$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: o4SEh3suDQNsK+ByBlwCoW6DuX0Jq4bHejU+jYzLeMM= Subject key identifier: 2A:92:68:7F:67:81:6F:89:03:2C:C9:49:F1:83:84:04:A4:95:40:6F Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D41 Signing time: Wed 20 Aug 2025 18:06:00 +0000 Manifest this update: Wed 20 Aug 2025 18:05:59 +0000 Manifest next update: Wed 27 Aug 2025 18:05:59 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: acGNRdKjWMGbLiZU9otHTGGbYJxOwrlGPIGgHlt5aNI=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: yftNfagXlQP7kWCYM4or16TNugYWxYDf4262IfQW/IU=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Aug 20 18:05:59 2025 GMT Not After : Aug 27 18:05:59 2025 GMT Subject: CN=68a60e88-b11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:e7:58:62:a7:d3:d4:52:06:dd:a3:24:9d: 07:7d:d9:96:e9:33:23:5e:3c:04:fc:7c:7e:07:29: 3b:31:c9:8f:3b:9e:a2:50:15:fe:e8:77:8b:73:2e: 39:95:67:d3:40:71:22:bf:f3:85:06:f0:34:4a:37: c7:6c:23:8c:76:5f:ed:a1:79:bf:15:3d:0d:00:80: ac:7a:bc:61:89:f9:cc:30:dd:70:13:54:4f:c2:c8: ba:5d:8c:f8:62:70:f2:a5:8e:d0:a6:48:e0:89:66: 71:83:fa:27:fc:a4:37:73:f2:06:ea:03:7d:4a:6b: 58:72:a6:6f:5f:e9:ad:18:20:b0:9d:52:d0:f4:8a: ba:55:bf:43:75:bf:89:0a:d7:8a:86:bb:b3:ca:dd: a0:10:9f:2c:7e:8b:a2:96:c6:33:9f:ac:a1:97:a7: 7e:f6:34:4f:98:d1:49:d8:5f:47:91:b5:51:d2:61: d2:31:66:12:01:a0:5e:ad:c2:3b:05:24:3a:d5:b8: b6:3a:e5:f7:6a:17:84:f3:02:e3:96:ff:b6:59:33: 78:af:01:4b:db:6e:13:3b:e7:a1:08:3e:8d:a7:c8: 60:47:09:30:62:0f:31:a8:30:64:4e:69:6f:31:26: e5:87:b6:95:51:05:3e:63:31:ce:15:90:78:a4:44: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:68:7F:67:81:6F:89:03:2C:C9:49:F1:83:84:04:A4:95:40:6F X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:3b:bf:14:48:80:40:23:be:17:5d:2c:64:7f:f0:f2:eb:0b: 0d:7b:f2:44:08:38:df:db:c8:5e:ef:85:95:0c:49:bc:08:2f: 43:a8:61:93:ae:69:55:32:cd:79:3b:5e:8d:7c:48:ac:75:f5: c4:fa:e0:d8:8a:e5:e8:3b:59:25:f3:ae:f5:ee:a6:35:48:01: a7:09:41:90:bd:b7:c1:52:2a:eb:55:e9:39:63:70:47:14:cb: 49:60:82:bc:a7:f4:4a:6d:33:6d:39:58:5c:83:a6:83:94:20: 2b:10:59:f3:ba:5c:37:71:cf:2d:a3:6b:09:76:50:a3:dd:fa: 2b:62:40:65:29:15:92:f0:98:bf:c1:07:b6:0a:aa:28:48:e6: 0c:55:46:34:6b:d1:5c:10:e9:9e:9e:02:fc:75:f3:64:0a:33: 71:55:90:84:34:2b:13:54:be:7c:d0:2d:4c:6f:b8:c3:4f:04: 62:6d:8e:53:58:ac:dd:e6:75:48:3d:ad:ef:95:7c:e4:d7:b4: 13:ed:cf:f7:56:a6:a1:4a:cf:78:9c:65:74:e9:bf:70:24:af: 28:d5:ce:91:55:7a:dd:4e:54:ac:7f:60:aa:45:c2:9b:18:61: ea:fd:c0:d6:6a:81:35:2f:1a:33:15:ca:67:bd:43:85:a2:19: d7:e9:b9:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUwODIwMTgwNTU5WhcNMjUwODI3MTgwNTU5WjAYMRYwFAYD VQQDEw02OGE2MGU4OC1iMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTHnWGKn09RSBt2jJJ0HfdmW6TMjXjwE/Hx+Byk7McmPO56iUBX+6HeLcy45 lWfTQHEiv/OFBvA0SjfHbCOMdl/toXm/FT0NAICserxhifnMMN1wE1RPwsi6XYz4 YnDypY7QpkjgiWZxg/on/KQ3c/IG6gN9SmtYcqZvX+mtGCCwnVLQ9Iq6Vb9Ddb+J CteKhruzyt2gEJ8sfouilsYzn6yhl6d+9jRPmNFJ2F9HkbVR0mHSMWYSAaBercI7 BSQ61bi2OuX3aheE8wLjlv+2WTN4rwFL224TO+ehCD6Np8hgRwkwYg8xqDBkTmlv MSblh7aVUQU+YzHOFZB4pERpxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqSaH9n gW+JAyzJSfGDhASklUBvMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYO78USIBAI74XXSxkf/Dy6wsNe/JECDjf28he74WVDEm8CC9DqGGT rmlVMs15O16NfEisdfXE+uDYiuXoO1kl86717qY1SAGnCUGQvbfBUirrVek5Y3BH FMtJYIK8p/RKbTNtOVhcg6aDlCArEFnzulw3cc8to2sJdlCj3forYkBlKRWS8Ji/ wQe2CqooSOYMVUY0a9FcEOmengL8dfNkCjNxVZCENCsTVL580C1Mb7jDTwRibY5T WKzd5nVIPa3vlXzk17QT7c/3VqahSs94nGV06b9wJK8o1c6RVXrdTlSsf2CqRcKb GGHq/cDWaoE1LxozFcpnvUOFohnX6bn0 -----END CERTIFICATE-----Generated at Fri Aug 22 16:14:59 2025 by rpki-client