$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: eILuYTtKd2s1/itFx+v9zIC+1kIRgLYReIFNK+RNxBE= Subject key identifier: 4C:3F:B3:8F:1F:34:A6:EB:0A:FA:E0:C1:3A:10:DE:3E:C9:15:F5:69 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 22D0 Signing time: Mon 08 Sep 2025 15:50:39 +0000 Manifest this update: Mon 08 Sep 2025 15:50:39 +0000 Manifest next update: Mon 15 Sep 2025 15:50:39 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: F9qDsD1JLoGpZsKQU/T7XmYiJR7tkwuHC5s2mxuJVx4=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: 2SAdCKQcIWqABPUcECk5L/zG6WToDQOSztNZtA6yviw=) 3: A163C5C869A111ECA4837D28C4F9AE02.roa (hash: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8=) 4: E57A64AA165C11EABB13924AC4F9AE02.roa (hash: Kp1L9OUEsepRZk0KKmtB6S8OnLO2gE492T0DeYXHR/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8978 (0x2312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Sep 8 15:50:39 2025 GMT Not After : Sep 15 15:50:39 2025 GMT Subject: CN=68befb4f-e202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:b6:a0:72:65:c2:cd:c7:04:99:c7:11:cc: 3a:3d:05:ee:83:e1:aa:36:58:ea:cc:d3:0c:2e:f3: 2a:02:02:17:71:f1:56:c9:74:2e:5b:bb:9d:57:f6: 06:b0:75:9c:78:15:25:b9:bf:8c:2f:e7:6a:a6:1f: 88:ce:c0:03:bd:a7:ba:00:0b:6e:ba:19:7b:c7:18: eb:4f:60:9d:d3:d1:0e:d9:05:d8:ae:ab:ce:7b:64: d8:00:f0:e8:af:26:57:ce:28:ef:fa:76:ea:b2:95: 1f:de:70:3f:00:1c:cb:63:13:eb:29:67:87:0c:ec: a0:cc:28:24:33:8e:82:ec:a5:6b:80:4a:b9:1e:1d: 56:3a:49:87:46:90:47:bd:60:26:0a:85:ee:1b:c0: 24:4c:72:7b:37:2c:63:d9:62:59:ab:92:da:a9:98: c7:98:5f:7f:68:c1:f9:09:06:ad:b7:7f:3e:ee:b8: 50:51:a4:f6:05:92:95:01:70:f4:ca:0a:83:ca:a4: ed:04:12:07:48:d5:9c:5b:85:8b:46:6b:7c:34:b9: 39:45:3b:87:f7:1c:09:84:96:be:92:a7:24:46:60: 54:be:2a:4d:2f:6b:f7:ff:f0:2e:e5:43:97:4d:88: 1d:9d:bc:28:85:b3:7d:3d:51:6a:9c:fa:af:ee:65: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3F:B3:8F:1F:34:A6:EB:0A:FA:E0:C1:3A:10:DE:3E:C9:15:F5:69 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e4:f8:21:e5:e3:1a:2a:5e:31:a2:45:43:86:7c:82:16:3a: 5a:a6:5f:d4:6e:50:98:7f:8c:f7:96:68:e3:85:44:36:83:07: 08:2f:d6:21:49:de:17:48:05:44:d2:1a:59:9e:87:c2:dd:82: f4:0c:b6:38:47:4a:bc:1d:2d:ba:92:56:27:18:34:2c:c1:0e: d5:ce:d6:3a:ab:5d:d6:e6:7d:0c:7c:bb:65:fd:92:7d:bf:63: bc:f6:66:4d:6c:95:d8:0b:1f:fa:ac:ee:ed:87:47:33:79:e8: d8:ad:b1:1a:62:26:e1:d8:f7:80:27:21:a3:66:6a:cb:9e:8d: 0f:83:7c:1b:42:05:2d:e4:78:b6:84:73:18:db:22:81:58:e4: 22:70:0e:ca:2f:07:b0:a9:9f:5d:c7:9e:90:05:93:00:27:10: 14:0b:ca:3a:33:51:7f:a6:b3:03:17:6a:9f:2c:54:fd:2c:ba: 11:20:ca:20:85:f8:29:95:8f:13:5c:68:1e:dc:86:95:50:ee: a5:02:2a:a7:c0:cd:1a:d9:6f:05:76:6a:58:02:dd:54:3b:16: 16:54:7b:bf:a2:a6:7b:7b:1b:13:ce:ec:d0:4d:3f:8a:07:bb: 54:b4:2f:d7:7f:9c:54:e8:5e:33:16:d2:d9:b9:df:5d:3e:b2: 0b:f3:ca:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUwOTA4MTU1MDM5WhcNMjUwOTE1MTU1MDM5WjAYMRYwFAYD VQQDEw02OGJlZmI0Zi1lMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPa2oHJlws3HBJnHEcw6PQXug+GqNljqzNMMLvMqAgIXcfFWyXQuW7udV/YG sHWceBUlub+ML+dqph+IzsADvae6AAtuuhl7xxjrT2Cd09EO2QXYrqvOe2TYAPDo ryZXzijv+nbqspUf3nA/ABzLYxPrKWeHDOygzCgkM46C7KVrgEq5Hh1WOkmHRpBH vWAmCoXuG8AkTHJ7Nyxj2WJZq5LaqZjHmF9/aMH5CQatt38+7rhQUaT2BZKVAXD0 ygqDyqTtBBIHSNWcW4WLRmt8NLk5RTuH9xwJhJa+kqckRmBUvipNL2v3//Au5UOX TYgdnbwohbN9PVFqnPqv7mWJ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEw/s48f NKbrCvrgwToQ3j7JFfVpMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB95Pgh5eMaKl4xokVDhnyCFjpapl/UblCYf4z3lmjjhUQ2gwcIL9Yh Sd4XSAVE0hpZnofC3YL0DLY4R0q8HS26klYnGDQswQ7VztY6q13W5n0MfLtl/ZJ9 v2O89mZNbJXYCx/6rO7th0czeejYrbEaYibh2PeAJyGjZmrLno0Pg3wbQgUt5Hi2 hHMY2yKBWOQicA7KLwewqZ9dx56QBZMAJxAUC8o6M1F/prMDF2qfLFT9LLoRIMog hfgplY8TXGge3IaVUO6lAiqnwM0a2W8FdmpYAt1UOxYWVHu/oqZ7exsTzuzQTT+K B7tUtC/Xf5xU6F4zFtLZud9dPrIL88oV -----END CERTIFICATE-----Generated at Wed Sep 10 00:51:58 2025 by rpki-client