$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: xq3dpVooyK+i5WhNXCEl1dbr/dK+/LHjiJCldopCqnQ= Subject key identifier: 72:73:D7:4F:66:BE:55:CA:E2:3F:E4:A8:C3:72:12:A5:A5:C9:4C:FE Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 06B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 06B2 Signing time: Wed 20 Aug 2025 22:12:43 +0000 Manifest this update: Wed 20 Aug 2025 22:12:43 +0000 Manifest next update: Wed 27 Aug 2025 22:12:43 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: MNicDe1uS05np0da2EOP2nzkAz6lyIn/lwuWoHJfYd4=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: m/HWFJ3zaTbb526BBQjKgkfjO3ab/2s+A2oNRFabdSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Aug 20 22:12:43 2025 GMT Not After : Aug 27 22:12:43 2025 GMT Subject: CN=68a6485b-c40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:46:84:d6:f7:14:33:24:bc:13:ba:45:5b:0c: b6:a9:66:84:0a:cf:b5:b9:44:35:09:fa:cf:9a:18: 14:40:01:6a:63:c0:97:43:a1:e6:13:23:fe:cb:7d: 20:e4:e7:bb:76:3e:9b:2c:4a:c8:ad:59:8d:e4:8a: cb:dd:92:03:53:5b:a0:dc:ae:dd:65:55:bc:99:d4: 98:c2:b8:35:e5:57:45:51:e8:05:15:5e:34:67:31: 94:4f:dd:bd:46:8b:34:a0:9a:f1:63:3d:2c:5d:d8: 6a:bb:5d:71:ba:81:84:3d:c9:b7:57:60:08:5c:01: 9f:68:3e:4c:a8:ae:bc:70:27:08:a4:ca:f8:8c:b3: ef:1e:08:4e:1d:e1:02:d0:69:44:5b:a1:c9:ee:6a: 3f:19:b9:b1:d1:5a:74:bf:92:d7:3d:ad:c4:f8:09: 33:42:be:cc:02:2b:13:8e:33:51:1e:67:90:e8:c3: d7:5a:a7:4f:12:70:fa:e4:62:c9:ac:9d:34:1b:1e: 95:0c:56:eb:c4:31:73:5e:66:79:e7:f5:7d:69:c4: 36:f0:1e:22:18:27:5e:72:52:f3:e5:6a:b7:db:38: 45:b2:9f:19:5d:73:c4:52:9d:cc:ca:54:ad:ea:08: 9c:7b:d6:0e:a1:a7:a4:34:ea:f5:62:f5:6a:c8:32: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:D7:4F:66:BE:55:CA:E2:3F:E4:A8:C3:72:12:A5:A5:C9:4C:FE X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9d:05:f5:c8:fe:7d:61:c7:23:e0:08:6f:ba:8c:84:55:4e: 24:e9:f7:ef:33:5b:67:9b:50:89:be:31:d9:ad:ed:c1:a9:da: d9:f2:b3:86:d1:a9:24:fd:e7:ed:1c:5d:86:9d:68:f8:74:2d: 45:cd:22:8b:1a:d9:8c:39:ad:22:70:71:5d:1c:f3:3b:9a:e2: 06:3a:ce:17:4f:bc:1b:41:ef:fe:8f:6a:80:7f:af:a0:dc:04: ef:f1:1f:2c:e4:20:15:2b:29:a1:b8:99:34:62:26:a2:8e:49: 94:9e:ba:04:51:1a:a9:4f:b5:83:07:5b:88:5e:ad:23:39:f9: 23:34:e3:66:6e:d3:63:77:c4:1e:68:5f:b4:6d:3d:f0:14:ba: 4b:bd:a1:a0:af:6d:a5:03:af:86:16:ef:e5:ca:cb:6b:8a:d7: 68:8f:87:55:ae:1b:98:7e:a3:c7:8c:f0:6d:e1:93:40:4c:d2: b3:33:54:6d:a2:5b:c4:ac:ab:2e:28:21:33:6a:c6:5b:ce:5d: 61:f5:6b:a3:3b:94:15:61:00:12:d0:c7:c6:a2:23:a8:fe:6a: c2:46:50:ab:d8:00:43:e0:a0:c9:3e:f1:2c:78:4f:25:81:c3: 20:8e:fb:62:80:25:cc:d1:b1:5f:8a:8a:f6:ee:af:d5:ab:ed: 3a:62:8e:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUwODIwMjIxMjQzWhcNMjUwODI3MjIxMjQzWjAYMRYwFAYD VQQDEw02OGE2NDg1Yi1jNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kaE1vcUMyS8E7pFWwy2qWaECs+1uUQ1CfrPmhgUQAFqY8CXQ6HmEyP+y30g 5Oe7dj6bLErIrVmN5IrL3ZIDU1ug3K7dZVW8mdSYwrg15VdFUegFFV40ZzGUT929 Ros0oJrxYz0sXdhqu11xuoGEPcm3V2AIXAGfaD5MqK68cCcIpMr4jLPvHghOHeEC 0GlEW6HJ7mo/Gbmx0Vp0v5LXPa3E+AkzQr7MAisTjjNRHmeQ6MPXWqdPEnD65GLJ rJ00Gx6VDFbrxDFzXmZ55/V9acQ28B4iGCdeclLz5Wq32zhFsp8ZXXPEUp3MylSt 6gice9YOoaekNOr1YvVqyDIJ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJz109m vlXK4j/kqMNyEqWlyUz+MB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEnQX1yP59Yccj4AhvuoyEVU4k6ffvM1tnm1CJvjHZre3BqdrZ8rOG 0akk/eftHF2GnWj4dC1FzSKLGtmMOa0icHFdHPM7muIGOs4XT7wbQe/+j2qAf6+g 3ATv8R8s5CAVKymhuJk0YiaijkmUnroEURqpT7WDB1uIXq0jOfkjNONmbtNjd8Qe aF+0bT3wFLpLvaGgr22lA6+GFu/lystritdoj4dVrhuYfqPHjPBt4ZNATNKzM1Rt olvErKsuKCEzasZbzl1h9WujO5QVYQAS0MfGoiOo/mrCRlCr2ABD4KDJPvEseE8l gcMgjvtigCXM0bFfior27q/Vq+06Yo46 -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:18 2025 by rpki-client