$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: Q84SZR/iGsKI7ZlA6hVV1OYl/uXJuzJtQYU7NhRVuSA= Subject key identifier: 7B:A4:73:D1:40:C2:69:AB:76:36:2A:3B:91:B6:63:C4:00:AE:6F:9A Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 09DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 09CF Signing time: Sat 06 Sep 2025 20:10:52 +0000 Manifest this update: Sat 06 Sep 2025 20:10:51 +0000 Manifest next update: Sat 13 Sep 2025 20:10:51 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: XtVcz++h1okHh3HDnW9p8YllXTlwNGZFkzDIsW172ds=) 2: E09840C4D5B511EFB22A647DC4F9AE02.roa (hash: UUua9CtlmlNUMxfEXymhiloAwqTpKtC9fDGIWh1Bzk8=) 3: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: +YzJrYGnbGLCjVsOBK3rhph4HgKiBqVFBpU2hsaMvKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2523 (0x9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Sep 6 20:10:51 2025 GMT Not After : Sep 13 20:10:51 2025 GMT Subject: CN=68bc954b-2575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:69:5c:20:6d:59:0d:30:8b:87:53:ff:1c: 14:12:c6:ac:39:66:c9:1d:87:ce:e9:7e:d2:32:87: 32:68:e4:c9:e3:b7:09:da:bd:b0:e6:3c:2a:04:d9: 80:59:6f:ca:a4:ef:05:e2:de:dd:bd:0f:28:cd:a1: a0:c0:7e:80:a5:50:e2:b9:ee:48:c3:0c:8d:e1:c1: b4:f2:60:a5:fd:92:37:6f:18:14:6b:e8:00:cb:0e: 16:1e:4b:75:a1:48:56:aa:e8:15:25:83:40:e7:14: 4c:a1:0d:c7:39:94:af:d7:6a:9d:0f:e1:49:92:4a: f8:03:a6:a7:c3:3b:c1:e7:50:5f:27:67:3e:1f:52: 99:03:05:3a:b8:e6:47:ef:18:8d:9f:5b:ef:64:00: 1b:e7:bb:ae:bd:1d:e9:fd:dd:fe:7d:25:d4:7d:c6: c4:fe:46:ec:31:ca:42:97:4b:e4:8c:b1:51:b7:18: 64:99:ea:54:53:ef:bc:05:82:7f:f5:6a:c3:49:3c: a5:f6:54:15:58:14:fd:28:3b:f0:ed:cb:7e:2e:0d: df:07:a4:31:f8:12:7a:d8:52:81:cf:73:df:62:01: b0:d3:b3:3a:e9:55:c7:ee:d6:84:64:cb:86:f0:54: 87:32:64:87:cb:3b:9a:0f:23:77:e0:96:b9:f6:7c: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A4:73:D1:40:C2:69:AB:76:36:2A:3B:91:B6:63:C4:00:AE:6F:9A X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:42:65:df:d4:15:db:ce:9c:8e:22:c7:88:23:81:f6:9b:23: 67:3d:a2:36:9b:2e:31:6b:15:87:4e:68:f1:89:bb:89:e0:e8: d1:64:49:5f:79:b8:14:c9:f8:e4:be:6f:25:51:9c:95:b0:40: f1:49:17:f6:05:92:df:17:d8:b6:7f:89:0f:8b:ee:c9:38:a7: c6:bf:47:a5:49:4e:65:df:58:77:cc:bd:15:10:52:01:ed:a3: b2:5c:25:9c:3d:de:d0:23:51:7a:1c:47:33:fa:c4:aa:ca:a2: 4e:e8:3f:92:47:87:56:95:c7:43:c1:b7:c4:b7:32:1f:06:9a: 09:e8:cc:dd:72:d8:d8:03:94:70:8d:c1:01:62:81:09:ae:43: ce:be:d1:44:5a:01:40:22:71:45:83:f4:13:c7:84:bc:70:5b: 47:bf:ff:36:54:7b:4d:85:4a:64:f0:e9:c9:54:69:e9:6c:af: f7:be:ee:4c:70:a9:fc:81:10:8f:b2:f9:a0:9b:58:7c:58:9d: 59:c8:31:d2:6f:cf:d9:83:65:08:bf:e1:c1:b6:9b:98:c4:4f: 7c:12:fa:25:fd:42:e3:24:41:65:f6:29:93:e3:f1:2b:77:9f: 0f:a6:6f:b9:4b:f2:d8:d8:68:87:46:33:dd:e1:6c:6f:7d:b0: ac:59:0f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUwOTA2MjAxMDUxWhcNMjUwOTEzMjAxMDUxWjAYMRYwFAYD VQQDEw02OGJjOTU0Yi0yNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MtpXCBtWQ0wi4dT/xwUEsasOWbJHYfO6X7SMocyaOTJ47cJ2r2w5jwqBNmA WW/KpO8F4t7dvQ8ozaGgwH6ApVDiue5IwwyN4cG08mCl/ZI3bxgUa+gAyw4WHkt1 oUhWqugVJYNA5xRMoQ3HOZSv12qdD+FJkkr4A6anwzvB51BfJ2c+H1KZAwU6uOZH 7xiNn1vvZAAb57uuvR3p/d3+fSXUfcbE/kbsMcpCl0vkjLFRtxhkmepUU++8BYJ/ 9WrDSTyl9lQVWBT9KDvw7ct+Lg3fB6Qx+BJ62FKBz3PfYgGw07M66VXH7taEZMuG 8FSHMmSHyzuaDyN34Ja59nyXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHukc9FA wmmrdjYqO5G2Y8QArm+aMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmQmXf1BXbzpyOIseII4H2myNnPaI2my4xaxWHTmjxibuJ4OjRZElf ebgUyfjkvm8lUZyVsEDxSRf2BZLfF9i2f4kPi+7JOKfGv0elSU5l31h3zL0VEFIB 7aOyXCWcPd7QI1F6HEcz+sSqyqJO6D+SR4dWlcdDwbfEtzIfBpoJ6MzdctjYA5Rw jcEBYoEJrkPOvtFEWgFAInFFg/QTx4S8cFtHv/82VHtNhUpk8OnJVGnpbK/3vu5M cKn8gRCPsvmgm1h8WJ1ZyDHSb8/Zg2UIv+HBtpuYxE98Evol/ULjJEFl9imT4/Er d58Ppm+5S/LY2GiHRjPd4WxvfbCsWQ// -----END CERTIFICATE-----Generated at Mon Sep 8 02:20:14 2025 by rpki-client