$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: HKMvBhCMBLo5QoI7ueJxSBNR4fpLQBsxrelCHnVxieY= Subject key identifier: E8:B9:47:33:D9:67:3F:83:10:C7:FB:FD:4C:DC:A1:A0:09:F9:8B:06 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0B4C Signing time: Wed 10 Sep 2025 19:22:25 +0000 Manifest this update: Wed 10 Sep 2025 19:22:24 +0000 Manifest next update: Wed 17 Sep 2025 19:22:24 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: 2aQOXQslyyrur6g8uQD1S0jmcDqKi4B7Y1Teb77EpgE=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 4RpDGoas6qlBW19Q5SIFrbnYOe5op4thcR7lPfP6BCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 19:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Sep 10 19:22:24 2025 GMT Not After : Sep 17 19:22:24 2025 GMT Subject: CN=68c1cff1-05ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:62:82:f4:39:76:85:ea:4f:64:2b:84:1b: db:b8:b5:0f:4c:f7:d2:a4:06:ef:af:ea:1d:65:d6: 96:ba:5b:63:25:7f:f9:79:60:d6:e0:2d:1e:76:55: 7e:98:7d:54:78:5e:2b:99:ee:2b:80:43:21:11:48: c4:ea:35:6e:77:f1:21:5e:7e:84:f8:76:8f:9c:3d: b5:cb:77:63:ab:e4:c7:07:f2:95:cd:3e:63:7e:45: ff:28:96:76:fd:f9:2e:13:6d:88:66:19:7f:4e:7a: 86:8b:af:f9:a1:65:87:15:06:39:2c:0b:a4:b2:61: 31:ff:fa:7b:9b:b2:c7:15:ca:1e:fe:55:ba:b6:41: 14:2a:d7:38:5f:5c:7e:94:74:87:8e:56:29:de:34: f7:6a:25:de:03:0b:f3:c6:9a:e2:d8:88:d0:e2:bc: 69:5d:52:7c:79:61:62:56:9b:b8:3d:fb:b8:7d:6d: 48:4b:b1:ba:df:62:b8:65:55:1d:7e:08:43:79:df: 05:3e:b8:48:84:34:79:dc:c6:d6:fb:8c:6c:d5:d7: 21:a1:25:cb:66:c9:65:88:1c:8c:fa:5b:c4:cf:f5: 83:49:8b:4d:75:d3:06:33:5d:76:81:bf:ed:21:ea: 3c:f6:67:6b:c3:95:76:cd:46:89:e1:c6:c1:65:59: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B9:47:33:D9:67:3F:83:10:C7:FB:FD:4C:DC:A1:A0:09:F9:8B:06 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ab:1c:8b:0e:49:de:2e:bd:1b:5c:07:1b:e3:e0:2e:6f:4d: f0:2f:4f:e3:e6:10:41:21:28:e7:bf:5e:5a:04:a6:ce:1c:56: e0:2f:89:83:13:2a:00:bc:0f:bc:51:da:da:b5:96:3f:14:b6: 66:d0:2b:13:34:4d:16:29:57:c3:ae:6d:ab:d9:e5:02:f5:90: ff:00:02:95:29:22:c5:ab:1d:2a:b1:eb:d9:1f:54:0a:35:74: 78:52:fa:50:06:78:76:3c:b0:93:92:32:80:74:10:6f:43:26: 43:5b:1b:18:13:5b:b4:1c:3a:59:47:c6:48:66:ac:33:e1:7f: d5:d0:eb:1d:9f:1d:82:fe:60:2f:a1:a4:30:1b:b2:a6:fd:e0: fb:f2:af:2e:8f:60:e3:e6:e2:ae:7c:ac:79:36:ce:56:5c:1d: 44:fc:ff:fc:b6:18:9d:3f:4c:82:52:24:96:dc:38:01:dd:73: 14:15:d8:c8:98:10:f3:e0:15:7b:f9:5e:88:71:6a:db:26:a5: 3b:0d:aa:93:e6:26:cd:87:a1:f0:08:8d:c6:e2:45:b9:21:3f: e2:b4:bd:67:ae:c1:4a:ab:87:98:f0:cc:97:b1:fb:be:15:70: 36:83:aa:8a:09:a3:1f:d3:b3:b5:38:ae:68:62:df:9c:66:62: 51:04:00:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUwOTEwMTkyMjI0WhcNMjUwOTE3MTkyMjI0WjAYMRYwFAYD VQQDEw02OGMxY2ZmMS0wNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbZigvQ5doXqT2QrhBvbuLUPTPfSpAbvr+odZdaWultjJX/5eWDW4C0edlV+ mH1UeF4rme4rgEMhEUjE6jVud/EhXn6E+HaPnD21y3djq+THB/KVzT5jfkX/KJZ2 /fkuE22IZhl/TnqGi6/5oWWHFQY5LAuksmEx//p7m7LHFcoe/lW6tkEUKtc4X1x+ lHSHjlYp3jT3aiXeAwvzxpri2IjQ4rxpXVJ8eWFiVpu4Pfu4fW1IS7G632K4ZVUd fghDed8FPrhIhDR53MbW+4xs1dchoSXLZslliByM+lvEz/WDSYtNddMGM112gb/t Ieo89mdrw5V2zUaJ4cbBZVk6HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi5RzPZ Zz+DEMf7/UzcoaAJ+YsGMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhqxyLDkneLr0bXAcb4+Aub03wL0/j5hBBISjnv15aBKbOHFbgL4mD EyoAvA+8UdratZY/FLZm0CsTNE0WKVfDrm2r2eUC9ZD/AAKVKSLFqx0qsevZH1QK NXR4UvpQBnh2PLCTkjKAdBBvQyZDWxsYE1u0HDpZR8ZIZqwz4X/V0Osdnx2C/mAv oaQwG7Km/eD78q8uj2Dj5uKufKx5Ns5WXB1E/P/8thidP0yCUiSW3DgB3XMUFdjI mBDz4BV7+V6IcWrbJqU7DaqT5ibNh6HwCI3G4kW5IT/itL1nrsFKq4eY8MyXsfu+ FXA2g6qKCaMf07O1OK5oYt+cZmJRBAAT -----END CERTIFICATE-----Generated at Wed Sep 10 22:00:43 2025 by rpki-client