$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: wFFp+ww/xkzokBW4Umc/E2oeMDcsmBZpBbEeNJgmnsY= Subject key identifier: 6D:94:A1:AA:EC:8C:1C:C7:85:B1:66:2B:88:C9:95:F8:02:37:D7:91 Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: A3 Signing time: Fri 05 Sep 2025 06:43:26 +0000 Manifest this update: Fri 05 Sep 2025 06:43:25 +0000 Manifest next update: Fri 12 Sep 2025 06:43:25 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: n1XCXM5MWs+3dKJnDqqADY+sB/mOa6wV+CoPESb4xF8=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Sep 5 06:43:25 2025 GMT Not After : Sep 12 06:43:25 2025 GMT Subject: CN=68ba868d-d040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:2a:3c:a5:8c:3d:8c:c7:61:23:98:88:cb: cc:01:f8:82:31:88:08:0a:b9:8b:3c:f8:55:f3:5d: ed:c2:2d:e4:65:de:44:4f:58:52:2c:51:70:a2:84: 88:e0:95:24:df:c9:44:19:db:0b:76:80:33:a5:57: 7a:b4:5d:f5:10:c1:d4:43:9b:24:19:93:b1:d9:64: d8:e8:0d:00:bd:5a:90:33:4a:b3:bb:f7:8b:a7:2b: c0:5d:8f:84:da:67:40:5e:7b:b1:d5:66:2e:03:0a: 16:e2:4d:39:42:b2:bb:44:c9:66:b6:ba:f3:83:df: 4f:8d:ad:52:19:71:55:88:76:cd:b2:bf:7d:10:b1: b8:57:24:4d:6a:e8:4c:98:06:c5:9c:41:c7:bf:b6: 47:8f:60:68:3e:d1:cd:fc:23:06:26:34:94:49:61: 71:43:fb:48:2e:1d:0e:ad:82:6e:48:1d:d7:20:89: 7f:b0:33:16:70:ec:b1:43:d3:1e:a0:62:70:10:9d: 9c:8e:47:a6:11:78:5d:97:1c:43:06:52:14:b6:e3: 41:8d:fd:ca:e9:ab:20:80:df:29:ac:59:6c:5e:5d: da:10:e8:b0:23:04:0c:e3:15:bd:1c:97:2d:c7:c0: bd:45:ab:6b:43:97:cd:e6:f5:8b:58:f6:4a:20:69: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:94:A1:AA:EC:8C:1C:C7:85:B1:66:2B:88:C9:95:F8:02:37:D7:91 X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:60:d4:25:b3:6c:2c:07:56:bf:0f:10:73:5f:d2:e7:fd:ce: cf:c6:e1:92:a2:3b:ed:07:95:d8:66:1b:fe:a3:ca:4b:82:cd: 34:21:38:bf:55:35:c8:a0:6f:84:d9:71:fe:e8:57:da:25:69: ca:53:3b:67:8c:db:90:b1:ca:51:77:19:fd:41:06:5d:aa:71: aa:77:5c:60:17:39:53:04:8f:60:b0:72:ca:b0:a4:de:f5:13: 17:a4:53:e2:1f:f5:cb:24:f9:5b:4c:08:98:8b:eb:af:6d:b4: f0:ba:c3:02:27:7c:41:c5:40:c7:3a:88:99:8e:a0:30:36:2a: 75:14:c5:d3:35:9f:11:f9:c0:db:7b:01:1b:2b:86:fb:98:c4: 93:d2:8c:38:72:cc:f8:ab:e7:c5:38:f4:47:09:87:40:93:d6: e6:6f:41:fc:db:77:ca:bc:17:fe:66:84:60:f1:21:c2:a7:4c: 4a:38:ba:1d:46:26:5e:59:0e:8e:62:24:4c:85:6c:0e:27:12: 30:9d:c5:6e:ca:e7:ad:e8:47:e4:7b:f8:35:d9:c1:5d:23:88: 13:32:3f:84:2b:b8:00:a7:b5:f2:0f:45:55:25:a6:64:47:6a: 5f:32:be:74:9c:5a:c9:08:21:31:1f:18:94:92:80:b0:cc:74: cf:4e:2d:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy NDIyRUI2NkYwHhcNMjUwOTA1MDY0MzI1WhcNMjUwOTEyMDY0MzI1WjAYMRYwFAYD VQQDEw02OGJhODY4ZC1kMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymUqPKWMPYzHYSOYiMvMAfiCMYgICrmLPPhV813twi3kZd5ET1hSLFFwooSI 4JUk38lEGdsLdoAzpVd6tF31EMHUQ5skGZOx2WTY6A0AvVqQM0qzu/eLpyvAXY+E 2mdAXnux1WYuAwoW4k05QrK7RMlmtrrzg99Pja1SGXFViHbNsr99ELG4VyRNauhM mAbFnEHHv7ZHj2BoPtHN/CMGJjSUSWFxQ/tILh0OrYJuSB3XIIl/sDMWcOyxQ9Me oGJwEJ2cjkemEXhdlxxDBlIUtuNBjf3K6asggN8prFlsXl3aEOiwIwQM4xW9HJct x8C9RatrQ5fN5vWLWPZKIGla2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2Uoars jBzHhbFmK4jJlfgCN9eRMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0 bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51 VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZYNQls2wsB1a/DxBzX9Ln/c7PxuGSojvtB5XYZhv+o8pLgs00ITi/ VTXIoG+E2XH+6FfaJWnKUztnjNuQscpRdxn9QQZdqnGqd1xgFzlTBI9gsHLKsKTe 9RMXpFPiH/XLJPlbTAiYi+uvbbTwusMCJ3xBxUDHOoiZjqAwNip1FMXTNZ8R+cDb ewEbK4b7mMST0ow4csz4q+fFOPRHCYdAk9bmb0H823fKvBf+ZoRg8SHCp0xKOLod RiZeWQ6OYiRMhWwOJxIwncVuyuet6Efke/g12cFdI4gTMj+EK7gAp7XyD0VVJaZk R2pfMr50nFrJCCExHxiUkoCwzHTPTi0O -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:06 2025 by rpki-client