$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json) Hash identifier: OM44e35+Kih2xMabkEYeFB9yXal58kNDuNr/aOjkC2E= Subject key identifier: 1B:80:6E:AE:81:48:6E:82:5F:B1:29:27:A8:2B:2D:ED:F4:F0:A8:9E Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 126C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft Manifest number: 125D Signing time: Sun 24 Aug 2025 17:04:56 +0000 Manifest this update: Sun 24 Aug 2025 17:04:55 +0000 Manifest next update: Sun 31 Aug 2025 17:04:55 +0000 Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: LuaZngBd+d1JiBCIBh6k9S/Do/jJ2zdk31Yo557lv3Q=) 2: 98281C68C74D11EFBDEB795AC4F9AE02.roa (hash: AIVNJI4ml2hm0sk+tjU7ezgPrM6ruoUwi1BLVLUi/kc=) 3: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: Vt8rrEcqNdoZ8gIKom5IDhquDR5Hs16HUvhj+aJwN/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4716 (0x126c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: Aug 24 17:04:55 2025 GMT Not After : Aug 31 17:04:55 2025 GMT Subject: CN=68ab4638-680b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:5d:1e:52:31:32:0c:bf:ee:1d:82:05:62: d8:44:5f:21:41:42:ac:70:61:32:f3:99:24:dc:6c: 69:b1:ae:f9:0e:4a:64:19:56:ae:12:52:93:bd:3f: 74:7e:ba:8d:31:ea:02:1d:4e:26:37:56:43:b2:03: 2b:9a:b9:43:9d:67:a3:82:12:7a:30:6e:18:01:06: 52:a7:56:40:18:c4:e7:0a:97:9d:46:27:0d:fc:f8: 87:c4:64:41:18:51:b9:ca:de:80:d4:1f:a1:67:49: e7:73:80:fc:ab:61:df:ce:a5:f2:ac:30:7f:2d:01: 80:18:3f:e0:70:25:6b:cb:30:02:9a:34:d3:c9:1b: 40:3e:ab:5f:5f:41:e6:ae:01:c4:5e:b8:b5:d6:33: 9c:a6:89:5e:04:4a:81:33:c5:30:1f:82:67:77:7d: 48:d2:9a:f5:6c:99:b9:d1:b7:fe:65:80:30:b0:8a: d1:92:6c:bc:d5:12:03:20:fd:c9:69:4c:60:5c:a4: e4:40:c7:9d:79:69:53:1a:da:14:4c:a2:d5:ae:af: fa:2d:6f:a9:07:c2:10:f1:50:37:0b:cd:c0:65:59: c0:89:70:ab:a0:59:4e:08:3f:b2:04:a8:ac:64:0a: 03:5a:69:59:5a:21:a5:49:24:f0:a3:ff:1c:84:a5: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:80:6E:AE:81:48:6E:82:5F:B1:29:27:A8:2B:2D:ED:F4:F0:A8:9E X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:81:3d:b8:24:a0:f1:f3:11:73:33:c2:74:cb:f8:0e:99:e2: c6:6d:64:94:13:aa:5c:03:ed:e0:21:97:1b:4f:3c:7f:97:6c: 5a:98:e5:93:89:58:bf:30:5d:0f:41:c5:06:6a:05:59:d1:99: b5:32:58:b1:1a:a5:d3:5c:7c:23:da:73:5c:62:79:ba:3d:b9: c1:25:9c:43:7d:6c:f5:fe:62:f9:2b:69:ce:a9:c1:0b:5e:99: 62:23:92:63:ec:db:48:7e:f7:ab:9e:cf:71:db:fe:19:f7:4a: 34:4d:ae:ed:66:f1:ca:65:a3:ac:ee:95:33:14:d9:83:f2:ef: 2e:95:6b:a1:2a:66:30:22:a8:6e:74:ea:07:d5:f1:a4:08:38: ae:1d:ee:a2:e1:93:f0:10:6c:3f:32:29:96:47:89:c9:7f:0b: 43:06:a3:3c:67:7e:c8:40:27:6f:76:ff:f9:ca:d4:63:c9:63: d6:29:71:e9:6d:f0:4d:2c:15:98:3f:49:a6:be:41:64:36:bc: b5:b8:48:3f:16:7d:e2:3e:50:58:11:ab:18:b3:0f:dd:32:a2: 41:ba:d6:65:2a:1b:c7:46:be:fb:64:02:d4:81:48:86:25:a7: bc:e3:bb:53:1c:cf:76:6d:c1:b9:62:03:12:d6:5f:f1:a7:dd: 3e:1a:ba:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjUwODI0MTcwNDU1WhcNMjUwODMxMTcwNDU1WjAYMRYwFAYD VQQDEw02OGFiNDYzOC02ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO1dHlIxMgy/7h2CBWLYRF8hQUKscGEy85kk3Gxpsa75DkpkGVauElKTvT90 frqNMeoCHU4mN1ZDsgMrmrlDnWejghJ6MG4YAQZSp1ZAGMTnCpedRicN/PiHxGRB GFG5yt6A1B+hZ0nnc4D8q2HfzqXyrDB/LQGAGD/gcCVryzACmjTTyRtAPqtfX0Hm rgHEXri11jOcpoleBEqBM8UwH4Jnd31I0pr1bJm50bf+ZYAwsIrRkmy81RIDIP3J aUxgXKTkQMedeWlTGtoUTKLVrq/6LW+pB8IQ8VA3C83AZVnAiXCroFlOCD+yBKis ZAoDWmlZWiGlSSTwo/8chKXQNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuAbq6B SG6CX7EpJ6grLe308KieMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4 ZzNXc2FrUDFONmhmOTZLb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBygT24JKDx8xFzM8J0y/gOmeLGbWSUE6pcA+3gIZcbTzx/l2xamOWT iVi/MF0PQcUGagVZ0Zm1MlixGqXTXHwj2nNcYnm6PbnBJZxDfWz1/mL5K2nOqcEL XpliI5Jj7NtIfverns9x2/4Z90o0Ta7tZvHKZaOs7pUzFNmD8u8ulWuhKmYwIqhu dOoH1fGkCDiuHe6i4ZPwEGw/MimWR4nJfwtDBqM8Z37IQCdvdv/5ytRjyWPWKXHp bfBNLBWYP0mmvkFkNry1uEg/Fn3iPlBYEasYsw/dMqJButZlKhvHRr77ZALUgUiG Jae847tTHM92bcG5YgMS1l/xp90+Grqa -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:27 2025 by rpki-client