$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft File: gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json) Hash identifier: e6woOZMoVEnHCx/sE2HdW9fjH20mY3xKqwHfGm+eBlU= Subject key identifier: A0:1A:62:B7:6A:0B:D0:B6:F0:91:FF:0B:A3:EF:C3:5C:5D:A8:20:FD Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88 Certificate issuer: /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft Manifest number: 0577 Signing time: Sat 26 Jul 2025 23:33:58 +0000 Manifest this update: Sat 26 Jul 2025 23:33:58 +0000 Manifest next update: Sat 02 Aug 2025 23:33:58 +0000 Files and hashes: 1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: KC8GPPhQJv7bdgPUiq9lzNrQKmbHK1afukJddq9PrIc=) 2: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: TE3s0G2x6gReIvykLHQ1D6r2CYQk8g9jtQHZlN8D244=) 3: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: evwQjea0SxB2bnXdb3qi3otan+J/1WyJKAiscqqxUSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 23:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88 Validity Not Before: Jul 26 23:33:58 2025 GMT Not After : Aug 2 23:33:58 2025 GMT Subject: CN=688565e6-9263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:17:8f:4b:03:71:76:cc:10:9f:41:46:36: 39:d5:e5:a6:1b:ac:74:06:95:0c:a9:60:ff:2a:ae: ea:04:e3:33:38:10:7d:63:d9:7d:07:9c:a4:a0:cd: 88:e4:13:53:ae:49:dd:d5:14:cb:a8:8b:d3:a0:ce: f2:1a:a6:80:75:50:c6:39:80:47:87:b2:49:06:bd: 8b:2e:11:52:23:d6:93:0d:c4:42:d2:63:a0:e1:68: 04:0f:83:87:6f:b8:b0:c0:a4:ad:9a:0d:9a:0f:32: 1c:f7:1f:b1:0c:44:44:8e:c0:2f:2a:a7:c4:89:f8: 59:07:bb:fe:8d:73:75:14:37:e4:2b:db:a0:a4:39: 54:a5:8d:4f:14:6f:e9:a1:a8:60:fb:0e:f2:1a:09: b8:6a:ea:1a:6c:83:a8:a0:77:25:dd:2b:0b:27:7e: 3e:2e:08:09:d2:16:fe:45:dd:11:70:ce:85:c0:92: e0:51:b7:f7:22:96:ea:80:65:6e:78:c6:7a:02:49: 22:fa:b6:ac:98:e0:5a:8e:27:51:8f:f8:1c:b8:fb: 59:a5:76:50:cb:f7:87:e6:21:60:27:18:bb:3f:07: 36:f5:03:16:be:d5:41:13:81:2b:19:f5:41:6d:0c: 88:f2:94:ca:5c:b3:4c:1a:3e:ca:6c:c0:fc:60:9e: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:62:B7:6A:0B:D0:B6:F0:91:FF:0B:A3:EF:C3:5C:5D:A8:20:FD X509v3 Authority Key Identifier: keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a8:ff:ce:fc:f3:b8:74:c7:3d:8e:0a:46:18:0e:dd:69:9f: f6:86:0c:29:a1:fc:3a:94:c2:f6:27:b9:48:34:b1:a3:f7:42: 5f:7c:e1:6f:f9:c2:6a:7e:a0:b9:c2:35:8a:4a:d1:8c:77:10: 43:6c:9e:59:c6:2e:b3:f3:65:7c:f0:9e:9f:d7:1d:a6:c2:c5: b7:67:f8:59:17:c1:0a:09:14:89:9e:60:d6:12:98:a0:63:b6: 45:9f:69:d9:d9:f1:2c:4a:1a:fe:fa:00:7d:5c:5b:ff:f7:bf: 83:79:2c:57:78:ee:7d:26:f2:7c:ee:88:75:f5:ec:e5:fa:78: d6:61:01:24:c9:9b:4b:9a:83:fb:bb:f9:c4:b9:5f:96:28:12: 49:b0:30:20:24:88:80:6e:13:2b:df:31:ae:fa:76:7d:27:11: db:f2:c8:c3:d6:0d:fa:85:bb:dc:ab:d1:2a:85:76:c4:2d:d6: a7:ff:cc:ef:c7:a1:a3:80:9d:4a:76:c3:e6:e1:8f:f6:23:04: 74:db:8c:84:c1:04:2a:74:2d:d6:cb:d3:72:a2:9a:12:b0:a2: 96:27:0d:2e:0e:ad:d9:d2:45:48:42:0e:7c:be:c4:79:91:34: 0d:98:ca:45:97:0a:fd:95:04:52:e0:e7:d6:f6:85:d7:02:a2: 87:f0:22:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE2RDIxMTAvBgNVBAUTKDgwOThBMUE0QTY1N0E3NzBBRkJENjZBNThEQURFMDE5 M0Y1QTFFODgwHhcNMjUwNzI2MjMzMzU4WhcNMjUwODAyMjMzMzU4WjAYMRYwFAYD VQQDEw02ODg1NjVlNi05MjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdYXj0sDcXbMEJ9BRjY51eWmG6x0BpUMqWD/Kq7qBOMzOBB9Y9l9B5ykoM2I 5BNTrknd1RTLqIvToM7yGqaAdVDGOYBHh7JJBr2LLhFSI9aTDcRC0mOg4WgED4OH b7iwwKStmg2aDzIc9x+xDEREjsAvKqfEifhZB7v+jXN1FDfkK9ugpDlUpY1PFG/p oahg+w7yGgm4auoabIOooHcl3SsLJ34+LggJ0hb+Rd0RcM6FwJLgUbf3IpbqgGVu eMZ6Akki+rasmOBajidRj/gcuPtZpXZQy/eH5iFgJxi7Pwc29QMWvtVBE4ErGfVB bQyI8pTKXLNMGj7KbMD8YJ7bRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAaYrdq C9C28JH/C6Pvw1xdqCD9MB8GA1UdIwQYMBaAFICYoaSmV6dwr71mpY2t4Bk/Wh6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTZEMi83RDU3QUVFRUVB OUMxMUVCQTMxMkE5MjZDNEY5QUUwMi9nSmlocEtaWHAzQ3Z2V2FsamEzZ0dUOWFI b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKaWhwS1pYcDNDdnZXYWxqYTNnR1Q5YUhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTZEMi83RDU3QUVFRUVBOUMxMUVCQTMxMkE5MjZDNEY5QUUwMi9nSmlocEtaWHAz Q3Z2V2FsamEzZ0dUOWFIb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqP/O/PO4dMc9jgpGGA7daZ/2hgwpofw6lML2J7lINLGj90JffOFv +cJqfqC5wjWKStGMdxBDbJ5Zxi6z82V88J6f1x2mwsW3Z/hZF8EKCRSJnmDWEpig Y7ZFn2nZ2fEsShr++gB9XFv/97+DeSxXeO59JvJ87oh19ezl+njWYQEkyZtLmoP7 u/nEuV+WKBJJsDAgJIiAbhMr3zGu+nZ9JxHb8sjD1g36hbvcq9EqhXbELdan/8zv x6GjgJ1KdsPm4Y/2IwR024yEwQQqdC3Wy9NyopoSsKKWJw0uDq3Z0kVIQg58vsR5 kTQNmMpFlwr9lQRS4OfW9oXXAqKH8CLS -----END CERTIFICATE-----Generated at Sun Jul 27 06:04:21 2025 by rpki-client