$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft File: gyMz5kxMiwtYbe-Te7liSCG4wd8.mft (raw, json) Hash identifier: qv8uW+gcRFyEy6pvf6yvmDcO/ipM5EbmwInkaTelkg4= Subject key identifier: 93:34:D2:E1:DA:87:B1:15:50:B1:E2:78:DE:BA:29:59:BE:40:31:BC Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF Certificate issuer: /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft Manifest number: 089A Signing time: Thu 18 Sep 2025 20:48:42 +0000 Manifest this update: Thu 18 Sep 2025 20:48:42 +0000 Manifest next update: Thu 25 Sep 2025 20:48:42 +0000 Files and hashes: 1: gyMz5kxMiwtYbe-Te7liSCG4wd8.crl (hash: MCAdTjdslHQmAFQVg4CjeE13o0/zZsxlmVeqck5fVGc=) 2: 8479151EC72011EA8062547CC4F9AE02.roa (hash: zvA6nn6pR2vh2EORIjGvhMyUwOGcEaYAyPuniRtqvy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB55, serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF Validity Not Before: Sep 18 20:48:42 2025 GMT Not After : Sep 25 20:48:42 2025 GMT Subject: CN=68cc702a-9eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:7a:10:46:d5:0c:e8:80:78:3c:29:55:dd: 10:1a:a3:a8:68:0b:48:b9:83:a6:94:10:34:f8:35: fe:4b:bf:a1:58:8f:ed:dd:6f:11:f8:1e:71:03:4e: bf:d3:59:a3:d3:de:a8:cd:7f:47:19:0c:e3:da:27: 20:d1:1e:9f:3c:29:71:71:db:19:4c:6d:4f:f8:af: 86:ac:7c:5b:95:25:3f:57:24:b0:39:cc:fd:56:03: 04:a6:d2:2a:04:a7:0f:56:87:c4:4b:49:fe:ad:48: 47:ee:02:9c:e3:9b:ff:5f:86:51:9e:74:3e:9e:d2: fb:73:bd:2c:a5:04:b2:1f:66:71:7a:24:d5:53:e5: 44:a6:02:ac:62:c8:8a:27:01:23:56:68:e2:1c:69: b9:bf:3e:4d:0e:54:eb:6d:65:0f:d6:4d:f6:79:c8: 11:67:ac:e1:06:9b:02:07:eb:c5:90:d5:7c:84:7a: d3:52:53:21:bc:d1:c2:73:ec:ba:76:32:62:3a:2a: ba:4d:8a:d9:9d:1f:0d:4f:4d:a3:74:0c:59:38:3b: 44:55:25:c9:34:ee:50:32:c5:f6:5b:dc:d3:7e:9d: de:15:4e:0c:5b:5f:56:d4:26:91:42:f4:48:e8:44: 44:81:3a:78:56:2d:3e:8e:c8:b1:67:51:1f:bc:6c: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:34:D2:E1:DA:87:B1:15:50:B1:E2:78:DE:BA:29:59:BE:40:31:BC X509v3 Authority Key Identifier: keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:0e:ca:2a:f3:5f:dd:d4:22:3f:57:56:82:c1:20:b9:94:d9: 8e:55:6e:90:07:0c:64:43:10:50:5f:17:6d:bf:c8:b0:bd:f3: 94:33:61:be:69:ad:2d:45:4f:af:17:1b:31:86:d1:ae:60:a7: 7a:bb:c1:f2:aa:96:7d:32:07:4a:dd:6d:94:b7:74:a0:aa:c6: 88:5d:91:54:4a:aa:16:6e:91:12:00:04:19:b2:99:7a:e3:46: 4f:2a:3a:10:21:31:1c:d4:34:65:a8:3c:f1:31:01:9d:f4:85: 5b:df:6d:09:52:bc:1b:24:1e:3f:9e:e2:6a:7d:92:5c:40:da: 9d:23:fc:66:f4:f4:f8:e1:04:8d:2e:80:c2:0e:47:14:24:41: d7:b6:fc:b3:76:ae:e6:79:51:44:dd:56:af:de:73:d3:41:94: 7f:cc:94:b2:23:4d:92:f8:3a:34:06:8f:a9:6d:d9:97:80:86: ca:ef:ea:d9:e7:cd:55:68:44:fb:0a:cf:cc:e8:bb:40:0c:57: 5d:56:44:7a:a0:99:48:a0:fa:e8:f7:6b:9b:61:a8:51:6c:bf: 8b:95:de:01:bc:52:80:26:80:94:b2:ad:6c:20:09:d2:d9:62: 83:a9:ab:37:6a:27:ce:82:5f:c3:16:6b:3c:24:f6:5d:d0:0d: 25:49:f3:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCNTUxMTAvBgNVBAUTKDgzMjMzM0U2NEM0QzhCMEI1ODZERUY5MzdCQjk2MjQ4 MjFCOEMxREYwHhcNMjUwOTE4MjA0ODQyWhcNMjUwOTI1MjA0ODQyWjAYMRYwFAYD VQQDEw02OGNjNzAyYS05ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvN6EEbVDOiAeDwpVd0QGqOoaAtIuYOmlBA0+DX+S7+hWI/t3W8R+B5xA06/ 01mj096ozX9HGQzj2icg0R6fPClxcdsZTG1P+K+GrHxblSU/VySwOcz9VgMEptIq BKcPVofES0n+rUhH7gKc45v/X4ZRnnQ+ntL7c70spQSyH2ZxeiTVU+VEpgKsYsiK JwEjVmjiHGm5vz5NDlTrbWUP1k32ecgRZ6zhBpsCB+vFkNV8hHrTUlMhvNHCc+y6 djJiOiq6TYrZnR8NT02jdAxZODtEVSXJNO5QMsX2W9zTfp3eFU4MW19W1CaRQvRI 6EREgTp4Vi0+jsixZ1EfvGyUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM00uHa h7EVULHieN66KVm+QDG8MB8GA1UdIwQYMBaAFIMjM+ZMTIsLWG3vk3u5YkghuMHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI1NS81QUFGRDdFNkM3 MUYxMUVBOUZCMUUzNzhDNEY5QUUwMi9neU16NWt4TWl3dFliZS1UZTdsaVNDRzR3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TXo1a3hNaXd0WWJlLVRlN2xpU0NHNHdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI1NS81QUFGRDdFNkM3MUYxMUVBOUZCMUUzNzhDNEY5QUUwMi9neU16NWt4TWl3 dFliZS1UZTdsaVNDRzR3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Dsoq81/d1CI/V1aCwSC5lNmOVW6QBwxkQxBQXxdtv8iwvfOUM2G+ aa0tRU+vFxsxhtGuYKd6u8HyqpZ9MgdK3W2Ut3SgqsaIXZFUSqoWbpESAAQZspl6 40ZPKjoQITEc1DRlqDzxMQGd9IVb320JUrwbJB4/nuJqfZJcQNqdI/xm9PT44QSN LoDCDkcUJEHXtvyzdq7meVFE3Vav3nPTQZR/zJSyI02S+Do0Bo+pbdmXgIbK7+rZ 581VaET7Cs/M6LtADFddVkR6oJlIoPro92ubYahRbL+Lld4BvFKAJoCUsq1sIAnS 2WKDqas3aifOgl/DFms8JPZd0A0lSfNa -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:36 2025 by rpki-client