$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: EIFOzfaPGssQWDbni3dZ9FsrI/tsLZZGLf8d9Yiw5Ow= Subject key identifier: 8C:D1:E2:3F:58:D8:C7:79:ED:B8:26:16:95:50:B8:8D:58:81:76:51 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 0422 Signing time: Tue 09 Sep 2025 00:31:08 +0000 Manifest this update: Tue 09 Sep 2025 00:31:07 +0000 Manifest next update: Tue 16 Sep 2025 00:31:07 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: IyVT3Ue2oQyIsWbBEFQiL8crqNpIBdSdLnyr+bb6KQM=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Sep 9 00:31:07 2025 GMT Not After : Sep 16 00:31:07 2025 GMT Subject: CN=68bf754c-944a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:7e:bd:04:16:13:38:b1:e0:93:a8:b6:c8: 60:8d:3d:76:2f:d4:ec:78:a3:47:5b:e6:35:75:52: 94:f8:2c:79:18:88:50:fa:4e:3f:a3:02:26:35:19: 15:a5:db:d8:e3:72:fa:e3:76:4f:11:72:69:9e:f2: c6:17:b0:3a:d9:22:84:68:3b:cf:c3:5e:70:9c:ea: 23:dd:a9:bd:5b:ee:d6:79:3b:85:0d:f5:7b:a5:2c: c8:1b:2c:ac:6b:fa:74:1e:35:5a:d7:7c:fc:d2:e5: a8:b8:61:8a:5e:0e:43:d2:33:c8:3e:c2:b4:ec:5d: ef:dd:3d:d0:e4:58:1e:1b:6b:95:fa:a9:0b:91:57: 50:6e:e0:99:92:9d:31:a6:1a:54:54:57:fd:38:6b: 86:b2:41:1f:52:4d:8c:e4:d3:29:91:88:28:d8:9a: 02:29:f5:c4:04:07:8a:a5:74:b8:c0:5a:0c:46:59: 75:1e:58:66:84:5d:d1:d2:c0:e3:bf:1d:c6:93:fa: 40:66:0a:a7:d9:49:12:c6:bc:71:b9:19:86:d3:92: 6c:7e:83:9e:de:ea:34:cf:6d:d8:3e:eb:60:c8:1e: ee:33:f2:d6:e1:18:7a:87:08:c0:e8:24:2e:72:39: d7:10:c4:86:2a:01:6a:7b:9d:27:94:c4:c7:19:85: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D1:E2:3F:58:D8:C7:79:ED:B8:26:16:95:50:B8:8D:58:81:76:51 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:66:68:9a:7e:bd:94:75:20:7b:c7:33:12:1a:d2:de:77:02: e5:c0:7d:84:0d:4c:8d:bf:33:af:22:5d:a0:28:c6:e7:df:9c: 5e:96:0b:76:3d:d6:17:08:ca:cc:cb:28:d9:65:83:e7:0e:ca: 9f:42:15:a0:21:26:fd:e9:31:7e:7a:9a:d6:b7:64:8d:09:92: 0f:ba:68:79:cb:60:a0:fa:56:d8:a7:5b:f8:91:bf:5f:60:0e: e2:4f:3b:34:96:a3:c2:c4:28:31:be:51:f3:fa:58:bf:ce:93: d5:40:62:92:38:1c:c7:49:50:f2:e5:90:f8:a1:b6:bc:81:60: ad:2a:87:cb:43:ec:fb:4e:18:d1:8d:94:7c:a6:1d:2c:b1:60: cb:b6:7d:00:39:0c:ca:bb:f4:21:67:ba:c0:33:ae:e6:9c:cf: bc:71:88:09:57:59:b0:7e:56:c8:80:e9:11:76:ee:59:55:2e: 2a:8b:fc:93:62:23:6d:9c:63:3a:f9:a8:69:cd:d8:69:00:94: 49:81:0d:e4:e1:76:f3:9f:aa:d9:2a:b4:4b:42:21:26:c0:63: 06:43:4c:86:8b:3b:d2:d3:78:b7:71:a3:24:c0:38:f9:f3:89: f9:59:17:7f:4b:62:37:bf:22:4c:3e:21:2e:ef:89:56:75:49: fe:da:8c:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwOTA5MDAzMTA3WhcNMjUwOTE2MDAzMTA3WjAYMRYwFAYD VQQDEw02OGJmNzU0Yy05NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLx+vQQWEzix4JOotshgjT12L9TseKNHW+Y1dVKU+Cx5GIhQ+k4/owImNRkV pdvY43L643ZPEXJpnvLGF7A62SKEaDvPw15wnOoj3am9W+7WeTuFDfV7pSzIGyys a/p0HjVa13z80uWouGGKXg5D0jPIPsK07F3v3T3Q5FgeG2uV+qkLkVdQbuCZkp0x phpUVFf9OGuGskEfUk2M5NMpkYgo2JoCKfXEBAeKpXS4wFoMRll1HlhmhF3R0sDj vx3Gk/pAZgqn2UkSxrxxuRmG05JsfoOe3uo0z23YPutgyB7uM/LW4Rh6hwjA6CQu cjnXEMSGKgFqe50nlMTHGYV9UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzR4j9Y 2Md57bgmFpVQuI1YgXZRMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKZmiafr2UdSB7xzMSGtLedwLlwH2EDUyNvzOvIl2gKMbn35xelgt2 PdYXCMrMyyjZZYPnDsqfQhWgISb96TF+eprWt2SNCZIPumh5y2Cg+lbYp1v4kb9f YA7iTzs0lqPCxCgxvlHz+li/zpPVQGKSOBzHSVDy5ZD4oba8gWCtKofLQ+z7ThjR jZR8ph0ssWDLtn0AOQzKu/QhZ7rAM67mnM+8cYgJV1mwflbIgOkRdu5ZVS4qi/yT YiNtnGM6+ahpzdhpAJRJgQ3k4Xbzn6rZKrRLQiEmwGMGQ0yGizvS03i3caMkwDj5 84n5WRd/S2I3vyJMPiEu74lWdUn+2oxI -----END CERTIFICATE-----Generated at Tue Sep 9 09:17:58 2025 by rpki-client