$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json) Hash identifier: /HKjstjq1QLPG02vgw+S117JNMj75XB2oWQrxcbtBGU= Subject key identifier: 6D:FE:47:30:BF:4F:0C:C4:DB:C0:FB:55:47:E7:10:1E:0B:51:E4:BC Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft Manifest number: 10 Signing time: Wed 17 Sep 2025 08:48:56 +0000 Manifest this update: Wed 17 Sep 2025 08:48:56 +0000 Manifest next update: Wed 24 Sep 2025 08:48:56 +0000 Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: Scv4pEziFnSP/O9vmSc7GMktvWpwDs8YuA00QjMYofo=) 2: DE43ED5E814111F09CB97D40C4F9AE02.roa (hash: dTfOPNG1kntTr8AnSgtfUPWTvUN95iBYag0K3k/COcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Validity Not Before: Sep 17 08:48:56 2025 GMT Not After : Sep 24 08:48:56 2025 GMT Subject: CN=68ca75f8-0aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:24:ff:a5:7a:26:e2:8c:72:70:d3:b8:e4: 3f:90:0d:c2:67:20:fd:41:10:70:22:ad:97:95:1e: 92:23:10:94:55:2d:bf:c6:18:e6:3f:84:de:69:ee: ca:be:06:88:12:f0:5b:3d:3b:79:16:79:56:5c:ee: b9:72:ee:75:bc:31:2b:e2:3f:18:30:8f:04:c9:0f: c7:d5:48:4e:b8:45:34:65:28:b0:00:43:d2:2d:13: 6a:66:8b:04:99:1c:13:7b:97:73:d5:0b:eb:39:f2: 7f:5d:23:9c:79:87:77:80:37:c2:3e:99:dc:7f:14: 7a:0a:7a:8b:d4:cd:c4:01:91:e8:6e:0c:3e:7a:52: ed:d8:f8:70:cc:bd:71:97:a2:51:6b:b8:79:a1:7c: 1b:dd:e7:34:61:56:4d:9a:48:14:86:f6:60:66:0b: e0:03:c4:33:8e:10:cf:85:b2:01:9b:b8:9b:17:52: 7b:6d:07:42:c7:7f:2a:9a:0f:09:32:aa:70:55:9d: 5d:01:8b:35:64:fa:e5:0a:1d:81:03:8f:34:67:06: 71:4d:df:d2:12:14:bf:dc:62:b7:a1:ee:14:5f:b2: 1e:87:b0:06:d7:be:66:e6:b0:4b:68:df:2d:22:53: 5d:c5:c7:99:91:45:5e:e6:46:ea:f1:6f:d5:1d:4f: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FE:47:30:BF:4F:0C:C4:DB:C0:FB:55:47:E7:10:1E:0B:51:E4:BC X509v3 Authority Key Identifier: keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:2d:7d:c3:75:97:d7:21:f0:c2:56:c7:73:1d:4d:ca:24:cb: fc:00:88:dd:62:e4:38:79:8b:b9:04:b7:64:c0:db:27:70:31: df:28:fd:ab:86:6e:f4:2b:3f:db:23:a6:e8:7d:5b:8b:d4:ac: 76:a2:38:5b:bc:1b:04:e2:a2:93:37:78:8d:9a:91:3d:d5:8f: d7:d5:14:80:79:fa:03:07:77:9b:5a:29:7f:fa:00:4c:a8:5c: c6:96:39:d0:76:c1:b9:92:58:f4:47:b6:c0:cd:c2:7e:f2:ed: 2c:a5:11:17:70:67:94:39:37:44:58:4c:79:88:4f:be:5e:a5: 4a:a3:78:71:ea:2b:d7:ed:35:d3:53:b1:5a:aa:0d:ea:da:b0: 44:9d:ab:f0:02:5b:e7:d8:36:18:f9:09:5c:82:ec:bf:46:f8: 20:50:ff:3f:16:34:54:b1:f6:0d:64:ec:98:e0:34:90:90:ed: d4:dd:f5:42:ed:75:33:9d:5f:a5:8c:f7:cb:a3:21:4a:bb:21: d2:5f:83:3b:f8:29:5b:e5:03:d1:41:dd:b1:60:b1:24:ad:c8: 5b:da:2d:c7:65:64:ba:1a:f0:fd:b1:80:42:50:5a:2d:18:23: 5a:08:8c:87:c3:8f:2f:fb:a0:fe:0c:2f:1d:7b:d6:82:7d:9b: 73:6a:97:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJBRTExMC8GA1UEBRMoQUM2QTA1QzE5REUzNzdGQUZFQURBODg3MEM5MEU0M0RE REU4MkQzMjAeFw0yNTA5MTcwODQ4NTZaFw0yNTA5MjQwODQ4NTZaMBgxFjAUBgNV BAMTDTY4Y2E3NWY4LTBhYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe/CT/pXom4oxycNO45D+QDcJnIP1BEHAirZeVHpIjEJRVLb/GGOY/hN5p7sq+ BogS8Fs9O3kWeVZc7rly7nW8MSviPxgwjwTJD8fVSE64RTRlKLAAQ9ItE2pmiwSZ HBN7l3PVC+s58n9dI5x5h3eAN8I+mdx/FHoKeovUzcQBkehuDD56Uu3Y+HDMvXGX olFruHmhfBvd5zRhVk2aSBSG9mBmC+ADxDOOEM+FsgGbuJsXUnttB0LHfyqaDwky qnBVnV0BizVk+uUKHYEDjzRnBnFN39ISFL/cYreh7hRfsh6HsAbXvmbmsEto3y0i U13Fx5mRRV7mRurxb9UdT5pvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbf5HML9P DMTbwPtVR+cQHgtR5LwwHwYDVR0jBBgwFoAUrGoFwZ3jd/r+raiHDJDkPd3oLTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkFFLzcyMDM3OUEyODE0 MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckdvRndaM2pkX3ItcmFpSERKRGtQZDNvTFRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QkFFLzcyMDM3OUEyODE0MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9y LXJhaUhESkRrUGQzb0xUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABAtfcN1l9ch8MJWx3MdTcoky/wAiN1i5Dh5i7kEt2TA2ydwMd8o/auG bvQrP9sjpuh9W4vUrHaiOFu8GwTiopM3eI2akT3Vj9fVFIB5+gMHd5taKX/6AEyo XMaWOdB2wbmSWPRHtsDNwn7y7SylERdwZ5Q5N0RYTHmIT75epUqjeHHqK9ftNdNT sVqqDerasESdq/ACW+fYNhj5CVyC7L9G+CBQ/z8WNFSx9g1k7JjgNJCQ7dTd9ULt dTOdX6WM98ujIUq7IdJfgzv4KVvlA9FB3bFgsSStyFvaLcdlZLoa8P2xgEJQWi0Y I1oIjIfDjy/7oP4MLx171oJ9m3Nqlz0= -----END CERTIFICATE-----Generated at Thu Sep 18 23:06:01 2025 by rpki-client