$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json) Hash identifier: tRFmWf3VMXM+cYwHvlchzTmitl05tEKFmF4QFXveVZc= Subject key identifier: C9:5B:96:12:89:38:BD:7F:5C:4E:FC:37:33:60:81:EC:9A:26:42:BE Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft Manifest number: 9D Signing time: Thu 21 Aug 2025 06:31:34 +0000 Manifest this update: Thu 21 Aug 2025 06:31:34 +0000 Manifest next update: Thu 28 Aug 2025 06:31:34 +0000 Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: GxGqIufMsySo2siRfNnfsQED+KJ0bCmOZtXRBQHBtcQ=) 2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 6wPxK2kdtgMpw3LNHlmnVo9Jz/VjEWx8dJSDP8encJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Validity Not Before: Aug 21 06:31:34 2025 GMT Not After : Aug 28 06:31:34 2025 GMT Subject: CN=68a6bd46-c6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:b5:9d:7c:04:55:79:93:46:fc:59:ee:e9: e7:ca:0b:85:63:25:17:1c:4c:35:7a:33:3c:f5:f0: d1:33:58:0d:6e:97:5a:eb:55:64:8f:f2:60:1e:d8: ba:72:1c:d2:42:b0:92:85:3c:5b:7e:53:02:7a:35: 60:1f:7d:89:d4:4f:18:e4:3e:bc:8d:d4:1f:c8:e9: 66:48:e4:a3:5d:69:9b:94:cb:83:ef:2a:09:d8:ce: 97:8d:3c:89:3a:e7:2e:3f:b3:dd:ac:21:74:51:3e: 1c:fd:43:fa:d1:59:fb:64:ef:5f:30:b4:15:0d:48: a5:c4:33:82:7c:96:87:31:16:56:23:ae:83:58:02: 69:c1:01:54:c5:48:ba:2f:49:d4:ea:96:c4:b2:9f: 7f:c7:56:d5:73:fc:0e:20:9a:f5:b4:6b:75:c5:48: c9:dd:5a:b7:dc:81:0b:16:81:20:f9:d6:60:a9:0b: 56:9a:fe:cf:56:6b:a4:b0:11:50:12:e7:d0:ee:22: 93:a6:e5:4f:64:f8:e3:30:c6:7d:9f:66:33:11:04: 47:05:97:bb:b1:e7:05:76:0c:60:ae:0e:7e:ef:1f: fb:26:79:82:dd:6e:6e:15:f5:92:bf:1b:f8:8d:0f: 49:3b:01:1c:75:5c:e9:a6:fe:60:33:41:33:02:0a: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5B:96:12:89:38:BD:7F:5C:4E:FC:37:33:60:81:EC:9A:26:42:BE X509v3 Authority Key Identifier: keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9a:a0:aa:b4:9d:e1:70:20:fd:17:77:8b:dd:01:28:4d:e2: e6:9b:9a:58:5b:2e:c4:ca:35:f8:2d:14:4f:60:3b:cd:a5:da: 81:53:62:3a:fb:da:7b:53:dd:35:59:03:29:83:37:6e:17:9b: 2a:88:39:b1:9f:29:74:1d:f7:ff:ad:ed:8f:06:f6:c0:94:9c: cb:a0:8d:72:12:7c:99:12:e8:5a:24:50:bf:d7:57:b2:00:a2: de:7e:8e:10:31:6d:1d:b3:02:09:a9:f9:70:fe:7b:6d:33:58: ed:f6:10:9f:bb:aa:4e:5e:92:ca:89:62:20:b3:b9:51:51:65: 13:96:51:3e:bf:2f:f1:62:c8:a4:c9:e5:39:c6:28:25:f7:ab: 3f:61:c5:a5:5b:b4:ba:a9:dd:3a:16:fc:27:4a:0a:63:8d:c6: 17:88:39:38:88:4a:c3:0a:c8:e4:31:6c:a0:66:5c:48:24:aa: 4c:1b:86:cb:05:06:c5:35:d7:60:aa:46:a8:af:75:80:34:80: 4d:ef:65:3f:70:9c:35:c4:78:92:4f:d1:b7:22:23:3a:c2:40: 41:11:ca:eb:84:9c:63:90:f6:29:de:37:6c:56:9b:c1:7b:35: 59:13:42:75:63:c0:36:9e:3e:bd:d5:ef:18:fb:2c:83:db:74: 08:9a:29:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3MjQxMTAvBgNVBAUTKDE5NjgyOEE4MjFGNDE2QUJBOUNFQ0MzMUFBNzFBMzAz RjQyMTQ3NzgwHhcNMjUwODIxMDYzMTM0WhcNMjUwODI4MDYzMTM0WjAYMRYwFAYD VQQDEw02OGE2YmQ0Ni1jNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtC1nXwEVXmTRvxZ7unnyguFYyUXHEw1ejM89fDRM1gNbpda61Vkj/JgHti6 chzSQrCShTxbflMCejVgH32J1E8Y5D68jdQfyOlmSOSjXWmblMuD7yoJ2M6XjTyJ OucuP7PdrCF0UT4c/UP60Vn7ZO9fMLQVDUilxDOCfJaHMRZWI66DWAJpwQFUxUi6 L0nU6pbEsp9/x1bVc/wOIJr1tGt1xUjJ3Vq33IELFoEg+dZgqQtWmv7PVmuksBFQ EufQ7iKTpuVPZPjjMMZ9n2YzEQRHBZe7secFdgxgrg5+7x/7JnmC3W5uFfWSvxv4 jQ9JOwEcdVzppv5gM0EzAgrGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlblhKJ OL1/XE78NzNggeyaJkK+MB8GA1UdIwQYMBaAFBloKKgh9Barqc7MMapxowP0IUd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81RjlDNkI5Mjkw NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9HV2dvcUNIMEZxdXB6c3d4cW5HakFfUWhS M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXZ29xQ0gwRnF1cHpzd3hxbkdqQV9RaFIzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzcyNC81RjlDNkI5MjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9HV2dvcUNIMEZx dXB6c3d4cW5HakFfUWhSM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkmqCqtJ3hcCD9F3eL3QEoTeLmm5pYWy7EyjX4LRRPYDvNpdqBU2I6 +9p7U901WQMpgzduF5sqiDmxnyl0Hff/re2PBvbAlJzLoI1yEnyZEuhaJFC/11ey AKLefo4QMW0dswIJqflw/nttM1jt9hCfu6pOXpLKiWIgs7lRUWUTllE+vy/xYsik yeU5xigl96s/YcWlW7S6qd06FvwnSgpjjcYXiDk4iErDCsjkMWygZlxIJKpMG4bL BQbFNddgqkaor3WANIBN72U/cJw1xHiST9G3IiM6wkBBEcrrhJxjkPYp3jdsVpvB ezVZE0J1Y8A2nj691e8Y+yyD23QImimZ -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:17 2025 by rpki-client