$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json) Hash identifier: 81YEfT6e3f2C/1Kpnkh2RK6+m8oFYZ1he+SqdIPGkds= Subject key identifier: 7C:DA:EE:34:18:DB:B8:31:2D:C2:CA:40:52:E4:8A:9E:D8:62:8B:0B Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft Manifest number: 70 Signing time: Tue 09 Sep 2025 07:04:38 +0000 Manifest this update: Tue 09 Sep 2025 07:04:38 +0000 Manifest next update: Tue 16 Sep 2025 07:04:37 +0000 Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: ZiqETAq0QM3PXV2ovJPTCSkoNZLvCdT294QCvEwqheY=) 2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: aQCWDBoOh5osM5C7MBD0kh6o6WsN7hx2kjcWDkx53es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Validity Not Before: Sep 9 07:04:38 2025 GMT Not After : Sep 16 07:04:37 2025 GMT Subject: CN=68bfd186-b3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:49:e8:45:e4:82:87:e0:a3:f5:87:97:40: 97:42:50:1c:45:d7:3c:8f:ba:2c:04:ce:be:0b:65: 48:dc:ce:6e:84:5e:4a:ca:dd:5a:3d:04:0e:2a:1f: 63:e2:57:00:17:7a:81:96:62:58:a7:00:8d:20:10: 44:dc:b3:89:22:3d:00:4d:c4:8b:17:75:4e:68:d4: aa:28:1c:eb:b4:6d:fd:a5:83:be:be:4f:31:84:13: 5c:eb:e7:32:b2:73:fa:00:67:4f:29:74:52:d1:8b: 3c:ee:22:6c:79:1b:7f:19:68:08:31:64:0d:e5:c1: 0a:c7:33:c0:66:7e:dd:3d:22:79:14:28:13:e8:ab: 3d:e0:48:7d:15:f3:42:5f:be:f9:da:07:80:cc:17: 09:72:77:39:8e:a1:85:14:fb:98:ee:3e:3c:5b:d0: e9:4f:85:4b:88:eb:1e:3e:12:da:30:de:9b:b1:cc: 9f:a8:1d:2b:3d:89:72:e3:ae:e6:42:91:a2:7a:40: 97:21:93:0a:4e:16:53:b5:53:35:ea:71:79:0e:0c: 25:24:12:f9:13:77:95:e8:c6:da:2b:c9:b2:cd:61: 24:cf:bc:f0:05:68:02:f6:0e:30:02:52:06:81:c0: ac:ab:c8:a6:39:54:fd:64:95:71:d3:9d:2b:13:fc: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DA:EE:34:18:DB:B8:31:2D:C2:CA:40:52:E4:8A:9E:D8:62:8B:0B X509v3 Authority Key Identifier: keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:4c:69:2e:c0:cb:f4:6b:9b:45:9b:15:da:54:45:0a:9f:e8: e1:be:6d:0a:6d:f5:53:8f:5a:15:06:78:b6:7f:ed:fb:1f:a4: 4c:fa:b8:11:07:bb:ec:be:73:a9:8e:c7:5d:fe:69:eb:ea:76: a5:e3:f7:9a:d0:b7:db:ad:67:34:aa:e9:4d:02:1e:31:b2:62: 84:c4:93:b0:1d:7d:96:85:0e:ad:06:d5:c9:ec:36:4a:e9:3a: f0:51:f3:8b:ca:be:ef:dc:ab:24:f2:76:67:5c:14:4d:55:24: 5d:97:37:9d:31:8b:bd:ed:33:a9:2a:5b:4e:fb:c3:d0:ec:d2: c4:da:53:3f:85:ca:49:b0:b2:94:b6:bb:b7:e7:65:19:67:98: 21:b7:4c:0c:d0:41:30:b7:a6:e3:10:4f:aa:f2:22:a3:09:09: 32:7a:a5:95:70:46:02:45:0d:54:3c:09:57:4d:85:a3:d1:29: c5:6c:ab:0a:08:17:e6:0a:0c:25:69:d7:2d:76:5e:03:ac:fd: 1f:db:57:2d:98:01:74:d5:56:04:aa:58:74:6e:d3:c3:14:4e: 88:21:01:ed:f9:c2:c5:ed:1e:16:02:fe:2f:08:b9:d1:60:27: 24:a1:91:4a:52:5e:81:81:ab:2b:f7:75:26:d7:66:1b:5f:dc: aa:3b:e2:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEE0MjExMC8GA1UEBRMoODBCMThCODFENDdCNjE3NzEzMDRFMEY3NjEwRDExQTdD MzQwNjEyMzAeFw0yNTA5MDkwNzA0MzhaFw0yNTA5MTYwNzA0MzdaMBgxFjAUBgNV BAMTDTY4YmZkMTg2LWIzZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRj0noReSCh+Cj9YeXQJdCUBxF1zyPuiwEzr4LZUjczm6EXkrK3Vo9BA4qH2Pi VwAXeoGWYlinAI0gEETcs4kiPQBNxIsXdU5o1KooHOu0bf2lg76+TzGEE1zr5zKy c/oAZ08pdFLRizzuImx5G38ZaAgxZA3lwQrHM8Bmft09InkUKBPoqz3gSH0V80Jf vvnaB4DMFwlydzmOoYUU+5juPjxb0OlPhUuI6x4+Etow3puxzJ+oHSs9iXLjruZC kaJ6QJchkwpOFlO1UzXqcXkODCUkEvkTd5XoxtorybLNYSTPvPAFaAL2DjACUgaB wKyryKY5VP1klXHTnSsT/HXRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfNruNBjb uDEtwspAUuSKnthiiwswHwYDVR0jBBgwFoAUgLGLgdR7YXcTBOD3YQ0Rp8NAYSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QTQyLzFGQjBGNjc2RUE4 QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhjVEJPRDNZUTBScDhOQVlT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0xHTGdkUjdZWGNUQk9EM1lRMFJwOE5BWVNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 QTQyLzFGQjBGNjc2RUE4QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhj VEJPRDNZUTBScDhOQVlTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMtMaS7Ay/Rrm0WbFdpURQqf6OG+bQpt9VOPWhUGeLZ/7fsfpEz6uBEH u+y+c6mOx13+aevqdqXj95rQt9utZzSq6U0CHjGyYoTEk7AdfZaFDq0G1cnsNkrp OvBR84vKvu/cqyTydmdcFE1VJF2XN50xi73tM6kqW077w9Ds0sTaUz+FykmwspS2 u7fnZRlnmCG3TAzQQTC3puMQT6ryIqMJCTJ6pZVwRgJFDVQ8CVdNhaPRKcVsqwoI F+YKDCVp1y12XgOs/R/bVy2YAXTVVgSqWHRu08MUToghAe35wsXtHhYC/i8IudFg JyShkUpSXoGBqyv3dSbXZhtf3Ko74pE= -----END CERTIFICATE-----Generated at Tue Sep 9 13:12:14 2025 by rpki-client