$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft File: gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json) Hash identifier: twk1Krwpdkh1RlrNcqOhcBZ9R1rb+cH7ODxF82sPmjU= Subject key identifier: 3D:0F:5E:FE:FC:F5:95:FC:F9:86:D3:8A:19:20:FA:57:6C:04:E2:55 Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft Manifest number: 34E1 Signing time: Sun 24 Aug 2025 14:27:33 +0000 Manifest this update: Sun 24 Aug 2025 14:27:32 +0000 Manifest next update: Sun 31 Aug 2025 14:27:32 +0000 Files and hashes: 1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: spdBI37q4hXZzV3GsId+31h5ezE1wSsgsLq7fbS8W4w=) 2: 60020E9436F511F0B22B5E24C4F9AE02.roa (hash: JetDV/3YonU90g4PmXfe9VaHyV+YwCaNx8AIiUOEL+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Validity Not Before: Aug 24 14:27:32 2025 GMT Not After : Aug 31 14:27:32 2025 GMT Subject: CN=68ab2155-c86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:49:74:3c:04:f0:51:c9:5a:25:10:0f:b0: fc:e3:5f:52:c2:a1:3c:18:0d:f5:2d:87:0b:80:17: 7a:6a:ce:50:ef:86:b0:86:5b:aa:ce:4c:aa:c4:db: a3:2e:a4:8a:20:b3:00:df:19:35:70:18:e1:e8:05: a6:1f:72:27:78:ab:34:08:c1:a6:1c:c4:df:c0:8e: a6:2b:38:c1:f9:90:3d:56:3a:42:55:7a:be:c1:05: 3b:44:1f:c8:4f:ea:a4:08:b3:89:c9:c5:6e:6d:1a: 44:d1:aa:a9:7c:f2:2f:5f:eb:af:cc:12:f6:6d:bd: 9b:cc:8f:d1:a7:74:95:f2:43:7f:68:d1:b4:b8:ac: 42:e5:8b:c7:0f:b9:a0:ff:4a:e0:b5:89:dc:f1:90: 3b:b8:07:b0:32:87:1d:b1:1d:91:12:5b:7c:76:74: f4:8e:f1:df:98:9b:d9:64:2c:1f:e7:c7:9b:f0:3c: 80:dc:b4:97:f1:68:5f:01:7c:ed:8c:cf:d9:b5:f7: 10:e1:98:3d:d5:95:82:43:5e:00:b5:8d:1d:33:46: 73:a4:69:c7:e9:6e:bd:b5:1c:2f:a2:a9:04:35:23: 68:a6:0f:da:df:c9:ce:cb:2e:66:c3:42:80:ec:66: 1b:85:32:74:3f:d5:40:06:31:a7:9f:ee:71:af:1b: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0F:5E:FE:FC:F5:95:FC:F9:86:D3:8A:19:20:FA:57:6C:04:E2:55 X509v3 Authority Key Identifier: keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d8:33:8d:41:1e:b2:d3:15:c5:ed:f4:7f:ff:47:27:69:9a: 00:86:bc:97:7f:c2:dc:11:4f:80:70:80:83:cc:2c:14:cf:1c: cf:07:08:9e:4b:a7:4f:0c:b5:7d:87:30:03:61:82:1d:33:75: b8:e7:b2:05:c3:97:03:2c:ee:3e:7d:6d:65:0d:f1:09:fa:a2: c0:29:8d:60:c0:ec:c8:07:6f:8b:19:9a:49:f3:ea:cd:7b:eb: 77:0a:43:5e:ce:80:ed:56:7a:21:24:52:27:6d:80:92:35:78: a6:48:41:5f:ac:f1:a3:08:bf:2a:03:f0:8d:85:14:5b:c1:21: 47:24:30:d6:a3:73:b5:76:bd:d8:b8:84:da:b5:23:e3:66:f3: 78:b0:85:20:e8:01:7e:62:73:c2:e6:d2:8e:18:b1:50:4a:ca: b3:eb:07:d2:7a:89:69:98:95:3a:97:65:13:14:65:e0:fa:4c: ec:65:ed:7f:19:23:44:79:7d:4b:f3:33:11:64:bd:f5:03:45: 22:aa:9d:5d:c6:4f:c3:08:30:71:fe:89:5b:93:a2:3e:6a:6e: d2:2d:a0:43:c5:ed:14:e1:3b:26:76:3e:0c:29:fe:bf:d9:ba: cd:5d:6b:64:e6:64:1c:26:81:5d:ae:10:0e:2c:66:77:56:69: 90:49:ea:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0 QzQ1MzM0MDUwHhcNMjUwODI0MTQyNzMyWhcNMjUwODMxMTQyNzMyWjAYMRYwFAYD VQQDEw02OGFiMjE1NS1jODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw5JdDwE8FHJWiUQD7D8419SwqE8GA31LYcLgBd6as5Q74awhluqzkyqxNuj LqSKILMA3xk1cBjh6AWmH3IneKs0CMGmHMTfwI6mKzjB+ZA9VjpCVXq+wQU7RB/I T+qkCLOJycVubRpE0aqpfPIvX+uvzBL2bb2bzI/Rp3SV8kN/aNG0uKxC5YvHD7mg /0rgtYnc8ZA7uAewMocdsR2RElt8dnT0jvHfmJvZZCwf58eb8DyA3LSX8WhfAXzt jM/ZtfcQ4Zg91ZWCQ14AtY0dM0ZzpGnH6W69tRwvoqkENSNopg/a38nOyy5mw0KA 7GYbhTJ0P9VABjGnn+5xrxtexwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0PXv78 9ZX8+YbTihkg+ldsBOJVMB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkNGQy9CRjg0QjU3NDFEODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMy SDNFMjhKY1p2ODlNUlROQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF2DONQR6y0xXF7fR//0cnaZoAhryXf8LcEU+AcICDzCwUzxzPBwie S6dPDLV9hzADYYIdM3W457IFw5cDLO4+fW1lDfEJ+qLAKY1gwOzIB2+LGZpJ8+rN e+t3CkNezoDtVnohJFInbYCSNXimSEFfrPGjCL8qA/CNhRRbwSFHJDDWo3O1dr3Y uITatSPjZvN4sIUg6AF+YnPC5tKOGLFQSsqz6wfSeolpmJU6l2UTFGXg+kzsZe1/ GSNEeX1L8zMRZL31A0Uiqp1dxk/DCDBx/olbk6I+am7SLaBDxe0U4Tsmdj4MKf6/ 2brNXWtk5mQcJoFdrhAOLGZ3VmmQSep2 -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:07 2025 by rpki-client