93:0B:BB:9F:1C:70:F6:62 X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2f:c4:93:a0:94:a6:9d:cc:c8:ab:c5:3a:0c:03:d5:0f:ab: 35:c1:a4:f1:a7:df:fc:97:8d:63:aa:04:65:22:8a:39:c2:b4: b3:28:71:40:23:0d:a4:e0:e1:dd:cf:c5:57:39:e6:93:a3:f8: 53:8e:0a:75:83:a8:3f:f7:9c:30:ca:21:7c:08:d5:08:9e:85: 75:7c:e2:81:80:f4:fa:e7:9c:85:cd:29:0e:7b:82:fa:34:30: db:4b:36:65:8f:11:31:d4:de:41:c5:fa:7e:5f:cd:2c:f0:7a: e4:05:2a:8e:09:ba:35:ac:6d:e5:2c:d8:63:15:45:c0:cb:f2: 2c:46:a2:ef:e0:6f:0c:56:3b:c4:ca:da:0f:df:37:d9:f0:07: bc:a9:4e:d9:29:cc:ad:c2:7c:3f:fe:b0:46:ba:57:27:71:01: 4c:67:aa:f5:04:fe:31:9e:e4:b5:01:69:11:78:10:03:eb:e1: 06:36:42:11:d4:0d:94:21:07:5d:55:70:d0:29:94:1d:34:c4: 4a:52:f5:d6:3b:35:48:aa:5a:7e:97:e4:0b:b7:3a:4e:a5:2c: 1a:2b:a9:c0:5f:4d:50:87:d1:f6:71:4b:fd:ee:b9:d2:7e:e9: e3:4e:bc:74:10:40:53:a5:05:86:08:1a:45:c5:fc:4b:f7:27: 6f:77:0e:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzRjExMC8GA1UEBRMoMTg5NjdEQ0RCNzI0QTg0QTcxNzExRTY3OEFBQjFEMkU3 MjIxNUQ2QzAeFw0yNTA4MDkwODAyMTFaFw0yNTA4MTYwODAyMTFaMBgxFjAUBgNV BAMTDTY4OTcwMDg0LWQwNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXOJCKr2J6k4mIrglYGkDuDx4Oi5Osh4QrxaxMForieN5rw0KQZ45TAkZE4Gc8 g6ZmAuLOIwq26Fe0vDkBTUkyaNuakhyceHGDveoTGy0cc4Qr+VL+7ZadEKlx3Tq2 42njNd9s/2i3eZrb6ledNRSJrD7f33lyFf4sj7vpi21o4mR4xOFQTpQDwMSmNski o8gMM/NNGdUka4m0MfC5sUgGvqmESCj+7qvJr3UGJKssIJKuukzXVMGZZ9QqGt6e wxW3ly1XHC7/2hCAZEnWW3/FOpHiYTTPjdXmbH17HgpcSj1mrXxwK847wlFyUitj UYfGU5cLomt0WU3fCfcIWYBdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwUZY2AHP 70x+kiNlkwu7nxxw9mIwHwYDVR0jBBgwFoAUGJZ9zbckqEpxcR5niqsdLnIhXWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDNGL0Q2ODRGQzJFMUE4 QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0paOXpiY2txRXB4Y1I1bmlxc2RMbkloWFd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDNGL0Q2ODRGQzJFMUE4QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVw eGNSNW5pcXNkTG5JaFhXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHovxJOglKadzMirxToMA9UPqzXBpPGn3/yXjWOqBGUiijnCtLMocUAj DaTg4d3PxVc55pOj+FOOCnWDqD/3nDDKIXwI1QiehXV84oGA9PrnnIXNKQ57gvo0 MNtLNmWPETHU3kHF+n5fzSzweuQFKo4JujWsbeUs2GMVRcDL8ixGou/gbwxWO8TK 2g/fN9nwB7ypTtkpzK3CfD/+sEa6VydxAUxnqvUE/jGe5LUBaRF4EAPr4QY2QhHU DZQhB11VcNAplB00xEpS9dY7NUiqWn6X5Au3Ok6lLBorqcBfTVCH0fZxS/3uudJ+ 6eNOvHQQQFOlBYYIGkXF/Ev3J293DvQ= -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:18 2025 by rpki-client