$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: J8As9CjCpmVmSkMObBb4cBETb2phXfnysvMTbBb8hgo= Subject key identifier: 21:FC:EB:15:27:00:D8:F6:27:49:C7:37:F0:75:DC:05:AB:F1:84:3B Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 080F Signing time: Fri 18 Jul 2025 21:10:30 +0000 Manifest this update: Fri 18 Jul 2025 21:10:30 +0000 Manifest next update: Fri 25 Jul 2025 21:10:30 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: nDhlpa2VqK8Z1seujRlKA+mXA3KqZwi+9BBA775YfJI=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Jul 18 21:10:30 2025 GMT Not After : Jul 25 21:10:30 2025 GMT Subject: CN=687ab846-69ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:ce:32:73:b9:ee:13:70:f1:32:ae:59:88: 9b:20:54:5e:c1:0c:fd:95:e5:4a:eb:40:c4:6e:92: 93:eb:b0:6e:8d:05:11:d2:48:d2:b4:6a:a6:6f:44: 75:0d:c0:85:e7:81:60:f3:50:cc:e1:54:ce:f0:f5: 87:de:8f:5b:eb:7f:ea:49:f2:4c:83:15:20:c4:c1: be:16:ab:a0:08:80:87:ff:e5:98:07:7a:c5:1d:07: ca:4c:88:3c:69:9c:6b:8f:74:f0:ed:a7:fc:0d:b2: 07:1f:ad:14:0b:c4:22:d5:8c:e4:32:19:ae:23:7a: 69:c1:f2:23:74:60:de:ed:b7:5a:4a:ac:6c:82:df: 53:7a:80:c4:2d:09:aa:6c:fd:97:5f:f2:fd:39:0e: 6a:ea:e2:fc:47:97:19:3b:e4:eb:03:af:13:37:6f: 3f:72:e7:97:14:11:53:00:5a:a7:e7:a1:f8:62:f8: d9:2c:b1:f8:b4:1a:b3:67:82:3c:32:37:6f:6a:e9: c4:78:26:27:62:2a:d0:ed:05:e0:f1:46:47:aa:14: 70:f4:18:b6:fa:0e:11:c1:e4:39:30:ae:61:da:e3: 5a:d9:12:be:36:46:8f:e5:70:e8:9f:1e:95:fd:1f: f0:12:70:17:fe:0c:89:a3:dd:cf:cd:9b:94:ab:93: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:EB:15:27:00:D8:F6:27:49:C7:37:F0:75:DC:05:AB:F1:84:3B X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:88:af:96:cc:0f:3d:57:43:f8:5b:25:09:a8:e4:75:70:b7: cf:72:73:00:12:e6:47:dd:db:52:1b:a1:ca:ca:d3:58:de:14: b6:c9:5b:78:a9:6f:af:b7:d7:a4:24:d0:0e:66:7a:06:6d:83: 2a:e0:80:a4:7c:cb:80:27:56:2a:89:76:55:25:58:d0:86:08: f6:c3:91:c5:ab:1f:46:e8:84:6f:9f:89:19:8d:79:91:cb:05: 98:b4:50:2d:c5:38:a3:d2:99:b5:aa:38:be:29:7f:84:0e:1e: 6e:58:df:ea:cd:0d:51:92:e5:68:5b:09:36:1c:80:6b:e1:13: d6:0b:53:d4:05:cb:cb:38:45:64:18:30:15:e1:59:73:ae:ab: a9:38:6a:4e:83:ab:79:bd:f4:30:67:aa:7d:56:41:82:e2:15: 74:f3:86:9e:ce:f4:7c:2a:4f:0e:1c:62:a2:e4:db:56:60:b6: 72:15:3a:0e:a1:1b:cf:93:88:48:2a:6c:84:0a:81:d3:70:ca: e7:90:27:3a:6e:84:d9:96:db:d5:1b:49:c8:59:af:ea:e7:cb: ad:43:20:f5:26:9d:c6:fe:05:1a:b4:93:6d:bf:3e:d9:dd:4a: 15:11:a9:e1:75:73:41:09:e6:e3:03:85:e7:a6:35:8f:e6:08: bc:61:df:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwNzE4MjExMDMwWhcNMjUwNzI1MjExMDMwWjAYMRYwFAYD VQQDEw02ODdhYjg0Ni02OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8vOMnO57hNw8TKuWYibIFRewQz9leVK60DEbpKT67BujQUR0kjStGqmb0R1 DcCF54Fg81DM4VTO8PWH3o9b63/qSfJMgxUgxMG+FqugCICH/+WYB3rFHQfKTIg8 aZxrj3Tw7af8DbIHH60UC8Qi1YzkMhmuI3ppwfIjdGDe7bdaSqxsgt9TeoDELQmq bP2XX/L9OQ5q6uL8R5cZO+TrA68TN28/cueXFBFTAFqn56H4YvjZLLH4tBqzZ4I8 MjdvaunEeCYnYirQ7QXg8UZHqhRw9Bi2+g4RweQ5MK5h2uNa2RK+NkaP5XDonx6V /R/wEnAX/gyJo93PzZuUq5ORjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCH86xUn ANj2J0nHN/B13AWr8YQ7MB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCiK+WzA89V0P4WyUJqOR1cLfPcnMAEuZH3dtSG6HKytNY3hS2yVt4 qW+vt9ekJNAOZnoGbYMq4ICkfMuAJ1YqiXZVJVjQhgj2w5HFqx9G6IRvn4kZjXmR ywWYtFAtxTij0pm1qji+KX+EDh5uWN/qzQ1RkuVoWwk2HIBr4RPWC1PUBcvLOEVk GDAV4VlzrqupOGpOg6t5vfQwZ6p9VkGC4hV084aezvR8Kk8OHGKi5NtWYLZyFToO oRvPk4hIKmyECoHTcMrnkCc6boTZltvVG0nIWa/q58utQyD1Jp3G/gUatJNtvz7Z 3UoVEanhdXNBCebjA4XnpjWP5gi8Yd9j -----END CERTIFICATE-----Generated at Sun Jul 20 03:47:33 2025 by rpki-client