$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft File: gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json) Hash identifier: gFLRQ4AdnUtXpR3GReXlagX8CgnWVOdWuEI2xgZFHmM= Subject key identifier: AA:6F:B8:94:97:3A:90:88:33:A1:05:46:30:85:10:D6:15:BE:5A:97 Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 Certificate issuer: /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft Manifest number: DC Signing time: Thu 21 Aug 2025 05:42:10 +0000 Manifest this update: Thu 21 Aug 2025 05:42:10 +0000 Manifest next update: Thu 28 Aug 2025 05:42:10 +0000 Files and hashes: 1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: oYuLEogvmgbhYFfq4BfC2rJBCfWpeifPNjAFNGNCD5c=) 2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: KhqMoTs+Qi/II5aRP9wPpcsu1xRmCyMAj25hDB2Fy0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Validity Not Before: Aug 21 05:42:10 2025 GMT Not After : Aug 28 05:42:10 2025 GMT Subject: CN=68a6b1b2-178a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:39:b0:63:7e:39:be:68:de:17:5b:b2:e1:24: ae:c8:b0:aa:17:a0:b0:09:64:14:47:99:48:c3:52: 73:1d:e8:b5:73:ad:5c:1f:96:9e:54:5d:d5:c8:83: 73:76:ff:7f:d7:50:6f:33:49:2b:f2:ab:7f:ab:04: e9:24:b3:74:c0:b8:55:a1:8a:11:a7:56:93:0c:eb: 87:14:15:b5:7a:e2:2a:b0:19:dc:61:72:65:19:a6: 15:8e:48:fc:43:70:76:45:23:7c:0b:f1:7b:f9:1d: 90:fe:05:d4:c4:11:f1:cb:bd:c9:2b:ec:7f:22:e3: 19:11:5a:76:21:09:6d:ee:a5:85:61:cb:3d:ea:d9: 06:b8:da:79:9c:0a:54:c2:4c:b9:98:94:f4:5b:8a: 6a:d7:bf:ea:46:40:83:a3:25:0d:0b:bf:fa:c1:ec: f3:6c:25:79:0e:4d:32:3c:86:94:9e:ad:0d:ea:59: 5b:99:6e:a4:76:79:3d:10:e7:06:a2:1c:2f:ec:0e: 41:92:ec:a1:e7:ca:b1:fe:b6:98:58:70:7f:37:b4: 32:cc:20:bd:72:e3:70:32:99:ab:18:fb:f2:bd:13: a3:fc:b0:8d:9d:cf:53:8a:56:99:0c:1d:93:82:fe: 55:5a:82:c1:94:7e:b6:d1:1e:9f:f2:0f:fd:7d:91: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6F:B8:94:97:3A:90:88:33:A1:05:46:30:85:10:D6:15:BE:5A:97 X509v3 Authority Key Identifier: keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9a:e7:60:6e:e6:e1:ef:ea:8b:24:35:76:8d:54:f0:d3:cf: 03:ee:40:cb:71:a1:20:d3:ae:ef:d9:e0:2b:a9:a9:73:fe:88: 3a:a2:1a:1c:af:73:4c:84:b3:47:a8:98:98:ce:52:2b:93:c7: d9:1d:66:73:33:e6:fc:ab:14:ac:41:2a:d8:6f:b5:51:46:d9: 84:e7:79:da:6e:e8:49:f6:61:de:6d:45:a7:f6:79:ce:9f:8d: 50:f2:91:ee:37:29:23:a0:c0:e6:e5:f5:36:8c:71:d6:c5:cc: ab:6a:06:a0:d3:a5:0b:d8:1f:8e:ed:1c:6c:e4:83:65:ad:10: 63:41:93:80:92:fd:39:10:68:d5:ed:b4:b5:c0:35:90:a1:16: c7:bc:d4:ba:10:72:b0:82:b1:e8:42:6c:3b:cd:15:48:5b:d8: 08:d4:54:6d:cb:5b:09:e4:c3:d5:39:31:6d:21:77:55:f1:7d: 21:00:ac:12:e6:34:44:b1:c1:55:a0:4a:2c:55:c3:4d:3e:3f: 70:0c:21:eb:90:cf:16:45:58:87:84:4b:1a:be:d6:b2:2e:30: fb:3c:a5:4e:46:b1:6f:cb:1c:6d:35:10:e4:c9:7e:eb:92:64: 96:52:2c:bd:2c:0b:d9:9a:05:09:e1:90:bb:40:21:99:b6:03: 77:fd:54:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJFNkExMTAvBgNVBAUTKDgyMzEwMEI3NUU1REQ0MUExRTdDMzI4MUMzNTcxM0Y0 NEJFODZDOTgwHhcNMjUwODIxMDU0MjEwWhcNMjUwODI4MDU0MjEwWjAYMRYwFAYD VQQDEw02OGE2YjFiMi0xNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DmwY345vmjeF1uy4SSuyLCqF6CwCWQUR5lIw1JzHei1c61cH5aeVF3VyINz dv9/11BvM0kr8qt/qwTpJLN0wLhVoYoRp1aTDOuHFBW1euIqsBncYXJlGaYVjkj8 Q3B2RSN8C/F7+R2Q/gXUxBHxy73JK+x/IuMZEVp2IQlt7qWFYcs96tkGuNp5nApU wky5mJT0W4pq17/qRkCDoyUNC7/6wezzbCV5Dk0yPIaUnq0N6llbmW6kdnk9EOcG ohwv7A5Bkuyh58qx/raYWHB/N7QyzCC9cuNwMpmrGPvyvROj/LCNnc9TilaZDB2T gv5VWoLBlH620R6f8g/9fZFo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpvuJSX OpCIM6EFRjCFENYVvlqXMB8GA1UdIwQYMBaAFIIxALdeXdQaHnwygcNXE/RL6GyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkU2QS9BRTM3M0Q4NDMy MzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFCb2VmREtCdzFjVDlFdm9i SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqRUF0MTVkMUJvZWZES0J3MWNUOUV2b2JKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkU2QS9BRTM3M0Q4NDMyMzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFC b2VmREtCdzFjVDlFdm9iSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAumudgbubh7+qLJDV2jVTw088D7kDLcaEg067v2eArqalz/og6ohoc r3NMhLNHqJiYzlIrk8fZHWZzM+b8qxSsQSrYb7VRRtmE53nabuhJ9mHebUWn9nnO n41Q8pHuNykjoMDm5fU2jHHWxcyragag06UL2B+O7Rxs5INlrRBjQZOAkv05EGjV 7bS1wDWQoRbHvNS6EHKwgrHoQmw7zRVIW9gI1FRty1sJ5MPVOTFtIXdV8X0hAKwS 5jREscFVoEosVcNNPj9wDCHrkM8WRViHhEsavtayLjD7PKVORrFvyxxtNRDkyX7r kmSWUiy9LAvZmgUJ4ZC7QCGZtgN3/VTR -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:47 2025 by rpki-client