$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft File: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json) Hash identifier: O3B2G2brmcterob2cczm5x2seMzsRkbreVczEiPbpgM= Subject key identifier: 4D:8E:06:32:17:3C:C9:92:62:D0:40:5D:E6:AD:99:78:7D:81:F7:32 Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft Manifest number: 1C Signing time: Thu 21 Aug 2025 20:43:29 +0000 Manifest this update: Thu 21 Aug 2025 20:43:28 +0000 Manifest next update: Thu 28 Aug 2025 20:43:28 +0000 Files and hashes: 1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: aDm1ir65dF3dQAgWOu8VY/9zcven/TnhEN0vN3WTAzI=) 2: 497E9FBC7ECF11F0A0322F2AC4F9AE02.roa (hash: RHFtdnekcstpEtN6ZAsNZ6W9WthtuUvhXeY1YuxQUSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 20:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Validity Not Before: Aug 21 20:43:28 2025 GMT Not After : Aug 28 20:43:28 2025 GMT Subject: CN=68a784f1-da3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:f4:ff:d1:ab:51:8c:45:86:cc:af:11:fd: 10:ba:18:1b:26:d5:59:a3:fa:9c:c5:24:3c:b0:a4: 5b:1a:9c:c7:95:35:df:55:08:52:b1:e5:ff:fd:9a: 3b:04:aa:d3:0e:59:12:88:e2:fd:75:aa:d1:21:d8: d2:d3:4f:79:b8:b9:32:19:91:fb:38:0b:83:0c:9a: ee:39:8f:1f:28:5e:a2:37:72:3c:2d:05:c0:53:1c: f6:b0:f9:ac:ab:62:df:4d:1f:64:a2:49:c4:8b:0d: 87:de:35:9f:66:26:76:93:3a:13:b3:b6:5f:e2:1a: a2:cc:16:16:64:37:cc:41:07:b8:a3:93:cd:d9:08: e7:16:59:c6:0e:dd:bf:b4:80:47:55:cf:2e:c5:d3: 57:05:46:e0:22:6d:fe:dc:27:f9:75:28:ac:4c:c9: 11:36:44:df:68:e3:09:98:66:16:a0:8e:06:6c:36: 0a:04:e4:cd:d9:e6:b1:6f:26:38:c8:9d:67:b9:aa: 13:3e:7e:3c:49:fb:3b:e8:64:2b:21:7a:28:e7:69: 99:dd:5f:f2:89:88:01:81:27:9d:84:66:77:e4:ae: b5:10:8b:4a:f9:49:44:2a:45:6c:8f:d0:1b:ba:b8: aa:76:ca:a9:5e:84:be:ee:8c:c1:e7:7b:02:64:e4: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8E:06:32:17:3C:C9:92:62:D0:40:5D:E6:AD:99:78:7D:81:F7:32 X509v3 Authority Key Identifier: keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6a:7a:75:af:05:ab:03:d0:51:d3:78:9c:86:55:a7:2b:5e: 95:60:1d:ad:ee:02:bd:f8:5d:8e:80:4d:88:d4:55:ff:a4:0e: 8d:17:b6:6b:a7:ac:fd:87:aa:b5:18:5b:71:19:08:71:37:31: c9:6e:74:6e:7a:87:15:43:e0:41:09:c8:f0:b1:bc:12:60:22: 90:f7:cc:13:2d:aa:d2:40:86:a2:02:59:78:68:b7:95:09:5e: 47:1a:fa:c9:09:e2:65:8b:10:af:61:9c:dc:ff:fe:d9:97:0e: cb:d8:52:5f:2d:47:0f:8b:e3:78:9c:e0:8f:b7:96:a8:0f:74: 95:af:9d:74:7c:de:a0:ec:e0:c0:08:91:94:95:ab:c9:41:1e: 28:7f:a9:0f:42:98:6b:48:95:37:bd:6e:aa:bd:c5:fa:63:6f: 2c:51:fb:4f:1b:1b:b2:8f:3d:4b:a3:1f:9e:c8:60:69:52:06: c2:41:1f:45:9e:12:fe:ba:20:d5:6b:17:d7:05:8f:13:e5:b7: d3:71:f7:d6:5f:de:01:74:31:01:c1:46:f8:e8:53:54:fc:7c: 5c:e2:e8:53:40:ba:69:58:48:82:5b:5d:8b:e2:6c:58:35:05: de:d7:e8:61:48:a4:29:63:86:ca:59:db:0d:52:64:50:7b:36: d5:2d:34:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTBGNzExMC8GA1UEBRMoODJDQTEwNERDNUYyQUZGNTMzRkJGNjhDRjI5OEY0MEZC RDQ4MUYwNDAeFw0yNTA4MjEyMDQzMjhaFw0yNTA4MjgyMDQzMjhaMBgxFjAUBgNV BAMTDTY4YTc4NGYxLWRhM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBzPT/0atRjEWGzK8R/RC6GBsm1Vmj+pzFJDywpFsanMeVNd9VCFKx5f/9mjsE qtMOWRKI4v11qtEh2NLTT3m4uTIZkfs4C4MMmu45jx8oXqI3cjwtBcBTHPaw+ayr Yt9NH2SiScSLDYfeNZ9mJnaTOhOztl/iGqLMFhZkN8xBB7ijk83ZCOcWWcYO3b+0 gEdVzy7F01cFRuAibf7cJ/l1KKxMyRE2RN9o4wmYZhagjgZsNgoE5M3Z5rFvJjjI nWe5qhM+fjxJ+zvoZCsheijnaZndX/KJiAGBJ52EZnfkrrUQi0r5SUQqRWyP0Bu6 uKp2yqlehL7ujMHnewJk5HjXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTY4GMhc8 yZJi0EBd5q2ZeH2B9zIwHwYDVR0jBBgwFoAUgsoQTcXyr/Uz+/aM8pj0D71IHwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMEY3LzBEOENDOUQ2NzY2 QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3NvUVRjWHlyX1V6LV9hTThwajBENzFJSHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MEY3LzBEOENDOUQ2NzY2QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9V ei1fYU04cGowRDcxSUh3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJqenWvBasD0FHTeJyGVacrXpVgHa3uAr34XY6ATYjUVf+kDo0Xtmun rP2HqrUYW3EZCHE3McludG56hxVD4EEJyPCxvBJgIpD3zBMtqtJAhqICWXhot5UJ Xkca+skJ4mWLEK9hnNz//tmXDsvYUl8tRw+L43ic4I+3lqgPdJWvnXR83qDs4MAI kZSVq8lBHih/qQ9CmGtIlTe9bqq9xfpjbyxR+08bG7KPPUujH57IYGlSBsJBH0We Ev66INVrF9cFjxPlt9Nx99Zf3gF0MQHBRvjoU1T8fFzi6FNAumlYSIJbXYvibFg1 Bd7X6GFIpCljhspZ2w1SZFB7NtUtNEw= -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:36 2025 by rpki-client