$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: /3kYiyQClIf0+DvJK+bLv6V8WYTETD0mO2KvKORF0Pk= Subject key identifier: 8A:A4:41:03:77:34:CC:AD:B5:5B:4A:6F:5D:7D:E3:80:03:B0:0E:F8 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C05 Signing time: Thu 04 Sep 2025 18:57:49 +0000 Manifest this update: Thu 04 Sep 2025 18:57:49 +0000 Manifest next update: Thu 11 Sep 2025 18:57:49 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: meH+xBEDJSC4zN2HlMKAGc48IQlNjJnlHjUaj+NiokY=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 18:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Sep 4 18:57:49 2025 GMT Not After : Sep 11 18:57:49 2025 GMT Subject: CN=68b9e12d-95bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:92:14:c0:fa:61:08:a6:3a:1e:1f:fb:44: 5d:8a:2a:71:e8:4d:73:06:63:f1:c3:94:d8:56:05: f2:42:53:82:59:4f:06:34:b6:06:fc:e8:79:c5:e8: db:34:f6:f4:71:cd:b7:bd:d7:18:af:b6:f1:58:93: 8e:fa:9a:fc:54:8f:53:2b:3a:b7:65:7c:47:38:bf: 7e:68:e7:2b:b1:3c:77:c1:b8:37:5b:69:a9:3f:3b: e2:f2:d4:65:64:88:df:2b:73:a6:a4:9f:b0:d9:a9: 5c:c2:50:5f:e3:51:8e:5f:fb:24:c0:e6:d0:6d:37: 6b:36:df:5e:b4:20:9c:80:d1:76:d7:1c:80:5a:b5: 4e:e2:1b:c8:bb:21:ae:d3:14:6c:94:ea:dd:2f:b7: 22:eb:fc:cd:6c:48:b7:18:15:a6:f6:c6:49:ed:8c: 9f:4f:2b:1e:e5:db:6f:03:80:eb:76:09:69:cd:6c: 39:4b:a1:22:a6:e2:06:ad:1a:1a:49:fc:78:ce:89: c4:e8:70:23:2a:40:31:9d:a4:49:48:ba:48:31:fb: 5a:18:78:89:ac:28:96:3d:4b:67:1a:44:92:ad:63: d2:25:c5:3a:9f:2a:e8:38:f3:14:91:fe:90:58:b2: b1:84:0d:d3:c0:a8:a4:ef:e2:83:5f:c1:0e:7b:6c: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A4:41:03:77:34:CC:AD:B5:5B:4A:6F:5D:7D:E3:80:03:B0:0E:F8 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e3:5d:8a:79:8b:35:e6:fa:e4:cc:b0:12:ba:65:08:34:27: 7b:f7:09:0f:bc:6e:3d:33:96:f8:0a:b5:ff:6c:b2:0e:ce:2d: a6:a6:94:c3:88:8d:71:80:26:c4:f3:80:8c:d7:58:6a:bb:e6: d0:ab:d5:37:d4:7d:de:ec:12:de:1e:63:93:25:94:c7:9a:ec: 3d:29:19:f1:a3:84:58:6d:74:4d:06:97:0d:cc:ba:f8:fd:14: 1a:3b:de:79:46:f9:3d:f3:79:a1:48:65:fc:1f:24:3d:40:4e: ac:73:05:73:14:1d:f7:d5:0b:cf:48:c9:a8:66:03:3f:c3:3f: 7e:aa:fe:a0:16:37:6a:d6:54:77:7d:c8:66:72:b8:f4:8e:d5: e2:ba:4e:eb:6c:e6:7a:89:c7:b7:cd:ac:ac:b8:e2:dc:8e:21: 95:75:f0:f5:4d:11:97:e0:bb:24:95:53:58:ab:9e:84:53:2b: f1:3a:2b:2f:2f:54:a1:09:af:89:10:58:79:5e:a4:11:90:ea: 51:c8:20:02:89:a3:68:27:93:eb:fa:18:21:14:13:81:71:91: 6e:6a:39:1e:5f:f8:64:56:e0:95:af:c5:2e:a4:ad:7f:8b:df: f7:51:69:70:18:96:31:28:a1:f9:1b:4e:1a:e6:b6:c7:32:ca: ad:29:d8:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwOTA0MTg1NzQ5WhcNMjUwOTExMTg1NzQ5WjAYMRYwFAYD VQQDEw02OGI5ZTEyZC05NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziySFMD6YQimOh4f+0Rdiipx6E1zBmPxw5TYVgXyQlOCWU8GNLYG/Oh5xejb NPb0cc23vdcYr7bxWJOO+pr8VI9TKzq3ZXxHOL9+aOcrsTx3wbg3W2mpPzvi8tRl ZIjfK3OmpJ+w2alcwlBf41GOX/skwObQbTdrNt9etCCcgNF21xyAWrVO4hvIuyGu 0xRslOrdL7ci6/zNbEi3GBWm9sZJ7YyfTyse5dtvA4DrdglpzWw5S6EipuIGrRoa Sfx4zonE6HAjKkAxnaRJSLpIMftaGHiJrCiWPUtnGkSSrWPSJcU6nyroOPMUkf6Q WLKxhA3TwKik7+KDX8EOe2x7gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqkQQN3 NMyttVtKb11944ADsA74MB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk412KeYs15vrkzLASumUINCd79wkPvG49M5b4CrX/bLIOzi2mppTD iI1xgCbE84CM11hqu+bQq9U31H3e7BLeHmOTJZTHmuw9KRnxo4RYbXRNBpcNzLr4 /RQaO955Rvk983mhSGX8HyQ9QE6scwVzFB331QvPSMmoZgM/wz9+qv6gFjdq1lR3 fchmcrj0jtXiuk7rbOZ6ice3zaysuOLcjiGVdfD1TRGX4LsklVNYq56EUyvxOisv L1ShCa+JEFh5XqQRkOpRyCACiaNoJ5Pr+hghFBOBcZFuajkeX/hkVuCVr8UupK1/ i9/3UWlwGJYxKKH5G04a5rbHMsqtKdi2 -----END CERTIFICATE-----Generated at Sat Sep 6 18:36:31 2025 by rpki-client