$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft File: gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json) Hash identifier: lkvlYBrwm9FF1A/J+lQzTMBexnnAakG8TDX1VIJlVYA= Subject key identifier: 08:41:86:46:C0:A1:E6:C3:DC:44:35:EF:EC:8E:6D:FD:55:E3:C4:42 Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft Manifest number: 1C71 Signing time: Sat 06 Sep 2025 16:14:37 +0000 Manifest this update: Sat 06 Sep 2025 16:14:37 +0000 Manifest next update: Sat 13 Sep 2025 16:14:37 +0000 Files and hashes: 1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: mhBsqie5Qvr8SXdG4L0EDlB1HuaL4lL/30fMWrd3OaY=) 2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: X/4GCRMZ/gVyKNef6s/CyH3yqYjWWcRQZHTiFuRUpcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7297 (0x1c81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: Sep 6 16:14:37 2025 GMT Not After : Sep 13 16:14:37 2025 GMT Subject: CN=68bc5ded-29d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:2d:09:0a:e3:29:17:8d:5e:bf:23:7e:e7: 56:d2:43:05:32:ed:b2:30:63:55:de:b8:f5:30:2f: 19:06:72:31:05:89:4f:7e:51:b1:0d:16:75:fd:23: 17:94:d3:59:9b:b2:eb:97:9a:fb:11:ae:f3:16:5e: 12:cc:73:6a:e2:a0:dc:6f:19:7d:db:e7:dc:1e:b3: 26:6a:b6:2f:a9:0d:f4:b6:bd:75:5f:f5:56:21:8b: 78:da:6d:c9:4b:2b:21:27:bd:4e:1f:07:c4:54:0a: 88:1c:1c:04:c2:d4:a3:77:d0:f1:e0:49:1d:54:bc: 3f:ab:50:15:b3:b9:59:30:14:95:00:f9:b5:79:80: e3:32:aa:34:af:7d:4e:f1:16:06:3d:f7:4b:1f:72: bf:02:bc:d7:ee:8d:34:8f:ba:f0:8e:2a:7e:aa:9e: 16:e6:22:8f:b3:e6:f3:1c:81:6f:fa:63:bd:2c:17: e3:48:61:e7:68:28:f4:98:a1:0a:b4:bf:bc:e8:6f: 05:ab:b3:9c:53:e9:64:72:ed:72:df:1c:c2:fc:53: 91:c7:4e:45:e4:2c:b4:b2:70:fa:55:db:04:84:61: f6:cd:d9:70:64:80:5e:d9:84:71:38:40:3f:fd:85: d4:ff:7a:56:b3:d5:7f:8d:77:22:b7:80:47:85:f1: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:41:86:46:C0:A1:E6:C3:DC:44:35:EF:EC:8E:6D:FD:55:E3:C4:42 X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:35:c2:03:35:67:98:46:cc:eb:30:42:38:d9:36:f9:31:72: a3:a1:8f:88:c2:60:52:a7:b0:27:ac:7e:0c:f3:d5:6c:1c:b8: 67:19:4e:aa:4a:08:30:b3:da:2e:ef:5c:1f:64:f4:fc:e7:a3: a9:8d:d4:60:b3:8e:2c:ee:f9:42:38:ba:81:d5:32:96:d6:0e: 5d:99:32:ef:55:e8:5b:51:1a:a2:25:77:90:54:8c:26:6e:c2: d5:87:55:c4:a4:3c:76:e1:3a:21:9d:76:95:23:f1:21:dc:5e: 4b:7a:74:79:d1:bf:0d:70:d7:da:81:21:c9:52:f1:ae:7d:51: 59:a0:ff:ac:20:d3:44:19:0f:96:90:16:d5:0d:93:35:b4:3e: fc:f5:5d:3e:9a:b5:38:c2:68:51:f0:6c:24:8d:e1:54:2e:46: 6f:ef:68:79:bd:e0:ae:b9:19:2b:e5:dc:4b:ec:21:2e:86:ef: 50:73:b8:07:75:8e:50:ac:22:f0:22:01:18:90:9e:0f:c4:f7: 01:07:de:71:3e:eb:f2:92:10:d0:b6:0f:69:5d:79:07:b7:e4: 64:8e:06:6a:f6:52:2b:d2:c7:b5:21:f3:7a:71:c2:56:e0:9c: 09:e7:5f:2f:c1:a7:56:a1:10:ea:a7:4b:ee:7b:75:60:55:9f: 1a:d0:a5:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjUwOTA2MTYxNDM3WhcNMjUwOTEzMTYxNDM3WjAYMRYwFAYD VQQDEw02OGJjNWRlZC0yOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iwtCQrjKReNXr8jfudW0kMFMu2yMGNV3rj1MC8ZBnIxBYlPflGxDRZ1/SMX lNNZm7Lrl5r7Ea7zFl4SzHNq4qDcbxl92+fcHrMmarYvqQ30tr11X/VWIYt42m3J SyshJ71OHwfEVAqIHBwEwtSjd9Dx4EkdVLw/q1AVs7lZMBSVAPm1eYDjMqo0r31O 8RYGPfdLH3K/ArzX7o00j7rwjip+qp4W5iKPs+bzHIFv+mO9LBfjSGHnaCj0mKEK tL+86G8Fq7OcU+lkcu1y3xzC/FORx05F5Cy0snD6VdsEhGH2zdlwZIBe2YRxOEA/ /YXU/3pWs9V/jXcit4BHhfFnnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhBhkbA oebD3EQ17+yObf1V48RCMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdU S29oUlZjUXgwek1aclBiWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzNcIDNWeYRszrMEI42Tb5MXKjoY+IwmBSp7AnrH4M89VsHLhnGU6q Sggws9ou71wfZPT856OpjdRgs44s7vlCOLqB1TKW1g5dmTLvVehbURqiJXeQVIwm bsLVh1XEpDx24TohnXaVI/Eh3F5LenR50b8NcNfagSHJUvGufVFZoP+sINNEGQ+W kBbVDZM1tD789V0+mrU4wmhR8GwkjeFULkZv72h5veCuuRkr5dxL7CEuhu9Qc7gH dY5QrCLwIgEYkJ4PxPcBB95xPuvykhDQtg9pXXkHt+RkjgZq9lIr0se1IfN6ccJW 4JwJ518vwadWoRDqp0vue3VgVZ8a0KVw -----END CERTIFICATE-----Generated at Mon Sep 8 03:35:36 2025 by rpki-client