$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: tODykAtXLonLCidkXOfL1DAcYM3SvNSV8uTujB0dSwA= Subject key identifier: 05:B7:B7:36:E9:15:18:22:B1:8B:60:15:2A:04:6A:7C:FE:A3:C8:59 Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: A5 Signing time: Sat 19 Jul 2025 06:31:59 +0000 Manifest this update: Sat 19 Jul 2025 06:31:58 +0000 Manifest next update: Sat 26 Jul 2025 06:31:58 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: NfB+3mn/7Dtxicb9uHMkw0rB2vA9ixU9+I/rJll467M=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: 2xJjfpp98NtJEfsdZF7xdB6iZLc0XXycnGYFfCIk29I=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: cAiqdNWzTF0sxkzvHv6yM/PcMz/pHk5XzQwUuq8wOgo=) 4: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: SHadC7K9t4sf0FTRuN25Sqtx5daSfJ2m5VktpFS9BJc=) 5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: aNcYj3A/gGnj4dxbU3z5mV3zt63Nh4QrgMIUUabFzuw=) 6: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: 3FjaUGxyX9keX6h1j1EjjACKPn/PD276JgWOPNcm8Oo=) 7: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: he2Yg9YLqUGBktzqkNPe9zTZfzSefhfrBKHZ0mm0MXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Jul 19 06:31:58 2025 GMT Not After : Jul 26 06:31:58 2025 GMT Subject: CN=687b3bde-adde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:a5:54:be:d0:4d:9f:f4:a8:f5:b3:83:a5: 67:4a:01:14:1c:f8:27:c1:fa:3a:7b:06:f9:36:df: 9d:dc:5b:b1:b6:a1:62:54:d8:38:ca:85:3b:68:ae: 34:de:e1:2f:51:30:ae:9d:91:f0:4b:a2:d1:88:64: fd:b3:fe:71:a8:89:a0:ba:aa:96:25:88:bb:30:cb: 79:9e:28:dd:27:80:a3:67:3b:e7:9b:5c:04:f2:34: fb:82:19:12:38:00:c4:b0:b6:5c:7b:7f:57:f5:95: b2:aa:2d:11:9a:29:d6:19:0e:f5:68:11:85:e1:3e: bd:de:52:45:7d:b1:3b:80:fb:c0:47:32:8e:31:c8: b6:22:b6:5c:28:3f:cf:03:54:e2:f6:d8:85:27:c2: f3:41:36:b9:25:20:4e:31:bf:7c:cb:6f:02:51:0f: 70:e5:38:47:e3:4f:cf:19:66:a2:42:9c:37:97:f5: bf:6b:f0:3f:97:9d:68:1f:1a:bd:b5:97:37:40:79: 1e:de:73:dd:2d:aa:b0:a5:ab:8d:b7:82:e3:32:ab: 16:e3:6d:00:5f:87:b0:3b:46:ef:b3:5b:bc:94:77: 52:47:f6:cb:40:29:dd:a2:b6:82:db:bc:a3:3d:8f: 8a:ef:a8:1d:74:d5:2c:1e:4a:d1:af:c4:e1:91:63: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B7:B7:36:E9:15:18:22:B1:8B:60:15:2A:04:6A:7C:FE:A3:C8:59 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:74:8b:1c:68:45:15:94:ba:57:e4:c1:56:c6:18:d6:9d:26: 9b:ea:a9:a5:06:34:56:13:d1:39:52:70:3e:49:61:8e:16:bc: 75:f3:f9:b7:5f:f4:25:12:cd:ce:ec:60:4c:1e:d1:a6:57:46: 87:58:0d:b9:c1:9c:1e:1f:6d:af:15:1a:4a:57:a9:c4:56:33: d0:c6:bf:bd:87:0a:67:22:4b:84:54:58:8b:83:74:28:da:b2: 60:1e:de:d8:ec:38:4e:cb:bd:17:7d:23:db:e6:16:78:61:07: c4:2a:c7:fe:81:02:d4:1a:ae:06:7e:15:b5:c0:b8:c2:5e:67: 6d:e7:69:f6:53:dd:90:1f:5a:7a:25:54:e5:51:f3:86:10:d3: 8e:4d:23:aa:15:0b:1a:8d:31:f2:3b:e3:b7:8a:3e:e8:57:6f: 18:8d:cf:cf:e2:d9:b1:e2:8d:12:b9:39:94:9a:ab:a4:c6:fd: 40:8e:c0:f4:e7:6a:a8:56:da:f3:27:f5:3b:78:e6:bc:4d:92: 23:63:51:04:4c:b2:75:af:6f:a8:5f:a7:e5:7e:33:db:24:58: c6:23:c8:32:14:ca:c4:f2:36:44:51:81:76:ed:64:36:20:ca: d2:43:be:34:24:8e:75:d3:1d:23:c4:4c:6c:7d:54:52:bb:7f: 87:88:89:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUwNzE5MDYzMTU4WhcNMjUwNzI2MDYzMTU4WjAYMRYwFAYD VQQDEw02ODdiM2JkZS1hZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxymlVL7QTZ/0qPWzg6VnSgEUHPgnwfo6ewb5Nt+d3FuxtqFiVNg4yoU7aK40 3uEvUTCunZHwS6LRiGT9s/5xqImguqqWJYi7MMt5nijdJ4CjZzvnm1wE8jT7ghkS OADEsLZce39X9ZWyqi0RminWGQ71aBGF4T693lJFfbE7gPvARzKOMci2IrZcKD/P A1Ti9tiFJ8LzQTa5JSBOMb98y28CUQ9w5ThH40/PGWaiQpw3l/W/a/A/l51oHxq9 tZc3QHke3nPdLaqwpauNt4LjMqsW420AX4ewO0bvs1u8lHdSR/bLQCndoraC27yj PY+K76gddNUsHkrRr8ThkWOr/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW3tzbp FRgisYtgFSoEanz+o8hZMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5dIscaEUVlLpX5MFWxhjWnSab6qmlBjRWE9E5UnA+SWGOFrx18/m3 X/QlEs3O7GBMHtGmV0aHWA25wZweH22vFRpKV6nEVjPQxr+9hwpnIkuEVFiLg3Qo 2rJgHt7Y7DhOy70XfSPb5hZ4YQfEKsf+gQLUGq4GfhW1wLjCXmdt52n2U92QH1p6 JVTlUfOGENOOTSOqFQsajTHyO+O3ij7oV28Yjc/P4tmx4o0SuTmUmqukxv1AjsD0 52qoVtrzJ/U7eOa8TZIjY1EETLJ1r2+oX6flfjPbJFjGI8gyFMrE8jZEUYF27WQ2 IMrSQ740JI510x0jxExsfVRSu3+HiIn8 -----END CERTIFICATE-----Generated at Sun Jul 20 19:09:38 2025 by rpki-client