$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: C5iD5xww25cuaE6XnRsafv7zf1qQuN2MJhhN3k86+SY= Subject key identifier: F1:78:26:9F:DA:12:95:23:F6:3A:E8:25:E7:38:D9:74:C5:09:EE:AA Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B51 Signing time: Mon 08 Sep 2025 19:09:46 +0000 Manifest this update: Mon 08 Sep 2025 19:09:45 +0000 Manifest next update: Mon 15 Sep 2025 19:09:45 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: GioiEP2fBZTyhnDVc53uQGzSq24KP6Ort/VsFfEeNzk=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2904 (0xb58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Sep 8 19:09:45 2025 GMT Not After : Sep 15 19:09:45 2025 GMT Subject: CN=68bf29f9-8721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:46:dc:45:f9:3e:57:d9:d5:fd:07:aa:27: 26:73:b0:4d:c7:ed:18:34:27:71:08:49:94:a1:82: 3e:9a:4a:f7:fc:49:27:5f:cd:ac:d7:a0:f7:be:31: b5:42:2d:01:62:5b:69:43:71:f3:36:f1:d5:1c:e6: b1:6e:c8:d4:d5:c0:d6:8b:2b:4e:d7:41:d1:76:ff: 8a:15:51:43:33:52:ea:8d:71:c1:ea:56:a0:eb:1c: 94:66:ba:68:80:e9:22:77:02:76:c6:56:45:70:34: 0f:d4:53:fa:5c:f4:c9:66:ac:23:94:c0:ce:81:01: 25:3a:70:86:5a:88:a4:70:17:ed:8c:e4:cb:c8:4b: 9b:0f:8e:13:92:4f:e4:85:45:e8:f6:37:65:09:07: 21:74:39:4c:45:a3:0f:5f:a0:aa:fe:a9:77:d2:b6: 50:79:7d:bb:40:86:71:53:5b:f9:bd:94:eb:49:ac: da:8a:14:b8:03:44:fa:16:0a:f9:20:03:5c:94:af: 04:0b:cd:bf:0e:d1:fa:29:a0:32:7f:bc:2e:58:e2: 9e:a7:c3:3d:97:ff:c3:16:17:8a:0b:51:44:e7:8a: d7:51:4e:25:7e:a6:e0:bf:66:80:92:72:46:21:ef: f8:79:39:c8:0a:bb:52:9e:8a:3e:21:22:3f:37:73: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:78:26:9F:DA:12:95:23:F6:3A:E8:25:E7:38:D9:74:C5:09:EE:AA X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1c:72:41:ad:1d:99:e0:ec:8e:fd:ff:db:d4:7c:a5:9d:41: c5:17:17:03:10:7f:1a:b3:f6:32:a8:45:99:41:d3:7d:c5:07: 5d:cc:78:47:d4:b6:f1:4b:a3:e7:93:50:ab:b9:65:2c:f9:06: d9:2a:32:b3:60:b8:bf:0a:e0:87:ca:2b:a9:12:62:78:56:6e: 79:83:ca:ad:c8:10:53:ee:75:ad:fd:b7:6b:71:cb:57:57:5c: a9:b8:27:25:63:16:d2:b5:80:a1:63:45:9f:70:ec:63:75:d6: 51:1c:8f:22:a7:e6:01:8d:d2:00:5a:c6:0c:19:25:a9:82:ed: 3b:e1:24:97:6b:c6:62:85:c6:dc:42:27:c9:08:84:28:7a:d1: b7:c5:fc:f2:5b:f4:55:08:1d:06:12:50:18:00:0b:09:47:0e: 0f:cc:b8:b5:87:cd:c5:22:4c:70:08:ca:32:c4:35:5a:e9:86: 54:44:19:61:37:82:1e:f6:c0:9b:35:50:ed:08:c4:fd:e9:e7: 99:cb:28:44:93:43:94:3b:14:78:fa:48:a8:ff:26:b5:2d:bf: 34:aa:40:f3:5b:71:c2:d8:ed:dd:d0:cd:17:37:69:ed:36:4b: 8d:35:a5:22:6b:50:11:0e:d1:8a:e7:32:03:75:73:cd:78:b2: b0:68:6a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUwOTA4MTkwOTQ1WhcNMjUwOTE1MTkwOTQ1WjAYMRYwFAYD VQQDEw02OGJmMjlmOS04NzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWhG3EX5PlfZ1f0Hqicmc7BNx+0YNCdxCEmUoYI+mkr3/EknX82s16D3vjG1 Qi0BYltpQ3HzNvHVHOaxbsjU1cDWiytO10HRdv+KFVFDM1LqjXHB6lag6xyUZrpo gOkidwJ2xlZFcDQP1FP6XPTJZqwjlMDOgQElOnCGWoikcBftjOTLyEubD44Tkk/k hUXo9jdlCQchdDlMRaMPX6Cq/ql30rZQeX27QIZxU1v5vZTrSazaihS4A0T6Fgr5 IANclK8EC82/DtH6KaAyf7wuWOKep8M9l//DFheKC1FE54rXUU4lfqbgv2aAknJG Ie/4eTnICrtSnoo+ISI/N3ML1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF4Jp/a EpUj9jroJec42XTFCe6qMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWHHJBrR2Z4OyO/f/b1HylnUHFFxcDEH8as/YyqEWZQdN9xQddzHhH 1LbxS6Pnk1CruWUs+QbZKjKzYLi/CuCHyiupEmJ4Vm55g8qtyBBT7nWt/bdrcctX V1ypuCclYxbStYChY0WfcOxjddZRHI8ip+YBjdIAWsYMGSWpgu074SSXa8Zihcbc QifJCIQoetG3xfzyW/RVCB0GElAYAAsJRw4PzLi1h83FIkxwCMoyxDVa6YZURBlh N4Ie9sCbNVDtCMT96eeZyyhEk0OUOxR4+kio/ya1Lb80qkDzW3HC2O3d0M0XN2nt NkuNNaUia1ARDtGK5zIDdXPNeLKwaGo1 -----END CERTIFICATE-----Generated at Tue Sep 9 06:38:43 2025 by rpki-client