$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json) Hash identifier: iqiFDYheqDZXcMAc5fJ1Tzvj/Q/F4EwFKRdUOx425qI= Subject key identifier: 14:54:9A:D1:4E:F7:51:15:C9:E1:19:7B:96:8B:2C:EC:57:65:16:25 Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft Manifest number: 079C Signing time: Mon 04 Aug 2025 22:03:48 +0000 Manifest this update: Mon 04 Aug 2025 22:03:48 +0000 Manifest next update: Mon 11 Aug 2025 22:03:48 +0000 Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: raT2y4x2XhQmPziVtO3XPRTMTeUgRm+jvm+az3ISlq0=) 2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: +QmSQmsTCCd4yyTjh5mf70wyqAWPCaGTrX6lQ4meIO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Validity Not Before: Aug 4 22:03:48 2025 GMT Not After : Aug 11 22:03:48 2025 GMT Subject: CN=68912e44-a39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:41:c5:d3:a8:79:43:af:fd:58:06:59:8c: 5c:cb:da:eb:02:12:c6:01:91:6f:8a:09:c4:e4:07: ce:95:71:58:a1:a5:f5:71:08:c0:75:f4:d7:ea:ff: 3c:66:91:c6:09:3f:38:22:0d:17:3b:97:08:c3:f2: 85:29:ca:5b:fe:5e:e9:80:b4:fd:65:ee:7c:bf:a9: ac:e6:76:b4:1a:41:01:87:dc:4d:6d:ec:f1:b5:6b: 3c:11:41:ff:8d:22:17:aa:24:8f:7f:fe:0b:b8:24: 1d:05:03:e1:46:38:62:fa:fa:47:ef:9b:36:a0:4b: e8:80:cc:03:42:a8:a0:d6:48:ce:dd:32:95:5e:5d: b4:cf:b9:3f:d2:e5:7d:b9:f6:73:d7:4e:94:c9:56: 2d:bf:e4:09:b5:c9:d8:99:66:29:85:32:ab:d5:86: 41:9c:95:f5:45:12:e3:62:96:78:ee:96:40:0c:b4: 33:89:2c:7e:4c:62:09:be:50:05:be:24:c4:7d:98: 38:e0:a9:0f:f7:bc:7a:38:4f:46:09:45:c8:89:8c: 9e:60:31:ed:8c:a3:82:08:20:6c:bf:d6:db:1d:0c: e9:97:4e:f1:c2:f0:fa:76:58:d3:37:fd:8b:e1:b8: 70:62:e3:d2:53:b1:54:ae:3e:e6:75:41:da:c3:41: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:54:9A:D1:4E:F7:51:15:C9:E1:19:7B:96:8B:2C:EC:57:65:16:25 X509v3 Authority Key Identifier: keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:71:be:94:b0:c7:f4:83:75:c1:28:83:1f:a0:f2:5b:30:99: 43:6e:be:a4:c1:75:98:62:fe:ee:78:b0:30:0c:9e:31:dc:ba: dc:ea:85:76:c2:fe:23:4a:81:08:44:9a:46:a7:e5:fd:7d:06: 17:f9:24:0c:cd:36:df:89:86:11:e0:44:12:12:ec:be:3b:b5: ec:6b:23:cf:e3:df:5e:7f:5e:d3:ce:9c:2b:35:b5:ae:46:64: 61:ab:f7:96:d6:5d:f1:c9:30:f9:34:21:48:58:fc:56:92:8a: 78:1a:cb:99:bd:d2:fa:41:96:a8:5a:11:59:1c:2f:e3:8e:24: f6:1f:9b:91:c2:7f:f7:9e:b0:77:49:08:8e:4f:37:e6:d4:7a: e4:e6:77:60:bc:71:22:62:10:47:65:57:54:0a:f3:62:59:e8: c2:85:81:bf:de:e4:d9:df:ca:f8:2f:28:2c:f4:a9:03:e9:0d: be:2d:47:cb:43:b5:91:52:f2:ee:2f:11:b7:1a:8a:ec:63:46: f5:27:4f:a4:60:88:0d:b1:99:36:50:9d:d3:5b:ae:78:54:f1: c7:93:4d:98:4b:d2:ca:bd:2d:48:fe:fd:ac:46:ee:9f:9f:db: 5d:2e:74:46:1f:01:69:85:82:ca:0a:83:e6:26:94:b7:4c:8b: 65:65:b0:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy MUM0OTcwQ0IwHhcNMjUwODA0MjIwMzQ4WhcNMjUwODExMjIwMzQ4WjAYMRYwFAYD VQQDEw02ODkxMmU0NC1hMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FRBxdOoeUOv/VgGWYxcy9rrAhLGAZFvignE5AfOlXFYoaX1cQjAdfTX6v88 ZpHGCT84Ig0XO5cIw/KFKcpb/l7pgLT9Ze58v6ms5na0GkEBh9xNbezxtWs8EUH/ jSIXqiSPf/4LuCQdBQPhRjhi+vpH75s2oEvogMwDQqig1kjO3TKVXl20z7k/0uV9 ufZz106UyVYtv+QJtcnYmWYphTKr1YZBnJX1RRLjYpZ47pZADLQziSx+TGIJvlAF viTEfZg44KkP97x6OE9GCUXIiYyeYDHtjKOCCCBsv9bbHQzpl07xwvD6dljTN/2L 4bhwYuPSU7FUrj7mdUHaw0HjywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRUmtFO 91EVyeEZe5aLLOxXZRYlMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfcb6UsMf0g3XBKIMfoPJbMJlDbr6kwXWYYv7ueLAwDJ4x3Lrc6oV2 wv4jSoEIRJpGp+X9fQYX+SQMzTbfiYYR4EQSEuy+O7XsayPP499ef17TzpwrNbWu RmRhq/eW1l3xyTD5NCFIWPxWkop4GsuZvdL6QZaoWhFZHC/jjiT2H5uRwn/3nrB3 SQiOTzfm1Hrk5ndgvHEiYhBHZVdUCvNiWejChYG/3uTZ38r4Lygs9KkD6Q2+LUfL Q7WRUvLuLxG3GorsY0b1J0+kYIgNsZk2UJ3TW654VPHHk02YS9LKvS1I/v2sRu6f n9tdLnRGHwFphYLKCoPmJpS3TItlZbCg -----END CERTIFICATE-----Generated at Tue Aug 5 17:25:51 2025 by rpki-client