$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: cdUx+SBC+QULKmO0geAHJe+C95W+CuCqVjLi6twi9ts= Subject key identifier: 03:75:98:E2:12:6F:3D:14:9C:B2:C4:C5:63:F7:49:F8:0B:71:A2:EC Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 09C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 09BB Signing time: Thu 18 Sep 2025 20:13:50 +0000 Manifest this update: Thu 18 Sep 2025 20:13:49 +0000 Manifest next update: Thu 25 Sep 2025 20:13:49 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: GxaIN5xgldxugeK5ThvBVWft7ci26h6XwFDKoIqzJs4=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: DvSBvAVly3QEdI4AtJMEHxBNtfNAhn6C/63PWm2Ji6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Sep 18 20:13:49 2025 GMT Not After : Sep 25 20:13:49 2025 GMT Subject: CN=68cc67fe-d92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:0c:f0:0b:f1:c0:4e:13:d6:6a:e1:3f:d8: 51:19:c3:ee:8a:5b:45:46:81:89:27:3c:0e:c0:49: 5b:58:6c:0c:d0:e1:5f:3f:03:55:c1:4d:5c:25:2f: ea:d4:01:96:88:c7:d7:96:e1:16:3f:e8:6d:bf:b3: 9d:d6:34:53:b2:ab:f8:05:48:fb:20:bc:49:30:02: f9:af:bc:c8:31:8d:b5:63:bd:01:48:01:dc:8e:3f: 94:85:de:25:fb:6a:1a:6e:9c:72:30:dd:63:7e:b2: c0:2f:d1:62:90:37:9c:92:97:da:f3:52:d1:62:ec: 92:a4:09:77:5f:69:4e:e2:b5:ec:ae:e6:f5:ed:ff: 8b:ee:c6:fe:ce:b9:f4:f5:7b:dc:b8:08:d0:05:71: 36:75:d3:7f:d1:a1:50:72:cb:e3:26:55:cc:44:89: 57:eb:42:02:d6:7c:55:85:e3:cd:eb:f3:cc:a8:63: 1a:43:d2:e5:9a:4e:02:9c:75:6d:0b:95:bb:c7:b8: a3:34:e1:90:ef:47:93:27:0c:ba:1f:73:61:c8:e2: 8c:12:36:d2:5d:ee:2f:12:53:cf:17:06:d0:d8:c5: a2:ff:ce:ea:a1:b5:23:d7:05:79:15:92:eb:b1:bd: 8b:fc:60:fa:a6:66:db:0e:f7:dc:3c:18:8e:63:b9: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:75:98:E2:12:6F:3D:14:9C:B2:C4:C5:63:F7:49:F8:0B:71:A2:EC X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:55:f8:f7:d5:9f:3c:e3:68:74:62:73:db:4d:36:3c:b8:f1: b5:1f:39:e4:80:60:98:d7:0e:be:b4:f8:2f:a3:64:a9:1d:68: 49:73:6c:15:28:fb:3a:44:97:58:38:5e:43:f4:f2:d9:b7:5a: 36:d0:b5:90:7a:29:53:36:8c:d0:d9:99:cc:75:13:f6:27:de: c9:d6:65:fe:2b:44:2f:ee:2e:a4:cb:d0:79:e8:a0:02:5b:19: 5f:38:38:07:4d:ca:7f:20:06:bc:89:b8:ef:27:99:1e:4a:62: 43:55:90:07:fa:77:9f:2c:36:a1:0f:b0:32:e2:13:61:38:3a: 4b:39:9d:5d:7b:10:82:af:b1:85:e1:1e:4a:e1:9b:bb:24:07: b7:1a:d6:14:5f:d4:4c:fa:2d:5e:8b:d9:24:fc:17:6f:ba:3c: ae:b1:02:f6:d4:a8:46:64:5d:d7:c2:bc:b3:84:a4:25:bb:e5: 02:17:0b:28:32:01:17:b9:c0:c4:ab:e0:a1:31:37:9d:39:61: c2:4c:90:7d:33:ed:16:d9:bb:2b:36:0f:bf:65:39:73:cb:7e: 99:06:3f:88:d8:53:02:b0:31:e1:80:9d:d9:93:85:88:a1:90: 25:2d:98:64:cf:49:85:d2:79:cf:2d:fb:c3:95:9f:86:90:95: 0a:6c:ab:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwOTE4MjAxMzQ5WhcNMjUwOTI1MjAxMzQ5WjAYMRYwFAYD VQQDEw02OGNjNjdmZS1kOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye4M8AvxwE4T1mrhP9hRGcPuiltFRoGJJzwOwElbWGwM0OFfPwNVwU1cJS/q 1AGWiMfXluEWP+htv7Od1jRTsqv4BUj7ILxJMAL5r7zIMY21Y70BSAHcjj+Uhd4l +2oabpxyMN1jfrLAL9FikDeckpfa81LRYuySpAl3X2lO4rXsrub17f+L7sb+zrn0 9XvcuAjQBXE2ddN/0aFQcsvjJlXMRIlX60IC1nxVhePN6/PMqGMaQ9Llmk4CnHVt C5W7x7ijNOGQ70eTJwy6H3NhyOKMEjbSXe4vElPPFwbQ2MWi/87qobUj1wV5FZLr sb2L/GD6pmbbDvfcPBiOY7kU8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN1mOIS bz0UnLLExWP3SfgLcaLsMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Vfj31Z8842h0YnPbTTY8uPG1HznkgGCY1w6+tPgvo2SpHWhJc2wV KPs6RJdYOF5D9PLZt1o20LWQeilTNozQ2ZnMdRP2J97J1mX+K0Qv7i6ky9B56KAC WxlfODgHTcp/IAa8ibjvJ5keSmJDVZAH+nefLDahD7Ay4hNhODpLOZ1dexCCr7GF 4R5K4Zu7JAe3GtYUX9RM+i1ei9kk/BdvujyusQL21KhGZF3XwryzhKQlu+UCFwso MgEXucDEq+ChMTedOWHCTJB9M+0W2bsrNg+/ZTlzy36ZBj+I2FMCsDHhgJ3Zk4WI oZAlLZhkz0mF0nnPLfvDlZ+GkJUKbKul -----END CERTIFICATE-----Generated at Fri Sep 19 01:20:46 2025 by rpki-client