$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: f2scCn9egMy8qY3T674uR8FQItY/bTNnVlHj5KU21EQ= Subject key identifier: 5C:F2:30:70:DA:61:06:29:19:A1:12:08:21:EC:60:F8:14:4A:9C:1C Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 036D Signing time: Tue 09 Sep 2025 01:00:09 +0000 Manifest this update: Tue 09 Sep 2025 01:00:09 +0000 Manifest next update: Tue 16 Sep 2025 01:00:08 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: g4eWYbtBUR0s5YF3EUjYlfkkL7jfbqfcgOPEzfvarWc=) 2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Sep 9 01:00:09 2025 GMT Not After : Sep 16 01:00:08 2025 GMT Subject: CN=68bf7c19-3bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:61:0b:a6:dd:43:39:6c:4b:a8:2a:d3:8c: 92:62:89:be:5d:94:c8:c1:50:3b:96:17:84:78:30: 8b:8b:d3:92:ab:36:55:fb:06:97:30:df:99:a2:55: 84:99:01:1e:60:f4:8c:a0:1a:77:65:18:67:45:81: 81:f8:6a:78:16:97:52:97:95:07:ac:ae:dc:63:91: 9a:5d:e4:bd:cd:db:9e:4e:27:da:ae:34:77:95:fa: 2e:2e:fa:01:6f:cf:0f:fb:2b:ce:1a:e5:fc:fe:0d: 87:f4:44:4b:41:f9:a5:df:a0:23:0a:84:44:33:d7: fe:66:16:f7:b7:06:80:02:03:ea:8b:d5:01:c6:fd: c1:43:c8:e5:48:3f:67:30:c8:bb:4f:01:6e:b9:d9: bf:97:d2:61:14:b6:2c:3d:7c:6c:be:35:aa:54:f2: 1b:6a:e9:fe:28:82:f6:58:f3:d3:30:be:df:eb:7f: 39:6a:66:ee:c2:d6:d2:c6:a2:b4:78:25:ea:d2:b9: ce:15:77:10:b8:a7:2c:71:7b:0c:54:e3:61:06:f9: 8d:a3:51:9c:08:1a:cc:98:a1:8d:e0:2e:79:74:eb: ed:b7:26:c6:48:a7:65:2a:c6:5e:bd:0a:fe:57:c6: 93:8e:5b:b7:c9:dd:7e:51:a9:3b:65:3c:33:bf:ea: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F2:30:70:DA:61:06:29:19:A1:12:08:21:EC:60:F8:14:4A:9C:1C X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a5:07:8b:0d:1d:93:5d:38:b7:c9:5b:08:37:28:60:fb:49: df:ec:36:28:f6:13:8b:5c:db:a7:92:82:72:60:24:95:94:64: a9:a8:03:df:fc:1a:30:f1:40:ef:f4:24:23:88:31:28:5d:6d: 0b:0f:7b:3f:c2:2f:81:a2:0c:8b:24:bd:31:20:c1:62:d7:e4: 17:16:e4:a4:4f:6b:85:83:a8:99:28:12:b5:2f:6c:46:81:5e: 9c:da:ae:8d:12:7d:bf:7a:03:3c:bc:f7:f6:ff:8b:c5:66:c9: 27:b0:c3:93:42:38:72:04:a8:ba:8f:42:9c:17:43:4e:56:6a: b0:83:e4:eb:ec:ac:09:dc:4f:62:07:8d:c3:24:92:33:2d:da: 66:fb:74:bb:e6:3d:8d:7d:ea:ff:03:dc:a5:9e:3c:2e:11:b4: 54:bb:c0:f9:5c:04:2b:5f:84:38:af:e4:ca:71:25:c7:b7:fb: c2:e9:98:bc:03:24:af:a9:26:76:bc:f4:78:d9:70:21:ed:2e: da:a5:24:10:84:fc:27:d0:74:63:77:a5:1b:11:fb:f3:d7:8b: d3:83:9c:ed:a6:45:1d:4c:38:ff:4e:bd:19:c9:a8:01:05:cb: 79:b0:1f:91:28:23:a6:0d:c0:64:35:12:3f:c2:e3:58:ce:13: 3f:b5:7a:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwOTA5MDEwMDA5WhcNMjUwOTE2MDEwMDA4WjAYMRYwFAYD VQQDEw02OGJmN2MxOS0zYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQthC6bdQzlsS6gq04ySYom+XZTIwVA7lheEeDCLi9OSqzZV+waXMN+ZolWE mQEeYPSMoBp3ZRhnRYGB+Gp4FpdSl5UHrK7cY5GaXeS9zdueTifarjR3lfouLvoB b88P+yvOGuX8/g2H9ERLQfml36AjCoREM9f+Zhb3twaAAgPqi9UBxv3BQ8jlSD9n MMi7TwFuudm/l9JhFLYsPXxsvjWqVPIbaun+KIL2WPPTML7f6385ambuwtbSxqK0 eCXq0rnOFXcQuKcscXsMVONhBvmNo1GcCBrMmKGN4C55dOvttybGSKdlKsZevQr+ V8aTjlu3yd1+Uak7ZTwzv+r+UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzyMHDa YQYpGaESCCHsYPgUSpwcMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCypQeLDR2TXTi3yVsINyhg+0nf7DYo9hOLXNunkoJyYCSVlGSpqAPf /Bow8UDv9CQjiDEoXW0LD3s/wi+BogyLJL0xIMFi1+QXFuSkT2uFg6iZKBK1L2xG gV6c2q6NEn2/egM8vPf2/4vFZsknsMOTQjhyBKi6j0KcF0NOVmqwg+Tr7KwJ3E9i B43DJJIzLdpm+3S75j2Nfer/A9ylnjwuEbRUu8D5XAQrX4Q4r+TKcSXHt/vC6Zi8 AySvqSZ2vPR42XAh7S7apSQQhPwn0HRjd6UbEfvz14vTg5ztpkUdTDj/Tr0ZyagB Bct5sB+RKCOmDcBkNRI/wuNYzhM/tXoh -----END CERTIFICATE-----Generated at Tue Sep 9 14:18:15 2025 by rpki-client