$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: TP7tNV1pbVmgqfJatjI8IDl+cAiqmMZEJXdCAPVnwGE= Subject key identifier: BC:A3:3F:D2:06:5D:03:C8:C6:52:2D:5A:9F:8D:A5:B2:BE:F6:6F:46 Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: C1 Signing time: Fri 05 Sep 2025 06:26:41 +0000 Manifest this update: Fri 05 Sep 2025 06:26:40 +0000 Manifest next update: Fri 12 Sep 2025 06:26:40 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: qgN8XlxyDaxSwLryMY/O5oRNZOcwba51Sg61bj8jMVk=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: KCUoweqEDh9jHcBtb7W3HaJWTeDZFQpve4LjGr9WIOQ=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: cAiqdNWzTF0sxkzvHv6yM/PcMz/pHk5XzQwUuq8wOgo=) 4: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: aNcYj3A/gGnj4dxbU3z5mV3zt63Nh4QrgMIUUabFzuw=) 5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: SHadC7K9t4sf0FTRuN25Sqtx5daSfJ2m5VktpFS9BJc=) 6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: he2Yg9YLqUGBktzqkNPe9zTZfzSefhfrBKHZ0mm0MXI=) 7: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: 3FjaUGxyX9keX6h1j1EjjACKPn/PD276JgWOPNcm8Oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Sep 5 06:26:40 2025 GMT Not After : Sep 12 06:26:40 2025 GMT Subject: CN=68ba82a1-8b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:13:25:e7:fe:5f:d6:35:64:f9:e2:1d:08: ce:dd:4c:e6:9b:0b:54:93:e1:77:d6:24:73:a2:0d: 22:af:37:98:d1:09:f2:7a:ae:5d:6c:7b:6b:cc:38: 81:d0:c8:b3:01:77:50:16:2e:96:56:81:92:4c:5f: b0:5a:6a:53:44:79:28:70:17:56:0e:f3:ce:4b:53: a5:ae:30:a3:8c:32:ff:05:ff:a3:86:4c:22:f5:d2: e0:ed:d6:ed:5d:d0:e6:0d:e8:4c:15:9f:d7:e7:27: be:6c:9d:19:f6:08:a5:6d:2f:08:35:6b:ea:26:d3: ec:72:fb:ff:64:d2:b0:38:66:ef:b2:f4:98:f3:ba: 3e:3e:40:56:21:40:2a:78:cb:41:aa:6d:fd:26:49: 2f:db:ea:fd:c1:9c:1e:92:de:7b:6a:56:6d:97:9e: 2d:3f:69:f8:e9:6c:fc:60:1c:08:51:1c:ca:32:e4: 73:f3:8f:a6:5d:13:c9:1f:8f:f3:bd:36:b6:66:ae: 07:3e:c6:94:00:26:1f:f5:37:b9:7a:50:f6:5a:fc: 4d:41:c2:cd:86:36:4f:7f:75:9a:7d:c0:64:00:3b: 02:11:c5:91:dc:3c:29:d6:cf:28:53:27:93:0c:4b: b9:65:18:4e:df:fd:60:bb:65:30:a8:aa:5c:e4:be: 63:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A3:3F:D2:06:5D:03:C8:C6:52:2D:5A:9F:8D:A5:B2:BE:F6:6F:46 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:cf:22:67:eb:b4:2a:e1:7c:e9:89:a1:df:de:f1:01:dc:d9: df:70:b4:bb:c3:09:45:f0:4e:50:5c:a4:9f:27:9b:98:c9:1a: ab:9f:f7:81:10:41:bb:35:41:57:31:c9:93:89:56:6c:98:60: 2c:f8:e4:8e:02:bb:5d:e0:02:4e:cd:65:ab:75:d7:ff:03:67: 6c:9d:3c:4f:10:8b:b3:1b:d9:9d:a1:58:b9:51:e8:0c:b4:59: df:c9:e0:2d:6b:5f:d0:fe:fb:92:f7:99:ce:7a:ef:42:26:d8: 1f:9d:f7:e9:a2:5d:dd:b4:0d:cd:be:68:39:63:e3:f0:a2:9a: 60:dd:3d:85:7f:d7:0a:d2:83:44:b0:35:1a:39:3a:be:5f:09: 2d:dd:8d:b8:52:9a:f7:99:85:83:d0:56:ec:53:f6:56:ab:62: ce:fd:11:e5:50:e8:a0:0c:65:df:46:43:61:ce:31:fa:f9:11: 87:63:d7:51:59:d0:4b:b4:f2:38:e4:c9:02:fa:13:1a:34:86: 4d:eb:e2:2b:e5:96:98:b7:89:a0:bf:f3:ee:bf:c9:8e:e4:4e: 42:71:0f:62:4d:26:f5:aa:d7:02:aa:bf:18:31:81:3d:39:b5: f8:e6:f1:80:19:fa:90:e7:ec:92:43:64:cc:3e:40:13:77:be: d2:7e:7f:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUwOTA1MDYyNjQwWhcNMjUwOTEyMDYyNjQwWjAYMRYwFAYD VQQDEw02OGJhODJhMS04YjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUATJef+X9Y1ZPniHQjO3UzmmwtUk+F31iRzog0irzeY0Qnyeq5dbHtrzDiB 0MizAXdQFi6WVoGSTF+wWmpTRHkocBdWDvPOS1OlrjCjjDL/Bf+jhkwi9dLg7dbt XdDmDehMFZ/X5ye+bJ0Z9gilbS8INWvqJtPscvv/ZNKwOGbvsvSY87o+PkBWIUAq eMtBqm39Jkkv2+r9wZwekt57alZtl54tP2n46Wz8YBwIURzKMuRz84+mXRPJH4/z vTa2Zq4HPsaUACYf9Te5elD2WvxNQcLNhjZPf3WafcBkADsCEcWR3Dwp1s8oUyeT DEu5ZRhO3/1gu2UwqKpc5L5jpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyjP9IG XQPIxlItWp+NpbK+9m9GMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQzyJn67Qq4XzpiaHf3vEB3NnfcLS7wwlF8E5QXKSfJ5uYyRqrn/eB EEG7NUFXMcmTiVZsmGAs+OSOArtd4AJOzWWrddf/A2dsnTxPEIuzG9mdoVi5UegM tFnfyeAta1/Q/vuS95nOeu9CJtgfnffpol3dtA3Nvmg5Y+Pwoppg3T2Ff9cK0oNE sDUaOTq+Xwkt3Y24Upr3mYWD0FbsU/ZWq2LO/RHlUOigDGXfRkNhzjH6+RGHY9dR WdBLtPI45MkC+hMaNIZN6+Ir5ZaYt4mgv/Puv8mO5E5CcQ9iTSb1qtcCqr8YMYE9 ObX45vGAGfqQ5+ySQ2TMPkATd77Sfn8J -----END CERTIFICATE-----Generated at Sat Sep 6 14:17:03 2025 by rpki-client