$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json) Hash identifier: XmaJIYuqQBfIDYa0wgXgCtnbXCp7m0ItzNaHGatz6vs= Subject key identifier: 3E:7A:72:25:FE:50:42:D9:A7:A8:C6:42:B0:63:DF:16:94:83:27:3E Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft Manifest number: 3D Signing time: Fri 05 Sep 2025 07:59:24 +0000 Manifest this update: Fri 05 Sep 2025 07:59:24 +0000 Manifest next update: Fri 12 Sep 2025 07:59:24 +0000 Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: o3ARYAVQSgX6vXftJxRbyy+RL1yCfxGovNFdMk52yd4=) 2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: Sep 5 07:59:24 2025 GMT Not After : Sep 12 07:59:24 2025 GMT Subject: CN=68ba985c-9bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:ca:ed:f0:31:ab:0d:d7:56:b0:57:17:91: 36:27:c6:ae:56:ce:c2:7f:89:3c:d3:89:b3:4d:4b: aa:47:21:27:c0:24:97:4c:48:4f:de:ce:7c:6d:3b: 38:9c:36:66:87:24:15:98:1a:eb:26:96:e3:57:47: a4:69:85:07:32:b2:00:f1:eb:b7:2b:4f:6d:e5:9c: 68:c9:a1:0e:e5:f5:6e:7e:e3:04:af:e0:6a:69:52: 41:fc:18:3a:87:5f:67:54:5c:42:fa:b7:33:2e:71: 43:d6:9f:72:c7:98:5c:81:5b:62:f1:17:15:2e:f3: dd:90:4a:e3:56:08:84:7f:d9:2c:a2:e1:19:f6:64: d3:93:26:8b:a9:1b:37:10:56:05:89:3c:fc:d1:fc: a0:7a:c6:f8:16:dd:50:b0:f1:29:59:59:40:ca:2f: a9:64:55:ec:be:30:fe:cf:a8:e5:85:6a:37:42:1d: 5d:63:4a:f5:16:3e:34:18:f9:35:30:df:71:52:ac: 8f:e2:99:5a:6a:10:ac:28:ae:55:c1:7b:d3:8d:76: fc:f0:88:a3:61:c3:ea:6e:69:a7:45:67:cd:92:6e: 73:97:a1:fa:27:29:82:ab:3e:bf:54:aa:53:70:22: 40:2a:29:3f:db:fe:6f:c5:c7:e2:ca:08:60:b0:12: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:72:25:FE:50:42:D9:A7:A8:C6:42:B0:63:DF:16:94:83:27:3E X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b1:02:c5:b1:97:e3:50:70:09:74:45:a3:0e:c1:a1:80:6d: 94:21:7e:7b:95:d4:64:8d:22:dc:c6:b7:02:ee:7e:f0:00:a4: 5a:de:b7:ea:67:af:a7:d5:7b:25:4c:b8:ac:60:02:ba:f8:61: 0c:07:c1:81:92:c4:fe:63:ce:7a:c8:fc:34:4e:47:29:9b:3f: 4a:3e:95:e9:53:c6:86:90:de:3e:24:cf:6d:3b:78:5b:6d:4e: b2:8c:30:20:be:66:a9:0d:83:e3:a4:61:66:16:f5:6c:ea:2d: e3:0a:61:97:72:15:e5:51:d1:89:e3:c4:db:86:40:7f:b1:f4: 7a:fd:03:db:04:0d:e1:93:5b:3b:a4:2d:67:58:62:b2:61:94: 0f:72:b6:31:31:9f:75:02:70:78:ed:e8:16:51:c6:7b:83:5d: c9:67:77:78:f7:a0:d9:3b:66:1a:e7:be:9b:09:aa:c7:32:85: a2:73:40:92:ee:8d:ff:0f:14:75:c5:b0:5a:cd:da:24:49:ce: 15:15:51:6a:05:db:05:4b:6b:a7:30:af:91:e5:c8:06:8b:bf: 6a:91:de:ab:88:06:fe:df:61:15:de:12:f7:23:7e:c3:39:41: 10:a6:bd:31:11:d5:7d:a6:08:05:c4:74:45:5c:4b:c0:86:23: 0c:ae:06:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA5MDUwNzU5MjRaFw0yNTA5MTIwNzU5MjRaMBgxFjAUBgNV BAMTDTY4YmE5ODVjLTliYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9/8rt8DGrDddWsFcXkTYnxq5WzsJ/iTzTibNNS6pHISfAJJdMSE/eznxtOzic NmaHJBWYGusmluNXR6RphQcysgDx67crT23lnGjJoQ7l9W5+4wSv4GppUkH8GDqH X2dUXEL6tzMucUPWn3LHmFyBW2LxFxUu892QSuNWCIR/2Syi4Rn2ZNOTJoupGzcQ VgWJPPzR/KB6xvgW3VCw8SlZWUDKL6lkVey+MP7PqOWFajdCHV1jSvUWPjQY+TUw 33FSrI/imVpqEKworlXBe9ONdvzwiKNhw+puaadFZ82SbnOXofonKYKrPr9UqlNw IkAqKT/b/m/Fx+LKCGCwEtg1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPnpyJf5Q QtmnqMZCsGPfFpSDJz4wHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSxAsWxl+NQcAl0RaMOwaGAbZQhfnuV1GSNItzGtwLufvAApFret+pn r6fVeyVMuKxgArr4YQwHwYGSxP5jznrI/DRORymbP0o+lelTxoaQ3j4kz207eFtt TrKMMCC+ZqkNg+OkYWYW9WzqLeMKYZdyFeVR0YnjxNuGQH+x9Hr9A9sEDeGTWzuk LWdYYrJhlA9ytjExn3UCcHjt6BZRxnuDXclnd3j3oNk7ZhrnvpsJqscyhaJzQJLu jf8PFHXFsFrN2iRJzhUVUWoF2wVLa6cwr5HlyAaLv2qR3quIBv7fYRXeEvcjfsM5 QRCmvTER1X2mCAXEdEVcS8CGIwyuBqk= -----END CERTIFICATE-----Generated at Sat Sep 6 15:40:31 2025 by rpki-client