$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: V9F+f4xVxMMW1GU0taPpKvr7RrY1cBmkfgYVrvJx1BQ= Subject key identifier: 39:4C:93:8C:96:79:99:60:66:0B:28:93:48:CA:0B:8B:52:7A:C8:A5 Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:48:27 +0000 Manifest this update: Tue 09 Sep 2025 05:48:27 +0000 Manifest next update: Tue 16 Sep 2025 05:48:27 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: XbS3zUFW5V8wG4jvHsIMUedoLadKVYKOwpAqxW1k9TY=) 2: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (hash: DfXJNnGu5R78q4knIp+T6nbwy/V4l/65/i/LBotIC/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Sep 9 05:48:27 2025 GMT Not After : Sep 16 05:48:27 2025 GMT Subject: CN=68bfbfab-2668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:7c:b7:f6:bd:98:c0:b8:7c:c4:32:d1:06: 76:c2:4e:72:d9:97:ed:ce:0e:de:62:cd:e3:f2:c8: e0:80:a7:62:d1:c6:03:56:81:23:91:cf:a2:2d:5f: 11:51:21:2a:74:a2:b9:8f:fb:e2:66:de:43:22:8e: 91:b5:c7:1d:53:5e:72:77:fd:f4:47:61:8c:5b:8b: 34:da:0b:3a:1a:9a:7c:40:06:21:14:8a:35:57:bd: b7:2f:7a:be:55:26:4b:28:ba:c3:0b:a1:4e:54:53: a2:c0:5d:92:1d:b2:1e:90:34:46:e4:3e:2d:62:0a: ff:eb:0a:cc:fe:7d:bc:93:3a:15:b1:85:39:03:92: 37:6b:1c:2c:88:78:5f:ee:04:50:ac:fe:63:2c:98: fe:de:63:e3:d9:52:7f:e7:d5:26:3e:46:5d:6f:19: be:21:f1:dc:37:ae:6a:52:8b:56:1c:c2:97:17:88: a2:24:30:70:82:14:f1:87:01:21:8a:91:a3:d6:25: 27:30:2f:b6:6a:ff:74:a9:17:4f:ae:ef:e4:e9:52: d1:c0:30:5a:8e:b5:28:63:71:cd:48:4d:6f:7a:31: 07:f8:63:ba:0e:64:41:9c:a6:f8:09:1e:eb:91:4e: 3e:a0:af:bf:4b:68:67:ec:cf:04:44:77:6b:c7:07: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4C:93:8C:96:79:99:60:66:0B:28:93:48:CA:0B:8B:52:7A:C8:A5 X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:6f:30:35:79:62:0f:18:14:20:97:8c:10:58:c5:04:3d:9d: 46:b7:6c:d2:20:10:06:a3:d6:3a:8d:ec:4a:6e:42:53:6b:9b: 0a:a4:6d:5b:71:5f:19:08:35:7e:ef:4d:7b:f3:14:0b:cc:20: c4:9e:ac:d7:6a:07:85:e4:e6:c6:24:4e:75:08:f8:41:90:12: 5c:60:e8:3a:3d:ae:4a:76:b3:f3:e3:41:b4:08:0e:49:60:71: da:5c:e8:e9:57:e5:98:06:e6:56:d5:eb:a4:7c:85:99:d2:88: 6b:20:2b:8b:68:9f:ac:6b:7a:b2:4c:8f:dd:12:d9:76:68:41: 1d:1d:17:6e:46:9d:d3:44:4d:5d:45:c4:2b:89:d1:af:0c:9a: 17:52:e4:bd:62:90:67:64:4f:19:26:b6:58:df:d0:d8:87:05: 5d:2a:f6:08:89:a7:6a:59:c7:48:c1:fe:c0:e0:ee:57:26:a5: 35:df:0c:0b:31:36:37:cb:3a:c3:33:79:6a:cb:59:c2:97:52: 3e:ab:9b:ba:9c:6e:c6:19:cb:59:51:31:e8:6c:a5:8a:48:16: 22:93:07:b4:7e:aa:7e:ea:eb:52:85:fd:6c:85:54:cb:ca:49: 89:46:f5:fa:08:f9:12:29:ca:c4:af:45:d8:93:53:a7:0e:8e: 87:20:8d:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZGNkJBMEI2RUQ2 Q0M0MUUxMEIwHhcNMjUwOTA5MDU0ODI3WhcNMjUwOTE2MDU0ODI3WjAYMRYwFAYD VQQDEw02OGJmYmZhYi0yNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23R8t/a9mMC4fMQy0QZ2wk5y2Zftzg7eYs3j8sjggKdi0cYDVoEjkc+iLV8R USEqdKK5j/viZt5DIo6RtccdU15yd/30R2GMW4s02gs6Gpp8QAYhFIo1V723L3q+ VSZLKLrDC6FOVFOiwF2SHbIekDRG5D4tYgr/6wrM/n28kzoVsYU5A5I3axwsiHhf 7gRQrP5jLJj+3mPj2VJ/59UmPkZdbxm+IfHcN65qUotWHMKXF4iiJDBwghTxhwEh ipGj1iUnMC+2av90qRdPru/k6VLRwDBajrUoY3HNSE1vejEH+GO6DmRBnKb4CR7r kU4+oK+/S2hn7M8ERHdrxwfHvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlMk4yW eZlgZgsok0jKC4tSesilMB8GA1UdIwQYMBaAFIGZSTrSZa0txzOW9roLbtbMQeEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREMzMi8wRjA5Mjg1NDVB REUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJTM0hNNWIydWd0dTFzeEI0 UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJT M0hNNWIydWd0dTFzeEI0UXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpbzA1eWIPGBQgl4wQWMUEPZ1Gt2zSIBAGo9Y6jexKbkJTa5sKpG1b cV8ZCDV+70178xQLzCDEnqzXageF5ObGJE51CPhBkBJcYOg6Pa5KdrPz40G0CA5J YHHaXOjpV+WYBuZW1eukfIWZ0ohrICuLaJ+sa3qyTI/dEtl2aEEdHRduRp3TRE1d RcQridGvDJoXUuS9YpBnZE8ZJrZY39DYhwVdKvYIiadqWcdIwf7A4O5XJqU13wwL MTY3yzrDM3lqy1nCl1I+q5u6nG7GGctZUTHobKWKSBYikwe0fqp+6utShf1shVTL ykmJRvX6CPkSKcrEr0XYk1OnDo6HII2o -----END CERTIFICATE-----Generated at Tue Sep 9 14:19:49 2025 by rpki-client