$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json) Hash identifier: pcKufJuJ9UiIXL0dl9tBlpn+VUCrM9Jql90IN61Ka+Y= Subject key identifier: C4:2E:F7:69:6E:51:82:E3:14:30:CC:EA:1F:A3:40:62:7E:FE:44:08 Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft Manifest number: 57 Signing time: Wed 23 Jul 2025 07:36:35 +0000 Manifest this update: Wed 23 Jul 2025 07:36:35 +0000 Manifest next update: Wed 30 Jul 2025 07:36:35 +0000 Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: E1HkuWHlJhDFpXyLqJpf/zfbvKaKWwB/7wMtAAzYarM=) 2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: aQCWDBoOh5osM5C7MBD0kh6o6WsN7hx2kjcWDkx53es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Validity Not Before: Jul 23 07:36:35 2025 GMT Not After : Jul 30 07:36:35 2025 GMT Subject: CN=68809103-1923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:71:03:68:c0:31:7d:e1:39:7d:e7:d4:e7: 4f:f2:63:69:ca:a8:81:bd:e9:33:87:61:20:51:f7: eb:74:b1:f8:c7:5b:8d:d3:ba:3c:1d:9d:70:68:60: 08:35:c4:f6:bb:77:de:f0:39:64:fd:8f:04:23:a6: 99:1f:c5:d3:33:6a:71:97:b8:25:23:3f:2c:05:71: af:8c:16:cc:eb:7c:83:8a:ea:da:23:e8:56:dc:eb: 92:bc:4f:fe:d0:8b:f9:3a:76:33:9b:53:31:2b:4e: 6a:a0:0f:79:27:70:fa:f9:78:0e:4b:4d:c6:e7:83: e4:15:61:fd:a5:e3:a7:4c:65:fb:21:79:66:11:02: 12:18:bf:d2:93:bc:98:82:16:83:fb:18:f8:a6:20: a9:96:15:35:ea:f6:e1:07:e2:7f:a4:81:47:85:42: a3:1c:8a:e8:42:c4:8f:7b:b7:32:9a:2f:c3:09:4a: 7f:1c:81:53:2a:1c:62:f5:8c:cd:e1:c1:15:39:3a: 97:7e:0d:8d:e9:0f:0e:0e:bd:f6:df:b3:33:79:70: 13:35:9c:c5:74:4a:41:4c:7a:ab:2b:70:be:16:a3: b5:6e:13:88:7b:20:f5:6d:c6:15:0d:15:63:dc:8b: ab:41:a6:fe:d4:41:57:a5:05:12:12:97:a1:54:b0: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:F7:69:6E:51:82:E3:14:30:CC:EA:1F:A3:40:62:7E:FE:44:08 X509v3 Authority Key Identifier: keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1e:66:c6:d4:11:3a:4b:e5:a6:36:5d:87:47:ca:82:9e:cf: a5:2f:3f:45:78:0e:38:a2:f7:83:04:22:9b:e3:f1:f9:8e:8f: 1a:42:9b:6f:33:56:e4:11:53:08:35:dd:7b:1b:42:02:48:e3: 21:a3:a3:84:07:d7:2f:37:2d:e8:c3:35:29:f7:e8:ed:43:85: 68:a1:bd:f6:84:ec:25:98:45:48:6d:dc:dc:04:55:c7:0c:71: 7a:45:4e:a4:81:f8:0e:44:a6:50:e7:cd:1e:ba:a3:e9:ab:77: 33:50:7d:ef:0c:60:e7:95:3e:b9:76:8d:1c:05:90:ca:a8:58: 3e:e6:3a:30:cf:d0:f7:94:d0:1e:f6:e7:d2:55:ec:32:91:da: 5b:f4:a0:7a:b7:af:17:3d:dd:be:a3:32:7c:89:a2:45:b6:92: f8:13:e5:98:3d:e5:ed:a8:7d:e1:5e:f0:c5:35:da:58:87:03: 35:27:99:a5:7e:3a:50:2d:0b:59:5b:2f:17:bc:e2:e3:45:e8: 85:65:8d:51:ca:ef:57:b1:23:2b:39:2b:65:d2:e4:76:a1:19: 8d:88:e4:bf:65:f0:9a:0b:32:c2:b3:b9:09:d3:7c:6b:69:90: bd:ca:59:5a:f0:7b:75:ef:c6:fd:d5:93:d9:47:a8:c5:2c:57: 05:52:92:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEE0MjExMC8GA1UEBRMoODBCMThCODFENDdCNjE3NzEzMDRFMEY3NjEwRDExQTdD MzQwNjEyMzAeFw0yNTA3MjMwNzM2MzVaFw0yNTA3MzAwNzM2MzVaMBgxFjAUBgNV BAMTDTY4ODA5MTAzLTE5MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2cnEDaMAxfeE5fefU50/yY2nKqIG96TOHYSBR9+t0sfjHW43TujwdnXBoYAg1 xPa7d97wOWT9jwQjppkfxdMzanGXuCUjPywFca+MFszrfIOK6toj6Fbc65K8T/7Q i/k6djObUzErTmqgD3kncPr5eA5LTcbng+QVYf2l46dMZfsheWYRAhIYv9KTvJiC FoP7GPimIKmWFTXq9uEH4n+kgUeFQqMciuhCxI97tzKaL8MJSn8cgVMqHGL1jM3h wRU5Opd+DY3pDw4OvfbfszN5cBM1nMV0SkFMeqsrcL4Wo7VuE4h7IPVtxhUNFWPc i6tBpv7UQVelBRISl6FUsMzLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxC73aW5R guMUMMzqH6NAYn7+RAgwHwYDVR0jBBgwFoAUgLGLgdR7YXcTBOD3YQ0Rp8NAYSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QTQyLzFGQjBGNjc2RUE4 QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhjVEJPRDNZUTBScDhOQVlT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0xHTGdkUjdZWGNUQk9EM1lRMFJwOE5BWVNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 QTQyLzFGQjBGNjc2RUE4QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhj VEJPRDNZUTBScDhOQVlTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIseZsbUETpL5aY2XYdHyoKez6UvP0V4Djii94MEIpvj8fmOjxpCm28z VuQRUwg13XsbQgJI4yGjo4QH1y83LejDNSn36O1DhWihvfaE7CWYRUht3NwEVccM cXpFTqSB+A5EplDnzR66o+mrdzNQfe8MYOeVPrl2jRwFkMqoWD7mOjDP0PeU0B72 59JV7DKR2lv0oHq3rxc93b6jMnyJokW2kvgT5Zg95e2ofeFe8MU12liHAzUnmaV+ OlAtC1lbLxe84uNF6IVljVHK71exIys5K2XS5HahGY2I5L9l8JoLMsKzuQnTfGtp kL3KWVrwe3Xvxv3Vk9lHqMUsVwVSkrU= -----END CERTIFICATE-----Generated at Wed Jul 23 12:21:21 2025 by rpki-client