$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: 3D3ebZV1x9JapxKlxng0r+GXa2RQWXjpMfIDZbQTKn0= Subject key identifier: BD:1D:F2:4E:D5:2E:4A:CA:99:25:E3:23:11:80:E1:D3:D2:38:82:8D Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 034D Signing time: Fri 19 Sep 2025 01:26:47 +0000 Manifest this update: Fri 19 Sep 2025 01:26:46 +0000 Manifest next update: Fri 26 Sep 2025 01:26:46 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: zDaAA6+bEtkaQHvGVx9mpOqAPd8RMQ0bTZ/UX6Yf7Mo=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Sep 19 01:26:46 2025 GMT Not After : Sep 26 01:26:46 2025 GMT Subject: CN=68ccb156-ea0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:72:48:8f:d9:f6:44:79:6f:b2:73:37:c0: 96:08:e8:d1:a4:f0:15:8f:ab:0a:bf:8b:f3:25:0c: 10:81:8b:0d:57:ae:e7:b1:dd:b2:3e:cb:3f:f4:a5: ae:e0:84:fa:f8:3f:2c:5c:e0:c8:67:73:b8:81:18: 40:d1:83:84:94:01:4a:e4:08:66:0f:d8:d5:d4:59: e1:19:4b:78:35:3d:17:cd:3a:b8:c5:d0:9a:70:69: 3b:9e:55:2c:ea:ec:25:7d:8a:6a:3b:59:47:fd:35: 40:1c:be:b6:e0:b9:6e:54:1d:f9:aa:cd:96:82:45: 98:ed:85:cd:69:f8:49:00:be:71:c8:39:af:ba:0d: 12:6b:53:c2:4b:4f:9b:a5:8e:22:85:e5:aa:e5:ab: 18:e3:ba:77:4c:52:2b:56:33:0a:75:6d:48:f6:58: 8a:ec:dc:ef:2a:9f:f0:41:4e:24:22:f9:40:0f:13: 68:55:be:56:c9:9f:23:66:a5:90:0e:31:9c:ec:a4: cf:1e:35:b3:f7:0a:10:8f:f6:fa:ae:10:d1:f5:de: 8c:5b:d3:5b:33:89:76:a9:91:79:97:9e:28:df:a3: 5c:14:4b:28:71:71:f6:9e:ae:01:67:fc:ea:9e:4d: 4a:e8:45:d5:f9:c3:73:99:dc:48:dd:6f:39:f4:d3: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1D:F2:4E:D5:2E:4A:CA:99:25:E3:23:11:80:E1:D3:D2:38:82:8D X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:53:7f:bb:1e:80:6f:af:42:6c:22:9c:93:b9:7a:0f:7f:fc: 53:23:65:8d:b3:da:fb:0b:37:0b:11:f4:ce:8c:7a:06:f6:c2: 4f:57:84:ef:eb:d3:1d:37:ee:e9:b0:99:d9:c0:b4:14:14:55: 92:a3:0c:b7:38:ae:e7:8f:6d:6d:3f:2f:12:4f:6f:a4:99:f4: a3:0e:ca:82:cf:95:89:da:49:02:f3:2b:cb:74:ca:94:a7:88: 3d:e9:64:e9:98:8d:b5:4f:c9:93:10:da:42:46:d1:db:f6:97: e0:cc:70:45:bb:df:98:43:f2:ed:3f:67:de:78:67:24:5f:e3: 87:8f:7a:fa:6d:63:fe:5c:68:9a:2c:31:f9:fb:29:2d:5e:0b: a6:3a:91:0d:d4:d8:31:1c:4b:2f:be:0d:92:56:62:af:09:14: 92:6e:f2:29:cc:ef:02:51:59:70:75:ad:c1:5d:26:f9:87:b3: 96:76:fb:67:e3:54:10:ed:90:05:29:70:57:7a:07:82:9a:74: 4d:11:4d:43:60:fa:62:8a:41:e4:8f:58:4d:1a:30:23:d7:85: 4c:34:9f:b7:1d:b5:26:52:78:58:5a:af:bd:40:c8:f7:a3:81: e3:75:c0:59:77:d3:8c:18:1a:a5:21:04:29:83:8c:1e:48:4e: da:18:eb:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwOTE5MDEyNjQ2WhcNMjUwOTI2MDEyNjQ2WjAYMRYwFAYD VQQDEw02OGNjYjE1Ni1lYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo9ySI/Z9kR5b7JzN8CWCOjRpPAVj6sKv4vzJQwQgYsNV67nsd2yPss/9KWu 4IT6+D8sXODIZ3O4gRhA0YOElAFK5AhmD9jV1FnhGUt4NT0XzTq4xdCacGk7nlUs 6uwlfYpqO1lH/TVAHL624LluVB35qs2WgkWY7YXNafhJAL5xyDmvug0Sa1PCS0+b pY4iheWq5asY47p3TFIrVjMKdW1I9liK7NzvKp/wQU4kIvlADxNoVb5WyZ8jZqWQ DjGc7KTPHjWz9woQj/b6rhDR9d6MW9NbM4l2qZF5l54o36NcFEsocXH2nq4BZ/zq nk1K6EXV+cNzmdxI3W859NOybwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0d8k7V LkrKmSXjIxGA4dPSOIKNMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAU3+7HoBvr0JsIpyTuXoPf/xTI2WNs9r7CzcLEfTOjHoG9sJPV4Tv 69MdN+7psJnZwLQUFFWSowy3OK7nj21tPy8ST2+kmfSjDsqCz5WJ2kkC8yvLdMqU p4g96WTpmI21T8mTENpCRtHb9pfgzHBFu9+YQ/LtP2feeGckX+OHj3r6bWP+XGia LDH5+yktXgumOpEN1NgxHEsvvg2SVmKvCRSSbvIpzO8CUVlwda3BXSb5h7OWdvtn 41QQ7ZAFKXBXegeCmnRNEU1DYPpiikHkj1hNGjAj14VMNJ+3HbUmUnhYWq+9QMj3 o4HjdcBZd9OMGBqlIQQpg4weSE7aGOuJ -----END CERTIFICATE-----Generated at Fri Sep 19 07:29:37 2025 by rpki-client