$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: 2HX+hpGUGrHyAfzHX44c+U1rsqtGi5QeHcLSJYXhP5I= Subject key identifier: 98:7E:5D:E8:48:C0:4C:03:CC:93:5B:78:51:6C:88:C7:2D:8B:8B:B4 Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 0198 Signing time: Mon 15 Sep 2025 03:49:25 +0000 Manifest this update: Mon 15 Sep 2025 03:49:24 +0000 Manifest next update: Mon 22 Sep 2025 03:49:24 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: L2dGuGf//gDdZWxDab3j6HcCfJeZQ50L/OPsWDABFqs=) 2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: mj1/gGJTxf89h4qoy3LQ2MkBeHSgOkUv4tA5AfZK7Do=) 3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: tUVxJzysiR6t8MLO9ai96JsdVfMvMqOUKe7eGXkeEqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 03:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Sep 15 03:49:24 2025 GMT Not After : Sep 22 03:49:24 2025 GMT Subject: CN=68c78cc4-95ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:bf:cb:45:59:e1:07:8a:56:70:ff:42:aa: 7d:20:e9:de:e6:4d:b2:aa:e4:11:55:e5:85:6e:fb: 5e:45:24:c8:b5:d6:6b:a2:80:04:ed:ba:5f:d8:d5: 6c:98:4c:03:1c:87:d6:5a:e0:0d:43:51:54:55:c5: bf:e4:3d:7b:86:90:eb:da:9b:1a:5c:a3:9d:bd:07: 82:4b:cd:94:0b:ad:82:48:07:67:d0:0b:f9:8e:ed: df:f2:b8:ce:9d:65:58:83:9a:14:64:3b:61:5c:f5: fe:65:5d:68:5a:e5:de:fa:8a:2a:a6:b7:46:3d:1f: 7d:f2:93:a3:04:5a:f6:cc:1a:e6:1b:f8:fe:86:65: 58:0d:b3:d0:fa:02:14:bb:4b:4b:64:84:4e:f9:bc: 69:55:85:91:1c:53:2c:02:c8:26:b6:09:8b:b3:9f: cc:f7:49:57:ac:ce:17:13:c4:a5:17:d7:12:4b:f8: b9:af:31:c0:ed:d2:d6:88:c3:b8:7d:2a:9e:cf:03: 4d:fb:eb:f9:fa:cf:91:15:47:e7:74:3e:c9:c2:75: 0a:a3:b2:bb:10:e9:55:99:3c:b8:7e:f4:b9:a6:ce: db:04:88:d2:9c:8b:f7:55:45:e8:75:75:d2:fb:9f: d9:33:8a:69:10:83:41:7f:e2:0f:de:41:bc:25:1f: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7E:5D:E8:48:C0:4C:03:CC:93:5B:78:51:6C:88:C7:2D:8B:8B:B4 X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3a:74:1e:fa:96:b3:89:e6:eb:c4:dd:50:86:aa:b4:63:14: ad:57:98:86:2f:37:ae:88:ef:77:01:7d:8a:24:0a:63:65:f3: aa:89:cd:0b:c9:9d:fb:3d:8e:94:68:3d:03:65:44:27:30:0b: 15:62:10:ee:61:ee:93:44:fd:71:0c:2d:2e:04:b8:1d:50:72: 5b:ad:8f:2f:3a:bb:f7:12:4a:58:18:5c:f5:9c:b6:97:26:db: d2:3b:47:b3:1d:0b:70:e6:43:59:98:4a:29:c6:c5:27:21:d5: 8e:6f:ac:34:29:f8:68:7f:a3:61:b6:b8:ba:fa:87:aa:66:4d: ea:ac:0c:22:e6:10:01:eb:7e:ce:81:57:e7:46:41:7c:2a:86: 9f:da:c3:72:3c:b6:d7:43:97:94:af:50:78:1b:5d:8a:aa:9d: 16:82:36:5c:59:fb:a5:39:61:20:cb:19:2b:9f:14:2d:e6:dc: c0:94:c6:f0:0f:8f:75:50:0b:33:5e:75:0e:f6:e6:7c:f7:cd: 48:c1:9d:c4:e1:43:26:07:1e:06:68:36:a8:0f:b6:a5:eb:4b: f8:23:86:9a:8a:17:df:c1:6f:74:7f:29:61:b3:a8:28:70:69: 59:fc:b2:df:db:3f:5b:b8:e3:db:98:33:33:42:95:f2:ea:b7: 84:22:f1:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjUwOTE1MDM0OTI0WhcNMjUwOTIyMDM0OTI0WjAYMRYwFAYD VQQDEw02OGM3OGNjNC05NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RW/y0VZ4QeKVnD/Qqp9IOne5k2yquQRVeWFbvteRSTItdZrooAE7bpf2NVs mEwDHIfWWuANQ1FUVcW/5D17hpDr2psaXKOdvQeCS82UC62CSAdn0Av5ju3f8rjO nWVYg5oUZDthXPX+ZV1oWuXe+ooqprdGPR998pOjBFr2zBrmG/j+hmVYDbPQ+gIU u0tLZIRO+bxpVYWRHFMsAsgmtgmLs5/M90lXrM4XE8SlF9cSS/i5rzHA7dLWiMO4 fSqezwNN++v5+s+RFUfndD7JwnUKo7K7EOlVmTy4fvS5ps7bBIjSnIv3VUXodXXS +5/ZM4ppEINBf+IP3kG8JR/rVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh+XehI wEwDzJNbeFFsiMcti4u0MB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArOnQe+paziebrxN1Qhqq0YxStV5iGLzeuiO93AX2KJApjZfOqic0L yZ37PY6UaD0DZUQnMAsVYhDuYe6TRP1xDC0uBLgdUHJbrY8vOrv3EkpYGFz1nLaX JtvSO0ezHQtw5kNZmEopxsUnIdWOb6w0Kfhof6Nhtri6+oeqZk3qrAwi5hAB637O gVfnRkF8Koaf2sNyPLbXQ5eUr1B4G12Kqp0WgjZcWfulOWEgyxkrnxQt5tzAlMbw D491UAszXnUO9uZ8981IwZ3E4UMmBx4GaDaoD7al60v4I4aaihffwW90fylhs6go cGlZ/LLf2z9buOPbmDMzQpXy6reEIvG3 -----END CERTIFICATE-----Generated at Tue Sep 16 11:56:56 2025 by rpki-client