$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: adE4KDaZABILal5dLR38vQRojZoGiS456zZ50peX8gg= Subject key identifier: 21:03:90:70:50:98:43:E9:2C:12:FA:69:A1:AF:8A:50:F4:FE:71:09 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0C17 Signing time: Mon 08 Sep 2025 18:46:02 +0000 Manifest this update: Mon 08 Sep 2025 18:46:01 +0000 Manifest next update: Mon 15 Sep 2025 18:46:01 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: lVXTPuZ9Ie0NQun6be30WUm6sIB5epULDj5llU63Qx0=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=) 3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: CWmRoXyI8djvZbQWvBLpL+DLa+AiV1dhvDwiE3HLKt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Sep 8 18:46:01 2025 GMT Not After : Sep 15 18:46:01 2025 GMT Subject: CN=68bf246a-aaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:08:c0:95:50:67:48:c7:f6:64:5c:ae:3b: 18:af:d0:44:29:85:2c:1b:61:d0:10:e3:9f:0a:f8: cc:e7:7f:50:71:0d:c0:e0:a2:06:6a:51:65:f1:f9: 2c:de:3c:51:15:6e:e9:a2:c2:85:96:be:43:d8:4c: f1:36:81:0b:d5:d0:52:1c:66:76:56:f8:b0:a1:3b: c2:22:0e:98:d6:82:fa:83:12:7d:b1:7d:10:8f:cd: 9c:0f:a1:1a:cc:77:48:75:c5:4c:78:4b:ac:fa:3d: 00:c0:ac:b0:a6:4a:a0:3c:a3:10:ba:09:64:86:d9: 55:50:a8:5b:3f:83:39:d7:83:ce:4a:15:9e:c0:19: e0:45:6c:05:15:bc:59:a7:64:e2:0a:86:cf:48:46: 4a:24:bb:66:23:f8:da:0c:e2:a3:b0:29:20:16:6b: a6:1f:ff:2a:35:2c:0c:44:ba:6c:cc:ce:0e:5b:e3: ed:a6:f3:58:4e:89:ef:38:f7:12:d4:37:af:c9:21: a9:60:de:ab:29:27:3d:f3:8e:46:61:14:ca:cf:87: 74:61:01:59:0d:c8:3b:3b:57:4b:b8:17:a4:9b:d8: 83:c2:bc:b6:15:1c:33:a6:c0:8e:13:43:a3:42:89: 86:ef:f6:b9:dc:8d:0d:2b:0b:0a:17:dd:89:7f:f8: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:03:90:70:50:98:43:E9:2C:12:FA:69:A1:AF:8A:50:F4:FE:71:09 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ac:ad:4f:ab:ee:69:83:ca:49:ca:bb:d5:54:62:fb:d2:e6: 2d:47:18:b8:de:64:2c:02:5b:44:6a:5a:b1:c0:be:6a:e9:4d: 8a:8b:f5:2f:7c:8c:81:b6:a9:9f:65:52:68:4d:a3:20:11:03: 75:b3:77:d7:b5:de:27:8f:90:ca:40:e6:70:a2:6d:f1:48:fd: f9:fd:ff:15:01:c7:40:91:d6:56:3e:81:b4:c5:60:43:84:55: a3:48:72:f5:e1:2b:26:77:4c:18:10:78:37:11:1d:07:25:d1: c2:ca:38:2d:16:98:1b:4c:ab:26:8b:54:2a:82:ff:2d:40:1e: f6:f1:a4:bf:e2:fc:04:5b:bb:02:0a:ff:ca:5e:6d:49:46:93: 9a:fe:45:04:f2:fe:46:b6:83:af:5b:19:14:7b:17:cb:52:46: 56:53:b1:d0:d6:2d:bd:84:35:01:11:0f:c6:c3:7f:22:35:e9: 74:9c:e7:6a:98:0b:de:a1:22:52:e7:2f:52:9f:91:77:89:c7: f9:1b:ed:0b:c5:10:1e:82:6e:c8:60:78:76:bd:dc:2a:6a:34: 24:f5:af:cf:5b:81:0a:d4:ea:f8:42:ab:10:b7:c6:9e:a1:6d: fc:e1:d6:55:13:99:1c:78:f3:58:1a:ac:2b:40:cb:78:aa:ab: fc:2b:e7:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwOTA4MTg0NjAxWhcNMjUwOTE1MTg0NjAxWjAYMRYwFAYD VQQDEw02OGJmMjQ2YS1hYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU8IwJVQZ0jH9mRcrjsYr9BEKYUsG2HQEOOfCvjM539QcQ3A4KIGalFl8fks 3jxRFW7posKFlr5D2EzxNoEL1dBSHGZ2VviwoTvCIg6Y1oL6gxJ9sX0Qj82cD6Ea zHdIdcVMeEus+j0AwKywpkqgPKMQuglkhtlVUKhbP4M514POShWewBngRWwFFbxZ p2TiCobPSEZKJLtmI/jaDOKjsCkgFmumH/8qNSwMRLpszM4OW+PtpvNYTonvOPcS 1DevySGpYN6rKSc9845GYRTKz4d0YQFZDcg7O1dLuBekm9iDwry2FRwzpsCOE0Oj QomG7/a53I0NKwsKF92Jf/ioLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEDkHBQ mEPpLBL6aaGvilD0/nEJMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrK1Pq+5pg8pJyrvVVGL70uYtRxi43mQsAltEalqxwL5q6U2Ki/Uv fIyBtqmfZVJoTaMgEQN1s3fXtd4nj5DKQOZwom3xSP35/f8VAcdAkdZWPoG0xWBD hFWjSHL14Ssmd0wYEHg3ER0HJdHCyjgtFpgbTKsmi1Qqgv8tQB728aS/4vwEW7sC Cv/KXm1JRpOa/kUE8v5GtoOvWxkUexfLUkZWU7HQ1i29hDUBEQ/Gw38iNel0nOdq mAveoSJS5y9Sn5F3icf5G+0LxRAegm7IYHh2vdwqajQk9a/PW4EK1Or4QqsQt8ae oW384dZVE5kcePNYGqwrQMt4qqv8K+cW -----END CERTIFICATE-----Generated at Tue Sep 9 13:22:45 2025 by rpki-client