$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: cWz7GA/BC0aQ+Pmf8JhXTLiV+SzgiKE+210apsXVIjw= Subject key identifier: 7C:F1:B5:36:89:1A:55:1A:BD:B3:ED:41:2C:5F:CE:D6:58:05:A0:A0 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 09C1 Signing time: Sun 10 Aug 2025 20:01:21 +0000 Manifest this update: Sun 10 Aug 2025 20:01:20 +0000 Manifest next update: Sun 17 Aug 2025 20:01:20 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: S/83tiJuIPHTh3GXSkkN1adnZgX2ZJu+/hOhnk+CbKg=) 2: E09840C4D5B511EFB22A647DC4F9AE02.roa (hash: UUua9CtlmlNUMxfEXymhiloAwqTpKtC9fDGIWh1Bzk8=) 3: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: +YzJrYGnbGLCjVsOBK3rhph4HgKiBqVFBpU2hsaMvKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Aug 10 20:01:20 2025 GMT Not After : Aug 17 20:01:20 2025 GMT Subject: CN=6898fa91-ceea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:97:70:c2:56:44:b8:53:50:cf:7a:a6:94: 28:3b:aa:40:36:45:48:fe:72:c2:e0:01:e0:9e:1b: 6b:24:c0:bc:c0:b6:b6:95:d5:76:e6:52:d6:e8:08: 7a:a5:59:62:94:3c:2b:16:9a:9c:8d:7c:8d:54:33: 50:e9:93:9d:1b:fe:de:6e:47:ca:85:14:28:67:90: aa:49:f0:08:99:38:98:da:25:cd:9f:b4:38:4e:e5: 5d:66:99:c5:27:ae:7d:09:a9:a7:f3:c8:fb:60:8a: 48:0b:90:1c:7d:45:1c:e6:66:a7:7e:eb:69:bd:f2: a6:ba:56:0b:42:4c:76:e5:b8:3b:eb:ac:b1:ed:85: 2a:a5:b3:d3:5a:ef:15:20:fe:d2:17:f2:79:d3:08: 5b:e8:e0:3b:54:88:65:ec:f7:9e:04:9a:a5:5a:90: 81:56:28:c6:b5:33:26:79:2b:77:1e:1a:a0:56:ce: 59:b7:d5:5f:24:e7:b8:0c:2f:28:73:d9:0f:6f:c5: 01:7c:fc:d4:54:81:98:11:3b:69:0f:ba:cc:dd:1a: 6c:44:d1:33:38:76:49:c0:1d:1d:71:3e:45:68:8f: 06:6f:70:91:de:a4:87:13:1f:85:f4:c9:29:2d:0d: b8:f6:2b:60:85:70:18:8e:ad:40:31:1b:18:ff:a6: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F1:B5:36:89:1A:55:1A:BD:B3:ED:41:2C:5F:CE:D6:58:05:A0:A0 X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:18:2e:81:d1:a9:37:cb:71:13:1a:30:bc:ff:3f:01:ce:c8: c1:2d:6e:ec:99:6b:a7:55:23:cc:39:09:7c:a1:24:87:df:da: ed:ae:78:e8:05:44:08:c2:10:68:61:3f:af:a6:59:f5:d8:93: e3:ef:48:86:bd:2f:a5:6a:00:b4:0b:5c:58:5c:1d:c8:67:19: 1b:85:f9:c1:2d:3c:cf:9b:74:fb:6b:5d:b0:de:ed:c9:c4:fa: 94:15:7a:10:03:e9:2a:67:8a:f9:52:95:64:71:22:f8:16:65: e0:d0:9b:b5:62:89:ef:11:56:7d:0f:47:06:99:8e:0e:b5:0b: db:32:de:28:c0:8c:05:e8:48:09:15:00:7d:f9:58:b3:db:88: 6f:a9:20:c3:65:02:0f:3b:73:0a:fc:25:bc:07:85:e2:28:b3: 4e:f8:c3:7a:04:eb:5c:1d:ba:a9:9e:96:11:65:5f:69:5b:f8: cc:46:45:2b:e9:d0:1e:cb:d1:ca:b0:d5:c0:5a:65:00:bb:91: 45:be:b7:c8:d6:84:f6:b4:b3:ae:03:a8:bb:5b:27:45:9f:df: e4:ff:da:07:5b:8f:89:14:91:4e:0a:67:7c:29:d2:f0:89:8f: 18:8b:99:0a:c1:8d:c2:0c:52:99:f8:a7:d6:ae:a8:72:73:f5: 23:a2:5b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUwODEwMjAwMTIwWhcNMjUwODE3MjAwMTIwWjAYMRYwFAYD VQQDEw02ODk4ZmE5MS1jZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3qXcMJWRLhTUM96ppQoO6pANkVI/nLC4AHgnhtrJMC8wLa2ldV25lLW6Ah6 pVlilDwrFpqcjXyNVDNQ6ZOdG/7ebkfKhRQoZ5CqSfAImTiY2iXNn7Q4TuVdZpnF J659Camn88j7YIpIC5AcfUUc5manfutpvfKmulYLQkx25bg766yx7YUqpbPTWu8V IP7SF/J50whb6OA7VIhl7PeeBJqlWpCBVijGtTMmeSt3HhqgVs5Zt9VfJOe4DC8o c9kPb8UBfPzUVIGYETtpD7rM3RpsRNEzOHZJwB0dcT5FaI8Gb3CR3qSHEx+F9Mkp LQ249itghXAYjq1AMRsY/6aZ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzxtTaJ GlUavbPtQSxfztZYBaCgMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/GC6B0ak3y3ETGjC8/z8BzsjBLW7smWunVSPMOQl8oSSH39rtrnjo BUQIwhBoYT+vpln12JPj70iGvS+lagC0C1xYXB3IZxkbhfnBLTzPm3T7a12w3u3J xPqUFXoQA+kqZ4r5UpVkcSL4FmXg0Ju1YonvEVZ9D0cGmY4OtQvbMt4owIwF6EgJ FQB9+Viz24hvqSDDZQIPO3MK/CW8B4XiKLNO+MN6BOtcHbqpnpYRZV9pW/jMRkUr 6dAey9HKsNXAWmUAu5FFvrfI1oT2tLOuA6i7WydFn9/k/9oHW4+JFJFOCmd8KdLw iY8Yi5kKwY3CDFKZ+KfWrqhyc/UjoluH -----END CERTIFICATE-----Generated at Mon Aug 11 04:29:28 2025 by rpki-client