$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft File: -gfo6rqEcKil_kuhPnXZ5f6jOyc.mft (raw, json) Hash identifier: CN2zcqGN8TYipcR/2eNBdt/LRCZqS0SzvWL84z2wkLk= Subject key identifier: 0F:78:24:A5:D4:45:45:3C:4C:85:F4:12:87:07:E3:AD:85:0F:C4:6B Authority key identifier: FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 Certificate issuer: /CN=A91F9FA2/serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft Manifest number: 09D9 Signing time: Sun 10 Aug 2025 19:57:22 +0000 Manifest this update: Sun 10 Aug 2025 19:57:21 +0000 Manifest next update: Sun 17 Aug 2025 19:57:21 +0000 Files and hashes: 1: -gfo6rqEcKil_kuhPnXZ5f6jOyc.crl (hash: C91YXMTKYSHfz3OmC3Yi54IyD4KFzElkb9ZRJG3DIWk=) 2: 0893031C846611EA9B99E043C4F9AE02.roa (hash: 3hay+KNg/2l74ymUeo3rJ7DbBbo6k73NfQvBnuqkfBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FA2, serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Validity Not Before: Aug 10 19:57:21 2025 GMT Not After : Aug 17 19:57:21 2025 GMT Subject: CN=6898f9a2-fa85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:b1:65:1e:0c:3d:0d:92:93:33:05:26:e6: 1a:92:cd:cf:d7:1a:0a:73:b0:c9:27:45:3e:50:90: 95:19:b9:8b:09:62:9a:a9:40:b7:1b:22:38:2c:11: 56:d9:55:da:4b:b5:01:dd:78:53:2a:59:34:6f:15: 29:5b:39:8f:d0:58:47:1a:e5:86:93:8f:7f:5d:e6: 52:bb:2e:9a:0d:58:93:c2:dd:6b:e0:41:3a:77:cf: 5f:df:de:cf:cd:90:10:55:a6:1a:87:cd:23:66:b6: 26:54:d6:d9:fd:3c:6a:c5:a8:a0:24:e5:68:21:3e: f2:25:80:54:93:11:3d:48:34:a0:c1:6d:52:0b:85: 6b:56:38:8d:c5:55:ba:2c:c6:6f:8b:ac:71:2b:40: 1f:cd:86:b4:0e:71:ea:59:e0:73:6c:ef:b6:c5:f2: a8:2b:e3:20:ce:9b:b2:73:ee:8b:4f:b3:3d:c1:f5: 9a:31:a5:0f:79:4f:bd:2c:38:e7:58:87:09:fc:d4: 3f:58:0f:78:70:fc:9d:1d:73:9b:5f:7f:af:5e:fb: 54:30:87:39:2f:34:7a:82:85:1b:3c:bd:16:0f:9f: 05:6b:87:48:94:dc:c4:5f:02:55:63:f4:68:59:1e: ea:16:bd:d8:21:ee:03:8d:87:e0:33:57:a9:5b:4f: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:78:24:A5:D4:45:45:3C:4C:85:F4:12:87:07:E3:AD:85:0F:C4:6B X509v3 Authority Key Identifier: keyid:FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ad:7a:e5:27:96:60:2b:12:25:1e:08:2c:da:95:6e:98:e3: fd:aa:0d:0b:f6:dd:46:5b:f6:9f:68:17:ee:79:6a:22:4c:86: 7d:1e:75:45:dc:97:23:3c:c9:97:73:4c:f3:4b:62:c2:7e:9c: 6b:a0:4b:33:b4:be:08:02:b1:c3:9a:ac:ed:8e:9d:29:3d:20: 95:02:16:cb:da:87:d8:c5:71:4c:b7:81:e5:c4:cb:00:d2:7d: 87:8c:a4:a3:eb:60:a2:8c:8f:f8:cd:35:b2:c0:6b:bd:f2:07: 81:45:3b:60:7b:25:61:26:ef:20:cc:e6:01:14:e0:93:c2:9d: 78:6c:a5:51:bd:2f:d1:d3:7b:f9:f5:75:31:a1:a5:43:c8:d1: a4:42:21:5a:21:24:a4:4b:57:bc:9a:77:ea:07:35:84:60:37: d9:f5:ee:98:56:72:d8:34:5f:76:58:b9:5e:94:75:b1:26:ca: 64:cb:fb:4a:ec:23:d4:fb:25:23:c1:f1:2f:e3:41:fb:55:f0: db:fa:e7:71:de:5b:08:9d:b3:f9:23:60:69:f5:c6:d8:1d:16: 52:ee:59:fc:ba:81:e8:b9:b9:3a:80:c4:e1:ce:ef:ea:97:a1: b0:8f:b9:6e:18:54:b3:ff:c2:34:c4:1f:a9:98:4f:93:69:8c: af:02:ca:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQTIxMTAvBgNVBAUTKEZBMDdFOEVBQkE4NDcwQThBNUZFNEJBMTNFNzVEOUU1 RkVBMzNCMjcwHhcNMjUwODEwMTk1NzIxWhcNMjUwODE3MTk1NzIxWjAYMRYwFAYD VQQDEw02ODk4ZjlhMi1mYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZKxZR4MPQ2SkzMFJuYaks3P1xoKc7DJJ0U+UJCVGbmLCWKaqUC3GyI4LBFW 2VXaS7UB3XhTKlk0bxUpWzmP0FhHGuWGk49/XeZSuy6aDViTwt1r4EE6d89f397P zZAQVaYah80jZrYmVNbZ/TxqxaigJOVoIT7yJYBUkxE9SDSgwW1SC4VrVjiNxVW6 LMZvi6xxK0AfzYa0DnHqWeBzbO+2xfKoK+Mgzpuyc+6LT7M9wfWaMaUPeU+9LDjn WIcJ/NQ/WA94cPydHXObX3+vXvtUMIc5LzR6goUbPL0WD58Fa4dIlNzEXwJVY/Ro WR7qFr3YIe4DjYfgM1epW0/TCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA94JKXU RUU8TIX0EocH462FD8RrMB8GA1UdIwQYMBaAFPoH6Oq6hHCopf5LoT512eX+ozsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZBMi8xQzg4QjAzQTg0 NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNLaWxfa3VoUG5YWjVmNmpP eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nZm82cnFFY0tpbF9rdWhQblhaNWY2ak95Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZBMi8xQzg4QjAzQTg0NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNL aWxfa3VoUG5YWjVmNmpPeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrXrlJ5ZgKxIlHggs2pVumOP9qg0L9t1GW/afaBfueWoiTIZ9HnVF 3JcjPMmXc0zzS2LCfpxroEsztL4IArHDmqztjp0pPSCVAhbL2ofYxXFMt4HlxMsA 0n2HjKSj62CijI/4zTWywGu98geBRTtgeyVhJu8gzOYBFOCTwp14bKVRvS/R03v5 9XUxoaVDyNGkQiFaISSkS1e8mnfqBzWEYDfZ9e6YVnLYNF92WLlelHWxJspky/tK 7CPU+yUjwfEv40H7VfDb+udx3lsInbP5I2Bp9cbYHRZS7ln8uoHoubk6gMThzu/q l6Gwj7luGFSz/8I0xB+pmE+TaYyvAsqI -----END CERTIFICATE-----Generated at Mon Aug 11 07:46:12 2025 by rpki-client