$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft File: G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json) Hash identifier: a7l7lUmsDwGtbqJ9tJwEjsyHquUML/uQ38D4kC7XWYQ= Subject key identifier: EC:A5:A1:64:59:EA:37:4D:34:51:F0:F0:AD:D5:8E:5E:4B:66:1D:28 Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft Manifest number: 0BF5 Signing time: Fri 22 Aug 2025 18:57:21 +0000 Manifest this update: Fri 22 Aug 2025 18:57:20 +0000 Manifest next update: Fri 29 Aug 2025 18:57:20 +0000 Files and hashes: 1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: oN4d6bLzLHq46Mvhyco/oyLafCvVUydefFbO1o6Zcuk=) 2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: j4q/tAbU5GnUtv3RJxFUk0GDbMAP6oPzZx57GUeGw58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Aug 22 18:57:20 2025 GMT Not After : Aug 29 18:57:20 2025 GMT Subject: CN=68a8bd90-b446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:92:5b:fd:fc:c4:58:41:32:a9:97:a3:84: 6f:31:29:86:a5:3a:0e:93:83:b4:c9:b0:cf:64:13: 9f:99:8e:5b:9c:c4:fc:0d:14:98:90:d1:28:a3:9a: fe:f2:80:87:96:76:ec:ef:97:bd:3d:95:56:9c:0d: f8:6a:e5:c3:cc:3a:f8:49:6e:23:cb:42:07:58:db: bf:74:b0:87:08:0a:0e:f6:29:d7:28:92:30:bd:f0: e7:a0:90:c5:7f:58:88:4b:6b:8b:2d:12:e4:d4:97: cd:e7:4b:18:60:d5:a9:ae:7d:7a:81:4b:94:a3:c1: 00:a2:53:dc:53:a1:b0:2a:86:c4:8f:5a:0b:61:69: 40:87:82:48:8a:78:a3:30:03:96:5b:97:57:c9:d9: 24:c4:41:39:1d:56:0d:a3:bd:d0:f6:37:d6:60:11: 0d:ee:ac:5f:59:de:d1:8f:8c:10:70:1b:56:44:e4: 8e:ed:ed:06:1d:98:87:5e:b1:c2:23:35:d8:2c:d8: 4e:28:31:14:58:15:0c:10:e6:d9:3f:05:9a:a5:36: eb:5f:b7:be:78:6a:7c:6c:ee:c7:9b:70:fa:77:d4: 6f:8d:ca:12:e4:00:6c:85:9b:f4:1b:6d:f1:30:57: b1:85:0a:91:1b:0f:b3:db:94:e6:66:3b:3b:71:02: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A5:A1:64:59:EA:37:4D:34:51:F0:F0:AD:D5:8E:5E:4B:66:1D:28 X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:27:6f:86:b7:e7:3e:fd:2a:7e:be:76:45:ef:37:f0:d8:39: d9:fd:72:90:67:d6:2c:d4:0e:1c:9d:2b:53:80:8e:4e:1b:fd: 45:b3:71:57:09:01:9e:08:4d:ad:e1:c8:d4:28:e9:52:a9:31: 2c:6e:f4:32:9d:7d:8f:3c:4c:f6:7f:55:d4:5a:78:bc:43:a8: 65:6a:f8:3a:fd:c6:c7:a8:ad:60:86:2c:6c:c1:ea:7e:9e:ef: 30:31:15:6f:69:00:5c:04:f5:c6:2f:e5:cf:c1:8d:ae:f9:c3: 8d:47:14:9b:16:87:00:fb:1f:0e:62:5a:dd:46:7e:e2:d7:b9: 71:30:21:ad:91:3c:4b:34:b0:21:83:d2:bf:12:cc:be:0a:5f: 10:ea:00:94:64:a4:6e:8c:58:72:79:b3:0a:7e:bf:a2:86:ec: 52:18:c1:24:50:93:d3:c2:c2:62:74:b3:73:cf:df:a5:c1:54: 34:b7:e9:75:c3:6d:d2:b3:6e:44:a6:56:6c:3e:bc:4a:5a:bb: 8d:50:97:7b:0d:f7:54:12:56:25:b3:72:87:1a:19:2f:08:eb: b0:e4:ed:2a:9b:a9:c7:39:1d:cb:c4:9a:5a:2c:ec:00:28:c3: d6:c4:5b:29:d6:55:b5:66:86:28:50:fc:0e:91:68:f7:4b:33: 03:1a:b4:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjUwODIyMTg1NzIwWhcNMjUwODI5MTg1NzIwWjAYMRYwFAYD VQQDEw02OGE4YmQ5MC1iNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3euSW/38xFhBMqmXo4RvMSmGpToOk4O0ybDPZBOfmY5bnMT8DRSYkNEoo5r+ 8oCHlnbs75e9PZVWnA34auXDzDr4SW4jy0IHWNu/dLCHCAoO9inXKJIwvfDnoJDF f1iIS2uLLRLk1JfN50sYYNWprn16gUuUo8EAolPcU6GwKobEj1oLYWlAh4JIinij MAOWW5dXydkkxEE5HVYNo73Q9jfWYBEN7qxfWd7Rj4wQcBtWROSO7e0GHZiHXrHC IzXYLNhOKDEUWBUMEObZPwWapTbrX7e+eGp8bO7Hm3D6d9RvjcoS5ABshZv0G23x MFexhQqRGw+z25TmZjs7cQL7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyloWRZ 6jdNNFHw8K3Vjl5LZh0oMB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0ZBMy81OTMwNzMzNjFEOUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBE dDJIeG1lWGdXaTBRbU56VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7J2+Gt+c+/Sp+vnZF7zfw2DnZ/XKQZ9Ys1A4cnStTgI5OG/1Fs3FX CQGeCE2t4cjUKOlSqTEsbvQynX2PPEz2f1XUWni8Q6hlavg6/cbHqK1ghixswep+ nu8wMRVvaQBcBPXGL+XPwY2u+cONRxSbFocA+x8OYlrdRn7i17lxMCGtkTxLNLAh g9K/Esy+Cl8Q6gCUZKRujFhyebMKfr+ihuxSGMEkUJPTwsJidLNzz9+lwVQ0t+l1 w23Ss25EplZsPrxKWruNUJd7DfdUElYls3KHGhkvCOuw5O0qm6nHOR3LxJpaLOwA KMPWxFsp1lW1ZoYoUPwOkWj3SzMDGrRz -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:19 2025 by rpki-client