$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json) Hash identifier: alRJXATbyNXw1KQ74Xf3Zl7QJnXS9yEmf3CXZA8STDI= Subject key identifier: 65:A6:35:F3:05:1F:BE:22:39:48:A3:94:28:DE:5D:49:EC:6A:45:25 Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft Manifest number: 7A Signing time: Fri 05 Sep 2025 07:15:07 +0000 Manifest this update: Fri 05 Sep 2025 07:15:06 +0000 Manifest next update: Fri 12 Sep 2025 07:15:06 +0000 Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: EZm+QQFHIJC6g16TqdzJEBUk6+SYVotToTU1UR3waYU=) 2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Validity Not Before: Sep 5 07:15:06 2025 GMT Not After : Sep 12 07:15:06 2025 GMT Subject: CN=68ba8dfb-66f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:1c:84:c1:ad:09:72:d7:e5:3e:03:7d:42: 66:7f:88:0e:83:a3:5d:b5:07:c6:10:a8:7d:46:8d: b8:cb:56:57:c0:74:90:99:ba:0b:3b:2e:13:20:b2: 7e:1d:2f:bc:79:cd:fc:cc:2f:95:d9:fa:5d:b5:ef: d0:14:91:46:6b:3d:b6:88:c1:0a:76:aa:4d:13:76: 84:3d:a5:37:a9:78:da:6e:7b:84:68:4c:02:d7:cb: 5f:3a:21:ba:39:73:ca:dc:0c:51:8c:19:1b:e6:87: 36:7d:62:89:12:e3:b0:55:03:ad:a5:d1:6c:dd:ee: 29:ad:3e:d7:86:cd:e1:c8:65:e8:c9:82:fb:75:b9: 22:c7:e0:6a:4f:58:a6:01:33:9c:89:8d:7a:f3:2c: ff:fc:45:cb:8e:d6:87:b2:29:27:e3:8c:20:38:fc: b2:be:5f:f7:b1:3c:c8:04:1e:a2:d7:34:1b:55:0d: 2a:11:9f:23:bc:72:65:61:03:49:31:a2:5e:d7:4d: 77:ee:e4:a9:2b:33:d9:ff:8e:3c:68:95:a0:8f:2e: 7f:9d:43:9f:66:b5:2d:35:07:a5:77:18:54:5f:fc: f6:fd:7d:7a:86:ea:7d:de:25:4f:fc:d6:18:57:76: 03:6c:38:39:76:55:74:b5:58:ff:ab:67:f8:53:56: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A6:35:F3:05:1F:BE:22:39:48:A3:94:28:DE:5D:49:EC:6A:45:25 X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c7:c4:b8:f0:b7:f0:aa:d3:af:6a:3a:cc:10:93:26:3a:b0: 0f:94:15:78:85:f1:a1:30:f9:aa:b8:b2:64:cb:99:9e:53:d3: 54:1f:51:ac:cf:24:ef:69:90:70:76:69:40:d8:52:3b:6c:67: 7c:f0:62:ac:cb:b8:26:b4:a5:c2:8c:d8:37:59:85:b2:65:d2: 34:94:46:a4:33:b2:b8:99:9b:7c:79:f4:79:a8:e3:6f:90:4e: af:e2:d1:79:d6:ad:7e:21:46:89:8c:36:67:44:84:6d:d7:e0: b0:47:97:59:76:3c:62:b1:a6:6c:1f:45:b2:c7:89:6b:a7:90: 25:48:ca:19:90:40:27:12:98:e8:6a:48:f8:f3:40:2b:c9:93: e0:f5:5e:16:4e:3d:49:be:03:8a:07:9a:78:2a:5b:a0:b3:28: 85:7b:31:21:03:de:0c:df:a8:2d:20:a2:79:5d:66:41:4a:96: f3:d0:34:aa:1e:52:db:bb:eb:19:ca:1d:2a:5c:83:ef:44:05: 0b:cd:29:96:05:79:19:c8:8c:a4:8e:e9:fd:77:aa:72:95:8e: b3:e1:9f:9a:3a:01:f2:e1:d8:6b:68:a1:84:28:90:b3:9e:07: 61:6d:72:8d:48:56:bf:1e:e6:1d:20:e3:7e:91:1d:01:f2:3e: 43:33:10:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMUE2RUI3NUIyQjQ3MTM2MEVENUE5MjVDMzUxQ0M0MEMx OTQxNjgyNzAeFw0yNTA5MDUwNzE1MDZaFw0yNTA5MTIwNzE1MDZaMBgxFjAUBgNV BAMTDTY4YmE4ZGZiLTY2ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu4xyEwa0JctflPgN9QmZ/iA6Do121B8YQqH1GjbjLVlfAdJCZugs7LhMgsn4d L7x5zfzML5XZ+l2179AUkUZrPbaIwQp2qk0TdoQ9pTepeNpue4RoTALXy186Ibo5 c8rcDFGMGRvmhzZ9YokS47BVA62l0Wzd7imtPteGzeHIZejJgvt1uSLH4GpPWKYB M5yJjXrzLP/8RcuO1oeyKSfjjCA4/LK+X/exPMgEHqLXNBtVDSoRnyO8cmVhA0kx ol7XTXfu5KkrM9n/jjxolaCPLn+dQ59mtS01B6V3GFRf/Pb9fXqG6n3eJU/81hhX dgNsODl2VXS1WP+rZ/hTVrptAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZaY18wUf viI5SKOUKN5dSexqRSUwHwYDVR0jBBgwFoAUGm63WytHE2DtWpJcNRzEDBlBaCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzMzMDk2RUM4RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR202M1d5dEhFMkR0V3BKY05SekVEQmxCYUNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzMzMDk2RUM4RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJE dFdwSmNOUnpFREJsQmFDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDHxLjwt/Cq069qOswQkyY6sA+UFXiF8aEw+aq4smTLmZ5T01QfUazP JO9pkHB2aUDYUjtsZ3zwYqzLuCa0pcKM2DdZhbJl0jSURqQzsriZm3x59Hmo42+Q Tq/i0XnWrX4hRomMNmdEhG3X4LBHl1l2PGKxpmwfRbLHiWunkCVIyhmQQCcSmOhq SPjzQCvJk+D1XhZOPUm+A4oHmngqW6CzKIV7MSED3gzfqC0gonldZkFKlvPQNKoe Utu76xnKHSpcg+9EBQvNKZYFeRnIjKSO6f13qnKVjrPhn5o6AfLh2GtooYQokLOe B2Ftco1IVr8e5h0g436RHQHyPkMzEG4= -----END CERTIFICATE-----Generated at Sat Sep 6 20:50:00 2025 by rpki-client