$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json) Hash identifier: mcQ3OKlD9OUJDxCM7ZeuW8OYuOiE+YgvcB3zBCmqRLM= Subject key identifier: 1D:03:95:B8:FE:F1:C2:08:A4:D5:3E:EC:59:90:82:FF:07:A1:37:4D Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft Manifest number: 02B0 Signing time: Fri 19 Sep 2025 01:57:25 +0000 Manifest this update: Fri 19 Sep 2025 01:57:24 +0000 Manifest next update: Fri 26 Sep 2025 01:57:24 +0000 Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: cyKkyXwtksthv2vCCzTHwvLQzcg+qe7sVEaq3KdScQI=) 2: EE62A36A0D9F11EDB7631D1BC4F9AE02.roa (hash: 79mqc7tZF4tbIphjhbOXUthxD6els9a6zfI1+s7nFSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Validity Not Before: Sep 19 01:57:24 2025 GMT Not After : Sep 26 01:57:24 2025 GMT Subject: CN=68ccb885-0ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:44:d7:89:6e:8e:5a:10:df:28:b1:b7:8b: ac:b5:5e:94:fa:73:c0:9f:1b:dd:b7:7e:41:22:00: 88:9e:36:29:e3:7a:b0:3f:71:47:cf:55:41:fa:23: f6:0d:62:6d:f5:8c:c6:96:65:af:e3:c1:a8:68:d7: 39:42:ea:ab:68:d1:77:72:5d:fc:40:01:30:69:fd: 8a:3d:12:f5:46:2c:dc:48:20:8b:b7:1c:31:94:9c: 31:c0:2f:37:f6:3a:c2:64:e7:60:41:f7:2f:d8:d9: 27:9a:0b:84:53:d6:e6:e9:25:80:84:bd:c3:5a:4a: 4f:63:86:97:bc:92:60:4b:d6:a9:9d:c6:5a:67:52: 1d:29:13:e8:a6:51:5c:c1:1a:9a:c0:36:81:fe:83: 6a:c4:0b:ec:cd:dd:2a:eb:34:e2:6a:33:7d:5a:c0: d4:32:02:fe:89:09:fc:1b:71:19:24:1f:85:cc:2e: 0d:f8:f0:ba:6f:38:70:ca:5f:bc:78:2a:fd:d4:8b: 89:2a:95:10:d4:31:15:87:1e:8a:12:e4:29:a3:6d: 66:32:dd:ae:36:67:86:01:0d:5e:cf:4f:4f:b5:c6: f8:8f:66:ea:1c:ad:12:b5:5a:01:62:12:6a:52:e2: c5:af:51:c0:fb:12:ee:a0:ad:7c:9c:af:fa:ba:82: ee:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:03:95:B8:FE:F1:C2:08:A4:D5:3E:EC:59:90:82:FF:07:A1:37:4D X509v3 Authority Key Identifier: keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3f:c7:0e:60:b3:36:9d:d1:00:4b:2c:c8:6e:2a:c6:20:8e: 5f:a5:a8:4b:e3:f4:1e:ca:a0:31:af:2c:c4:47:1f:88:11:f5: 7c:63:a8:81:b2:0b:54:d3:e7:f7:3f:8a:87:2e:69:b3:b3:30: 4f:34:47:11:a0:c2:6b:eb:10:70:b3:71:90:6f:0d:cd:86:6c: 44:1b:43:b7:46:33:d8:d0:9e:37:c5:79:54:ce:be:53:6f:79: 1c:b9:5e:35:c4:c6:0d:b7:cc:10:fb:a0:ee:e2:46:3b:69:e6: 11:51:d1:69:7a:76:37:a8:92:44:a6:ff:88:b1:db:63:8d:56: 9b:3f:2e:90:c5:1a:04:38:24:50:d5:b4:92:bb:ce:06:12:b9: e8:47:d5:0b:ef:04:20:9c:00:6b:31:51:38:9c:58:4a:fe:76: 39:fc:d6:18:eb:a0:08:b1:5c:39:f9:5f:f3:c3:3d:3e:71:80: 1e:79:1a:0d:4c:14:83:ac:3f:c1:64:62:14:15:ac:dd:ee:59: e1:82:90:85:4e:23:e4:e7:2f:9f:f4:1e:f3:e0:f0:a2:93:d0: 71:2c:a6:ff:51:cd:01:1e:67:cf:77:fa:54:ca:94:f3:59:9e: bf:cd:0b:d6:75:d5:53:ca:0b:cc:db:97:09:55:d0:fa:68:be: ba:7e:c8:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNBNjcxMTAvBgNVBAUTKDgwRTBBQjE4OUZDRDcwMUVFRTQyQzkyQjkzQzE1QjZG NzQyNDgyNkEwHhcNMjUwOTE5MDE1NzI0WhcNMjUwOTI2MDE1NzI0WjAYMRYwFAYD VQQDEw02OGNjYjg4NS0wZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApntE14lujloQ3yixt4ustV6U+nPAnxvdt35BIgCInjYp43qwP3FHz1VB+iP2 DWJt9YzGlmWv48GoaNc5QuqraNF3cl38QAEwaf2KPRL1RizcSCCLtxwxlJwxwC83 9jrCZOdgQfcv2NknmguEU9bm6SWAhL3DWkpPY4aXvJJgS9apncZaZ1IdKRPoplFc wRqawDaB/oNqxAvszd0q6zTiajN9WsDUMgL+iQn8G3EZJB+FzC4N+PC6bzhwyl+8 eCr91IuJKpUQ1DEVhx6KEuQpo21mMt2uNmeGAQ1ez09Ptcb4j2bqHK0StVoBYhJq UuLFr1HA+xLuoK18nK/6uoLuPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0Dlbj+ 8cIIpNU+7FmQgv8HoTdNMB8GA1UdIwQYMBaAFIDgqxifzXAe7kLJK5PBW290JIJq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0E2Ny9DODA2OTc5MjBE OUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNCN3VRc2tyazhGYmIzUWtn bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPQ3JHSl9OY0I3dVFza3JrOEZiYjNRa2dtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0E2Ny9DODA2OTc5MjBEOUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNC N3VRc2tyazhGYmIzUWtnbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsP8cOYLM2ndEASyzIbirGII5fpahL4/QeyqAxryzERx+IEfV8Y6iB sgtU0+f3P4qHLmmzszBPNEcRoMJr6xBws3GQbw3NhmxEG0O3RjPY0J43xXlUzr5T b3kcuV41xMYNt8wQ+6Du4kY7aeYRUdFpenY3qJJEpv+IsdtjjVabPy6QxRoEOCRQ 1bSSu84GErnoR9UL7wQgnABrMVE4nFhK/nY5/NYY66AIsVw5+V/zwz0+cYAeeRoN TBSDrD/BZGIUFazd7lnhgpCFTiPk5y+f9B7z4PCik9BxLKb/Uc0BHmfPd/pUypTz WZ6/zQvWddVTygvM25cJVdD6aL66fsiU -----END CERTIFICATE-----Generated at Fri Sep 19 05:26:07 2025 by rpki-client