$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: QAZfRCTv23QHKwoQkc7RRChJE5wPetN7mD5o+gmMXuw= Subject key identifier: DF:52:76:C3:2C:39:E3:74:78:F2:6F:CA:8A:03:CF:37:18:41:06:DB Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 0785 Signing time: Mon 08 Sep 2025 21:32:59 +0000 Manifest this update: Mon 08 Sep 2025 21:32:58 +0000 Manifest next update: Mon 15 Sep 2025 21:32:58 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: iSaoxXr2ih3WIYj5sqJ28MchgaZ6sBt9SPPoLl/w0lE=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Sep 8 21:32:58 2025 GMT Not After : Sep 15 21:32:58 2025 GMT Subject: CN=68bf4b8a-acc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:61:96:c5:98:c3:07:60:a8:93:34:cf:50: 27:b5:a0:33:37:dd:58:55:bf:82:27:70:1e:7c:30: 8e:30:5b:1d:ad:ea:fa:92:a0:44:42:7c:d1:fc:b0: b5:51:42:84:7f:d5:f1:16:73:dd:fa:2f:66:19:d7: 69:18:ae:0f:94:08:4c:ab:c1:68:6b:fa:87:2e:84: 5e:bd:90:ba:70:33:e6:02:be:c5:c1:bd:2c:ec:9a: 9a:51:b3:9d:b2:c3:f8:8d:72:c9:dc:3e:ef:70:fa: fd:07:32:95:b8:71:88:75:e9:5f:0b:88:61:1f:80: f4:4b:cd:7f:40:54:7f:5f:01:cc:ae:41:ba:7a:50: 0a:a5:74:0b:85:1c:a1:f9:2c:7b:e2:9f:00:44:01: 73:64:0e:79:07:c6:e5:5a:90:79:90:e4:ba:ce:13: 72:ee:d3:9d:29:52:b6:d4:8f:12:f4:31:16:a8:e6: ce:83:ad:b1:b6:1e:b8:dd:85:06:c7:89:af:1f:ac: f9:b9:42:0c:24:f6:53:00:d0:5a:6b:d9:dd:90:b9: 10:02:46:3f:fd:3f:35:a8:63:63:3e:ab:b1:e6:80: 51:58:f6:0f:35:75:a4:ea:a9:10:ef:28:61:25:9a: c7:1d:96:dc:07:29:07:99:15:ea:a1:2e:c3:bb:b7: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:76:C3:2C:39:E3:74:78:F2:6F:CA:8A:03:CF:37:18:41:06:DB X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d3:ee:b4:bc:53:21:c5:62:f3:2c:3e:fd:82:2b:58:b7:8b: 08:bf:40:2d:b3:45:2f:7f:88:1f:99:0f:4b:c0:e7:e3:52:cc: c7:f0:e2:83:9d:51:4f:d4:c6:81:3e:67:4f:ac:f3:b3:ff:ea: 8c:ba:7a:23:50:3c:60:3d:de:ac:5e:28:31:f0:3d:15:e8:a3: 9e:00:21:c5:4d:b1:b7:61:7c:b3:c0:5f:f8:f2:a2:eb:79:4b: 08:5c:b9:13:07:1c:30:76:b0:b0:b2:57:78:03:c5:3f:a9:93: da:05:da:01:c9:7c:51:e0:cf:d0:8b:10:62:3c:ff:a6:16:89: 66:e9:ac:9b:d8:20:48:fd:c6:a0:e3:64:79:c3:e6:f0:22:c6: 73:a6:c7:b6:e7:fc:d7:56:6a:78:df:0a:40:d0:8e:f5:8c:3a: da:f2:5f:36:16:83:65:1e:23:c1:21:5f:f4:06:26:75:a8:fb: b7:19:8d:37:54:97:5f:ea:53:04:e2:fd:b2:53:a5:f6:3b:40: 34:1e:17:f4:6d:d5:36:50:34:aa:25:c5:6b:a6:85:0d:42:db: b9:6d:81:cb:24:6b:54:88:0c:44:76:d2:c7:29:f0:84:89:60: c7:78:35:89:b0:e5:c1:d3:88:c0:bc:8c:d4:c0:1c:4e:ac:9a: 51:6f:be:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUwOTA4MjEzMjU4WhcNMjUwOTE1MjEzMjU4WjAYMRYwFAYD VQQDEw02OGJmNGI4YS1hY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk1hlsWYwwdgqJM0z1AntaAzN91YVb+CJ3AefDCOMFsdrer6kqBEQnzR/LC1 UUKEf9XxFnPd+i9mGddpGK4PlAhMq8Foa/qHLoRevZC6cDPmAr7Fwb0s7JqaUbOd ssP4jXLJ3D7vcPr9BzKVuHGIdelfC4hhH4D0S81/QFR/XwHMrkG6elAKpXQLhRyh +Sx74p8ARAFzZA55B8blWpB5kOS6zhNy7tOdKVK21I8S9DEWqObOg62xth643YUG x4mvH6z5uUIMJPZTANBaa9ndkLkQAkY//T81qGNjPqux5oBRWPYPNXWk6qkQ7yhh JZrHHZbcBykHmRXqoS7Du7flbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9SdsMs OeN0ePJvyooDzzcYQQbbMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC90+60vFMhxWLzLD79gitYt4sIv0Ats0Uvf4gfmQ9LwOfjUszH8OKD nVFP1MaBPmdPrPOz/+qMunojUDxgPd6sXigx8D0V6KOeACHFTbG3YXyzwF/48qLr eUsIXLkTBxwwdrCwsld4A8U/qZPaBdoByXxR4M/QixBiPP+mFolm6ayb2CBI/cag 42R5w+bwIsZzpse25/zXVmp43wpA0I71jDra8l82FoNlHiPBIV/0BiZ1qPu3GY03 VJdf6lME4v2yU6X2O0A0Hhf0bdU2UDSqJcVrpoUNQtu5bYHLJGtUiAxEdtLHKfCE iWDHeDWJsOXB04jAvIzUwBxOrJpRb756 -----END CERTIFICATE-----Generated at Tue Sep 9 17:33:57 2025 by rpki-client