$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft File: gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json) Hash identifier: QFQh5RVRiHDbbheDd7sXF3wxc/CSknPgDjGwcV5Hwlw= Subject key identifier: D8:BC:2B:E9:2D:E5:C3:4E:0C:18:A4:E4:AB:55:E0:CB:49:0B:3D:00 Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A Certificate issuer: /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft Manifest number: D1 Signing time: Wed 17 Sep 2025 06:19:29 +0000 Manifest this update: Wed 17 Sep 2025 06:19:29 +0000 Manifest next update: Wed 24 Sep 2025 06:19:29 +0000 Files and hashes: 1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: berRCKX6QOKdVcmZn56+Tz7T6bnw/DIAMn/NA0TYHcI=) 2: ECF347EC790211F0AEB6EC56C4F9AE02.roa (hash: LgOIgdmSarx/xdDFooMMCDoHTaRTWDIl0zWZh3dLWpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Validity Not Before: Sep 17 06:19:29 2025 GMT Not After : Sep 24 06:19:29 2025 GMT Subject: CN=68ca52f1-6950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:80:44:7e:e5:5f:30:ae:f6:64:8c:d7:77: 16:1d:15:1d:8c:76:ce:cc:3b:aa:43:e7:76:c0:c1: 65:65:dd:a6:00:26:72:ff:e1:16:51:ec:e3:54:fc: 48:c1:fd:38:79:16:90:d8:81:28:2d:eb:6c:05:bf: 6a:43:be:2f:27:e7:06:57:76:37:dc:47:a0:83:57: 9f:ff:83:76:39:f9:96:25:c5:3a:fd:da:9d:42:0b: 8e:df:be:d0:74:21:91:a2:e6:e5:9f:74:9c:34:99: 34:16:b3:7b:0d:a0:1b:51:35:48:7c:dc:64:85:dd: c2:ef:93:a6:a2:1b:de:fc:34:cf:5a:53:25:bf:e3: d1:ea:21:3c:9e:45:1c:f5:dd:57:7a:af:2b:9d:1e: 99:20:7d:27:57:d6:56:40:73:77:28:21:a0:db:83: a7:98:e8:3a:cf:58:55:fb:cc:8b:cb:d4:9b:d2:07: 08:ca:d8:35:83:76:0b:a8:0e:9f:f4:95:f4:fe:76: 86:d6:fb:fb:82:8c:01:3c:71:04:ab:8d:c9:37:eb: 06:72:e7:1c:4c:98:c1:c2:ae:79:be:69:c0:a7:11: 71:57:25:ec:cc:fe:a5:35:a9:e0:4a:70:6a:6c:32: 32:d0:ee:24:2d:71:5b:90:18:dc:30:2a:61:ea:95: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BC:2B:E9:2D:E5:C3:4E:0C:18:A4:E4:AB:55:E0:CB:49:0B:3D:00 X509v3 Authority Key Identifier: keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7c:49:c3:44:91:55:4b:3b:d4:36:e1:ae:6d:48:0c:57:16: 75:8c:ff:30:22:e8:86:d9:a8:09:62:31:01:bc:ba:bc:f0:fc: 5b:99:1a:6c:cd:d8:ee:93:34:a4:87:99:4c:73:b4:96:b8:8d: ae:fa:b6:c6:2d:ae:d6:fb:39:72:55:8c:0a:f9:a0:e4:11:4d: 40:13:f8:d7:cf:ba:41:a8:f0:62:c0:c5:de:0f:cd:86:0e:ef: 16:3f:3a:95:f2:fc:1e:1d:fa:2d:dd:cb:1c:0b:3e:89:d5:bd: 44:91:73:ae:6a:b6:70:89:bf:e1:29:2b:8b:51:3b:91:d3:6f: 84:6a:ba:fb:2a:bf:70:d7:de:7d:0a:74:4a:24:a0:bd:b0:5a: 6e:f2:24:ce:7d:29:8b:4c:16:31:5b:ed:5e:4f:df:be:bf:d7: de:14:cb:b7:26:65:dc:20:f9:28:af:d9:a8:48:cd:ff:1a:f5: 6e:08:ac:f5:b6:cc:62:01:c9:af:81:75:7d:e4:16:05:71:32: db:1f:60:33:7d:c3:13:be:1e:aa:93:ba:2a:ad:b0:a0:b8:77: fb:3d:f2:71:82:79:9e:80:ee:fa:e3:6e:30:f2:7f:6d:2a:66: 2c:df:d8:9c:89:f7:6f:6d:f2:e0:7f:8b:bc:2e:cc:91:69:e0: fb:3c:7d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDgzMUE4OTEzNkRFMTI3QTAwQTY5RDNFMDZGRDBEMzcx N0Y3Q0U5OUEwHhcNMjUwOTE3MDYxOTI5WhcNMjUwOTI0MDYxOTI5WjAYMRYwFAYD VQQDEw02OGNhNTJmMS02OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK+ARH7lXzCu9mSM13cWHRUdjHbOzDuqQ+d2wMFlZd2mACZy/+EWUezjVPxI wf04eRaQ2IEoLetsBb9qQ74vJ+cGV3Y33Eegg1ef/4N2OfmWJcU6/dqdQguO377Q dCGRoubln3ScNJk0FrN7DaAbUTVIfNxkhd3C75Omohve/DTPWlMlv+PR6iE8nkUc 9d1Xeq8rnR6ZIH0nV9ZWQHN3KCGg24OnmOg6z1hV+8yLy9Sb0gcIytg1g3YLqA6f 9JX0/naG1vv7gowBPHEEq43JN+sGcuccTJjBwq55vmnApxFxVyXszP6lNangSnBq bDIy0O4kLXFbkBjcMCph6pU3NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi8K+kt 5cNODBik5KtV4MtJCz0AMB8GA1UdIwQYMBaAFIMaiRNt4SegCmnT4G/Q03F/fOma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GRDNFMzg5RTVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2QUthZFBnYjlEVGNYOTg2 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GRDNFMzg5RTVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2 QUthZFBnYjlEVGNYOTg2Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBfEnDRJFVSzvUNuGubUgMVxZ1jP8wIuiG2agJYjEBvLq88PxbmRps zdjukzSkh5lMc7SWuI2u+rbGLa7W+zlyVYwK+aDkEU1AE/jXz7pBqPBiwMXeD82G Du8WPzqV8vweHfot3cscCz6J1b1EkXOuarZwib/hKSuLUTuR02+Earr7Kr9w1959 CnRKJKC9sFpu8iTOfSmLTBYxW+1eT9++v9feFMu3JmXcIPkor9moSM3/GvVuCKz1 tsxiAcmvgXV95BYFcTLbH2AzfcMTvh6qk7oqrbCguHf7PfJxgnmegO76424w8n9t KmYs39icifdvbfLgf4u8LsyRaeD7PH2T -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:52 2025 by rpki-client