$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: z8gMW4HO3cveaTJv1fSmNgrULQcRFnP7ULCxPMJdMXw= Subject key identifier: 2A:4B:E9:22:BA:11:F6:BB:79:66:87:22:37:54:D6:91:BC:B3:6D:23 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 34B8 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 34B8 Signing time: Mon 18 Aug 2025 14:21:58 +0000 Manifest this update: Mon 18 Aug 2025 14:21:57 +0000 Manifest next update: Mon 25 Aug 2025 14:21:57 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: WG5y6RuXsZGzC5yV7reYxRjAIdrqEqgp1gHoYD7FDxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13496 (0x34b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Aug 18 14:21:57 2025 GMT Not After : Aug 25 14:21:57 2025 GMT Subject: CN=68a33705-a5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:bd:0c:32:3a:55:77:3b:07:24:db:e9:42: bf:5d:4d:00:3e:eb:2f:f9:a8:92:d4:3b:9b:0c:0e: e5:ea:f9:9a:ee:8a:e9:86:0f:91:04:03:2f:87:a2: d8:d5:f8:02:07:5e:5c:0a:fb:06:f2:ef:b4:c6:05: 28:26:15:16:5c:69:9c:59:e6:f9:c8:71:df:13:24: 18:95:a6:cf:67:88:f1:51:d4:f6:e5:5c:4d:a3:57: 7d:32:31:b9:fd:26:34:ba:80:25:c5:8d:a5:5f:47: 4c:f6:17:36:6f:c5:e0:96:5b:cc:d0:86:38:9f:13: 4b:ee:a3:cc:17:5e:c0:1d:66:38:96:c1:79:30:b4: 56:b2:14:e1:77:a3:7c:7d:51:48:8f:10:aa:94:14: c2:28:48:b9:fe:3e:1a:ad:75:3a:ee:f5:cf:91:28: 34:39:1e:42:f6:b0:57:30:9a:6c:4d:8b:0e:38:63: 28:4b:6a:21:a1:b8:eb:f7:d3:58:7d:85:8c:e4:94: 0e:a0:21:e8:6f:bc:fd:c0:ed:30:11:bf:e5:11:68: 21:3e:4b:94:00:94:93:5d:b9:56:35:7d:a9:1a:35: 37:b6:4a:0d:46:b2:d8:94:ae:2e:44:b8:8b:5e:e4: ba:91:f1:c8:27:a1:f7:61:ad:29:30:a6:cf:13:af: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4B:E9:22:BA:11:F6:BB:79:66:87:22:37:54:D6:91:BC:B3:6D:23 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:5c:83:02:3b:3e:e9:b5:2e:e9:d4:50:8c:c3:c0:4e:09:16: 45:c2:8d:e3:d8:54:f4:67:20:df:63:7f:e9:05:ed:ff:37:d2: 88:13:6c:f6:a3:04:36:79:7e:c5:5e:fa:65:0d:5b:cb:08:9e: cf:ce:18:42:7c:20:f7:f2:ea:85:32:ed:60:a2:d8:2f:5a:a0: 1f:e1:b9:bd:06:f2:57:2f:74:42:57:8c:70:32:56:bc:9d:59: 2d:b1:7b:91:d4:92:5e:ae:33:98:f7:38:1c:b7:84:3f:77:75: bc:25:fe:ec:fb:ab:b6:a2:1e:d8:7f:88:59:6a:6f:ab:a8:eb: 0a:42:35:6c:d8:66:e2:36:0b:79:e5:97:9e:da:47:5b:77:49: b2:b8:f3:d3:fb:5e:e6:c2:0e:84:e9:b9:42:cf:51:1e:f8:dc: 3f:a6:47:cd:25:c9:14:95:0a:50:02:5e:c9:99:75:fc:2c:21: 19:8d:1e:aa:a7:bb:b7:88:65:41:9c:99:31:4e:7f:fb:bf:9e: 4d:fb:de:df:76:11:ae:fd:4a:60:88:81:bb:6a:eb:e7:51:40: d7:fe:dc:46:6e:38:83:59:82:1e:ad:f5:07:fd:f0:08:33:1d: cf:7c:59:4a:f6:f1:9c:3d:8a:ca:3d:e8:a2:d6:aa:31:41:38: fa:db:64:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUwODE4MTQyMTU3WhcNMjUwODI1MTQyMTU3WjAYMRYwFAYD VQQDEw02OGEzMzcwNS1hNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhK9DDI6VXc7ByTb6UK/XU0APusv+aiS1DubDA7l6vma7orphg+RBAMvh6LY 1fgCB15cCvsG8u+0xgUoJhUWXGmcWeb5yHHfEyQYlabPZ4jxUdT25VxNo1d9MjG5 /SY0uoAlxY2lX0dM9hc2b8XgllvM0IY4nxNL7qPMF17AHWY4lsF5MLRWshThd6N8 fVFIjxCqlBTCKEi5/j4arXU67vXPkSg0OR5C9rBXMJpsTYsOOGMoS2ohobjr99NY fYWM5JQOoCHob7z9wO0wEb/lEWghPkuUAJSTXblWNX2pGjU3tkoNRrLYlK4uRLiL XuS6kfHIJ6H3Ya0pMKbPE69svwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpL6SK6 Efa7eWaHIjdU1pG8s20jMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpXIMCOz7ptS7p1FCMw8BOCRZFwo3j2FT0ZyDfY3/pBe3/N9KIE2z2 owQ2eX7FXvplDVvLCJ7PzhhCfCD38uqFMu1gotgvWqAf4bm9BvJXL3RCV4xwMla8 nVktsXuR1JJerjOY9zgct4Q/d3W8Jf7s+6u2oh7Yf4hZam+rqOsKQjVs2GbiNgt5 5Zee2kdbd0myuPPT+17mwg6E6blCz1Ee+Nw/pkfNJckUlQpQAl7JmXX8LCEZjR6q p7u3iGVBnJkxTn/7v55N+97fdhGu/UpgiIG7auvnUUDX/txGbjiDWYIerfUH/fAI Mx3PfFlK9vGcPYrKPeii1qoxQTj622Te -----END CERTIFICATE-----Generated at Tue Aug 19 22:38:27 2025 by rpki-client