$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json) Hash identifier: fq+b4mdGGYPOPST2xNCe8efidxz8YMxhoyE65JFMDRA= Subject key identifier: C3:1F:1F:03:CD:53:58:B6:66:58:05:EF:8D:C6:7B:DF:C0:6F:EA:8E Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft Manifest number: 1F Signing time: Fri 05 Sep 2025 08:22:29 +0000 Manifest this update: Fri 05 Sep 2025 08:22:28 +0000 Manifest next update: Fri 12 Sep 2025 08:22:28 +0000 Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: Gsi3pY5P9g6mJlqzKeZXj95EMmt1vxECDeb12guz6Ew=) 2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: x4FID5zbs9gmZN9FkmWfh+nLmyFuv96NIL9YO3x5RdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Validity Not Before: Sep 5 08:22:28 2025 GMT Not After : Sep 12 08:22:28 2025 GMT Subject: CN=68ba9dc4-e914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:61:98:a7:1a:1d:3c:96:9c:11:7e:43:c9: 88:6d:5f:0b:60:a1:d6:00:e7:c6:de:ad:d8:e0:61: 97:0e:07:ae:e0:91:4f:af:84:11:96:9a:f8:f6:3b: db:fe:37:f5:bb:45:03:3a:6b:d2:e7:d9:4f:27:13: 07:94:e4:97:e1:5e:df:de:c2:62:7a:90:e2:72:d2: 5b:ce:87:94:eb:e0:07:02:dd:4c:83:0a:96:b0:8d: 2d:7e:bc:36:3b:4d:d2:68:9b:c1:b3:25:7a:7d:00: 0f:9e:89:3d:b8:dc:97:d8:c9:c3:8d:31:8c:d7:8d: 31:2a:8a:1b:80:62:f3:bc:45:dc:18:70:d8:f0:cb: c9:7a:fb:e2:b6:8a:df:ab:b1:fb:40:fb:63:fe:65: 7c:d8:3d:3b:c1:a0:1b:d7:96:46:7d:1f:49:e6:8d: da:b6:69:c7:1b:64:93:eb:1c:2e:04:a0:d1:f6:fd: 07:3f:71:b3:80:6a:0f:5e:d9:b6:dc:33:b7:9e:ee: 3d:a4:3b:19:54:5d:c4:b9:2b:55:2e:15:1c:d6:70: 4a:5f:74:8a:0a:58:23:a2:8b:10:27:80:6e:2e:ac: c4:8f:14:30:43:a9:e9:24:41:a8:8d:c4:d8:4d:bc: a1:a5:76:8c:13:cc:d7:c3:d7:55:e3:88:39:34:6f: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1F:1F:03:CD:53:58:B6:66:58:05:EF:8D:C6:7B:DF:C0:6F:EA:8E X509v3 Authority Key Identifier: keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:06:08:a0:1c:1b:53:dd:f7:55:ee:e6:01:66:f7:95:f9:e7: 55:ca:d7:73:d1:a2:9e:00:e0:54:61:fd:6c:20:16:81:39:25: e0:ea:b5:bd:ca:b5:be:ab:3d:76:6d:e2:9f:db:11:50:d5:c8: c3:d6:f4:68:c4:d3:c9:93:44:fc:7f:98:d1:ec:a2:9f:ca:73: 80:d7:e8:fb:b3:62:f8:9d:e6:c1:74:34:68:57:51:1e:0c:4f: 89:3d:39:ef:1c:92:65:c3:e8:53:ea:32:e9:8c:56:3e:b8:ec: d9:7e:27:2f:b7:90:a1:e0:03:5d:0e:cd:74:38:a2:2d:58:98: c2:f8:1b:98:2e:d3:e3:57:20:76:e8:7d:20:0a:51:35:54:a3: 27:01:f4:be:64:86:b0:34:cc:a8:33:47:91:54:ac:a0:71:62: ed:60:b7:ab:70:ab:dd:60:92:c3:08:8c:d0:1e:d6:45:67:3b: 63:77:ea:29:78:7f:32:40:66:2b:3d:4a:a7:6d:92:bf:d0:83: d8:9a:f8:94:2d:90:cb:2a:92:0c:da:96:8b:05:ff:d2:e0:37: a1:a9:db:70:b3:d2:cb:b3:57:78:b7:30:97:58:9d:8c:da:9b: 4b:24:76:75:d1:d0:a2:01:0a:7c:d4:9c:6a:c6:95:c2:19:04: c3:e5:73:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFCNDY0MzE3RTlF N0FCNzBFRjAeFw0yNTA5MDUwODIyMjhaFw0yNTA5MTIwODIyMjhaMBgxFjAUBgNV BAMTDTY4YmE5ZGM0LWU5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnr2GYpxodPJacEX5DyYhtXwtgodYA58berdjgYZcOB67gkU+vhBGWmvj2O9v+ N/W7RQM6a9Ln2U8nEweU5JfhXt/ewmJ6kOJy0lvOh5Tr4AcC3UyDCpawjS1+vDY7 TdJom8GzJXp9AA+eiT243JfYycONMYzXjTEqihuAYvO8RdwYcNjwy8l6++K2it+r sftA+2P+ZXzYPTvBoBvXlkZ9H0nmjdq2accbZJPrHC4EoNH2/Qc/cbOAag9e2bbc M7ee7j2kOxlUXcS5K1UuFRzWcEpfdIoKWCOiixAngG4urMSPFDBDqekkQaiNxNhN vKGldowTzNfD11XjiDk0bxZXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwx8fA81T WLZmWAXvjcZ738Bv6o4wHwYDVR0jBBgwFoAUgmqoO74CQNE5BqurRkMX6eercO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0Y1N0QyMzMwNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ21xb083NENRTkU1QnF1clJrTVg2ZWVyY084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0Y1N0QyMzMwNURERjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5F NUJxdXJSa01YNmVlcmNPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0GCKAcG1Pd91Xu5gFm95X551XK13PRop4A4FRh/WwgFoE5JeDqtb3K tb6rPXZt4p/bEVDVyMPW9GjE08mTRPx/mNHsop/Kc4DX6PuzYvid5sF0NGhXUR4M T4k9Oe8ckmXD6FPqMumMVj647Nl+Jy+3kKHgA10OzXQ4oi1YmML4G5gu0+NXIHbo fSAKUTVUoycB9L5khrA0zKgzR5FUrKBxYu1gt6twq91gksMIjNAe1kVnO2N36il4 fzJAZis9Sqdtkr/Qg9ia+JQtkMsqkgzalosF/9LgN6Gp23Cz0suzV3i3MJdYnYza m0skdnXR0KIBCnzUnGrGlcIZBMPlc2w= -----END CERTIFICATE-----Generated at Sat Sep 6 15:24:07 2025 by rpki-client