$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json) Hash identifier: LKpQbsnYdPJ1aPgtRdTJXK0gdH+w4xDHlM13tc5wmYo= Subject key identifier: C8:22:E1:AE:E4:9B:EF:27:EB:45:CA:0D:81:10:F3:2C:C8:5F:6D:DD Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft Manifest number: 27 Signing time: Fri 05 Sep 2025 05:43:52 +0000 Manifest this update: Fri 05 Sep 2025 05:43:52 +0000 Manifest next update: Fri 12 Sep 2025 05:43:52 +0000 Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: TbxtBPuKGE6WHDKSy7colxzDOTlehZnj5Tv8hpbih28=) 2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Validity Not Before: Sep 5 05:43:52 2025 GMT Not After : Sep 12 05:43:52 2025 GMT Subject: CN=68ba7898-a24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:75:c3:8f:23:6b:89:f3:e1:9d:56:58:a3: 5b:0f:fe:8a:f3:cd:ce:97:ae:44:88:80:2d:6e:8e: c1:3b:e7:b8:a2:03:5c:49:e5:65:d0:04:5f:1e:25: 38:e4:34:75:e3:8a:5f:38:6b:eb:ec:df:13:98:38: dd:93:70:8e:6c:bf:92:fc:2b:29:66:a8:83:9d:8e: e6:11:ee:dd:70:cf:01:0b:43:7b:eb:36:50:15:68: 6d:f5:d2:a6:5c:e6:94:1b:0f:bb:56:75:60:18:15: c6:ae:8b:d9:04:ba:4f:3d:00:40:6a:3e:28:d0:31: 28:2d:bc:d4:e6:d3:36:a2:24:24:ed:9a:03:fb:c2: c7:f5:03:bd:67:9b:c3:87:e2:47:c3:4a:ce:ed:18: 72:a0:4e:92:bf:37:05:e2:28:ae:9e:66:90:39:60: e7:4d:e1:cf:a9:67:20:64:57:61:bc:01:be:cb:c0: 1a:75:9c:cf:77:0c:6d:89:01:49:80:b5:2a:c1:40: 62:f6:90:73:f3:cd:5d:9a:ac:7c:9e:fd:0d:af:cc: f7:39:7b:24:91:5b:c0:86:ff:26:bd:20:e3:68:f9: eb:50:12:bc:f7:e3:8c:06:6c:1f:c7:39:30:1f:15: 29:fd:81:b9:63:35:34:90:2e:41:6f:fa:e9:50:24: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:22:E1:AE:E4:9B:EF:27:EB:45:CA:0D:81:10:F3:2C:C8:5F:6D:DD X509v3 Authority Key Identifier: keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:01:b9:90:2a:8f:20:1f:5f:9b:06:16:58:09:7f:d6:ef:b2: e7:92:f2:df:4b:35:3d:06:f0:55:cf:4a:14:34:32:28:3b:74: 22:58:54:8f:79:a9:61:4c:e1:d9:95:5c:bf:7d:43:70:88:0b: 34:88:88:3c:e1:68:66:e1:54:a4:f6:8b:b6:bc:8d:40:70:d6: 7f:23:ef:36:e2:f3:ec:15:5d:e0:2a:b8:d1:bb:49:e1:8b:0f: 69:30:77:44:d9:5a:cb:36:b6:ec:f8:0a:c9:cd:20:b6:55:13: ad:0e:00:97:23:80:bf:bf:73:54:d6:0a:d1:35:eb:1b:3f:ab: 3c:12:0c:da:df:ce:71:b4:98:97:22:2c:bb:73:07:6b:62:ec: 6e:fe:a5:63:1e:76:d9:6f:bb:31:d8:ab:5a:02:cb:22:bb:e1: a3:10:32:32:9b:ab:e4:b1:be:3e:df:b8:c2:c4:0d:80:6f:db: 6e:2c:51:59:a3:ce:4c:9c:8c:75:1b:cd:0d:e7:4e:9e:04:2b: de:d5:76:9d:7a:e9:0b:16:6e:e7:61:5b:33:e4:8d:c6:d8:46: 73:6f:8a:78:c6:30:5a:c2:0f:a8:b1:38:84:7d:f7:96:b9:09: 2c:ef:48:4c:e7:71:b6:9f:c7:b2:b4:e9:83:08:4f:0a:46:22: fd:6e:c6:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoODFBNjU3RUFBQzc1NTRDQUI3QTFBMjg4RjVCM0ZFRURE OEE1Q0M0QjAeFw0yNTA5MDUwNTQzNTJaFw0yNTA5MTIwNTQzNTJaMBgxFjAUBgNV BAMTDTY4YmE3ODk4LWEyNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwmXXDjyNrifPhnVZYo1sP/orzzc6XrkSIgC1ujsE757iiA1xJ5WXQBF8eJTjk NHXjil84a+vs3xOYON2TcI5sv5L8KylmqIOdjuYR7t1wzwELQ3vrNlAVaG310qZc 5pQbD7tWdWAYFcaui9kEuk89AEBqPijQMSgtvNTm0zaiJCTtmgP7wsf1A71nm8OH 4kfDSs7tGHKgTpK/NwXiKK6eZpA5YOdN4c+pZyBkV2G8Ab7LwBp1nM93DG2JAUmA tSrBQGL2kHPzzV2arHye/Q2vzPc5eySRW8CG/ya9IONo+etQErz344wGbB/HOTAf FSn9gbljNTSQLkFv+ulQJFN5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyCLhruSb 7yfrRcoNgRDzLMhfbd0wHwYDVR0jBBgwFoAUgaZX6qx1VMq3oaKI9bP+7dilzEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBLzc2MTNGMzE2NTMx MzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2FaWDZxeDFWTXEzb2FLSTliUC03ZGlsekVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBLzc2MTNGMzE2NTMxMzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1x M29hS0k5YlAtN2RpbHpFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYBuZAqjyAfX5sGFlgJf9bvsueS8t9LNT0G8FXPShQ0Mig7dCJYVI95 qWFM4dmVXL99Q3CICzSIiDzhaGbhVKT2i7a8jUBw1n8j7zbi8+wVXeAquNG7SeGL D2kwd0TZWss2tuz4CsnNILZVE60OAJcjgL+/c1TWCtE16xs/qzwSDNrfznG0mJci LLtzB2ti7G7+pWMedtlvuzHYq1oCyyK74aMQMjKbq+Sxvj7fuMLEDYBv224sUVmj zkycjHUbzQ3nTp4EK97Vdp166QsWbudhWzPkjcbYRnNvinjGMFrCD6ixOIR995a5 CSzvSEzncbafx7K06YMITwpGIv1uxiM= -----END CERTIFICATE-----Generated at Sat Sep 6 15:12:23 2025 by rpki-client