$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: aIDsLfv3DaHURnim2QDkNVel7KdhJGN0azS5UczcnCY= Subject key identifier: E5:D3:94:DF:CB:C7:96:9C:F1:F9:28:C7:06:B5:F6:A2:F1:6C:52:4A Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0D3C Signing time: Sat 06 Sep 2025 18:09:30 +0000 Manifest this update: Sat 06 Sep 2025 18:09:30 +0000 Manifest next update: Sat 13 Sep 2025 18:09:30 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: JKsJmsLd3GMG5g/vhhsIM25KmZIkw3EbkNU/UAJCh7M=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: VZ24W4uKwM60qRJ5vfKCX9lh+SGHmx0HfVlijTJVzIY=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: 4yWetI8VRw7mXlPSVbHYiXd6wjj+BvrR9fES4qn/WNo=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: DgvkkBXnQUs6910aIZGV/GX1Y7PZj78ZOyie/aItMGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Sep 6 18:09:30 2025 GMT Not After : Sep 13 18:09:30 2025 GMT Subject: CN=68bc78da-09bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:70:4c:13:a7:f5:69:e8:c4:33:e0:a3:93: 59:5b:2c:af:e8:07:3b:95:b7:2a:a7:f6:b8:05:8a: 24:98:31:c7:82:03:ea:3f:dc:a4:ed:d3:12:88:7a: 10:ff:a3:7e:2b:77:23:cd:46:e1:dc:58:b1:fd:59: 64:96:0c:a9:fa:ef:e8:24:72:da:c4:29:81:47:3f: db:b3:38:51:99:87:85:1e:82:33:f1:2d:2a:31:e5: 6c:78:f5:01:5e:df:41:d7:f8:e8:7d:de:33:b9:72: 05:11:57:12:65:0b:91:be:8b:f4:5c:dc:eb:3c:f2: 53:9e:76:05:60:93:f6:8b:b1:60:ba:e5:cf:2c:bd: 96:c4:52:61:a4:e1:cf:b2:1a:bd:c1:bf:fc:58:5d: 0b:47:5f:07:69:ef:48:d0:66:94:e4:81:b3:9c:54: 72:ff:81:5b:61:b0:b8:0c:6f:85:3c:9f:7e:af:c0: 39:5a:fe:95:2c:f3:1d:db:f6:b7:15:af:3f:f2:3c: bc:e8:c6:6b:71:02:ef:aa:d5:d5:87:ef:c2:9a:b9: 49:8d:0a:be:f2:11:42:8b:f8:ca:1b:c6:2d:cc:dd: f4:86:97:05:80:48:06:cc:63:9b:60:85:5c:a2:f2: dd:cb:eb:57:fc:28:70:68:8b:c0:1c:14:a2:67:8b: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D3:94:DF:CB:C7:96:9C:F1:F9:28:C7:06:B5:F6:A2:F1:6C:52:4A X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:5a:66:74:48:d3:44:54:79:01:77:de:87:b7:ec:0b:ef:14: db:25:fb:ec:ab:4e:59:8b:4e:91:d2:bb:10:85:88:a5:df:c8: a2:c4:8d:5d:1d:93:31:b9:d3:71:94:be:a3:4d:3a:e9:dd:57: fa:80:a8:35:3e:f1:50:bd:fb:28:0c:23:e9:1e:bd:57:ff:e3: 88:5c:f9:9d:6e:ef:04:76:94:75:74:7a:91:0b:c6:b4:df:2c: ed:e2:3f:a9:93:53:06:45:5f:45:bd:52:e4:4c:16:4b:af:ac: 51:76:97:f9:e1:d5:91:50:da:94:7a:29:13:59:07:b8:cb:97: e7:7d:29:a0:c4:f6:8a:45:ff:44:d3:7b:7d:ad:e0:e6:1f:4e: 59:bd:23:cc:09:07:53:3e:3a:ac:f4:ac:56:1d:b7:5c:b4:9e: b1:74:c9:87:2a:23:1c:fa:05:0c:26:5e:73:c3:a8:eb:1b:33: 8c:da:b5:69:ba:78:4b:28:21:cd:e2:84:3d:17:a6:8a:d0:bd: 89:32:ce:c9:d6:1b:c7:b6:98:4c:b0:e5:00:e8:20:cb:de:aa: 2b:7b:8e:47:dd:d6:91:4d:e0:f2:60:91:16:7c:c3:b3:7c:43: a2:b8:a7:c6:95:a9:91:70:e4:39:7c:47:d9:9e:16:b5:8b:f4: 7f:50:28:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwOTA2MTgwOTMwWhcNMjUwOTEzMTgwOTMwWjAYMRYwFAYD VQQDEw02OGJjNzhkYS0wOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcRwTBOn9WnoxDPgo5NZWyyv6Ac7lbcqp/a4BYokmDHHggPqP9yk7dMSiHoQ /6N+K3cjzUbh3Fix/Vlklgyp+u/oJHLaxCmBRz/bszhRmYeFHoIz8S0qMeVsePUB Xt9B1/jofd4zuXIFEVcSZQuRvov0XNzrPPJTnnYFYJP2i7FguuXPLL2WxFJhpOHP shq9wb/8WF0LR18Hae9I0GaU5IGznFRy/4FbYbC4DG+FPJ9+r8A5Wv6VLPMd2/a3 Fa8/8jy86MZrcQLvqtXVh+/CmrlJjQq+8hFCi/jKG8YtzN30hpcFgEgGzGObYIVc ovLdy+tX/ChwaIvAHBSiZ4vaEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXTlN/L x5ac8fkoxwa19qLxbFJKMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiWmZ0SNNEVHkBd96Ht+wL7xTbJfvsq05Zi06R0rsQhYil38iixI1d HZMxudNxlL6jTTrp3Vf6gKg1PvFQvfsoDCPpHr1X/+OIXPmdbu8EdpR1dHqRC8a0 3yzt4j+pk1MGRV9FvVLkTBZLr6xRdpf54dWRUNqUeikTWQe4y5fnfSmgxPaKRf9E 03t9reDmH05ZvSPMCQdTPjqs9KxWHbdctJ6xdMmHKiMc+gUMJl5zw6jrGzOM2rVp unhLKCHN4oQ9F6aK0L2JMs7J1hvHtphMsOUA6CDL3qore45H3daRTeDyYJEWfMOz fEOiuKfGlamRcOQ5fEfZnha1i/R/UCiz -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:39 2025 by rpki-client