$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json) Hash identifier: qXWiQ5JQzrG4F+6ECfBQ0igzbG2khgYbCrtwvnjiqzk= Subject key identifier: 64:F7:2A:43:FA:EB:8F:52:F0:5E:88:B8:57:37:04:B2:E7:EB:59:A7 Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft Manifest number: 037C Signing time: Sat 23 Aug 2025 01:06:12 +0000 Manifest this update: Sat 23 Aug 2025 01:06:11 +0000 Manifest next update: Sat 30 Aug 2025 01:06:11 +0000 Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: 8Hq0Nf647jv+DL04lH/mHQUWaBp2Q0y8CGk6vEWJDc4=) 2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: bwcKq1c0r2cXBrd25MLQlHFjWgMS2hGGf/FnvA7qj34=) 3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: M4NylbqODaGIV7jb3azGtcDcoPjVhzDh1zfYrf7L1aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Validity Not Before: Aug 23 01:06:11 2025 GMT Not After : Aug 30 01:06:11 2025 GMT Subject: CN=68a91403-23af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:20:56:fd:f7:93:25:9e:c6:17:92:5f:18: 4b:6e:29:4a:06:ab:96:f4:6c:4d:1c:7b:2e:ef:88: 44:e3:51:da:89:00:a0:ae:56:f4:a3:60:bb:85:9c: 52:96:a4:15:43:b5:1d:b1:14:8b:23:40:98:0c:6a: ed:64:a1:b3:7c:e5:1e:35:b6:87:5c:51:ab:77:2b: a3:2b:7c:8e:bc:cb:4f:72:ee:48:04:ef:84:ea:46: 38:18:22:f4:1b:52:9a:60:da:16:26:cf:72:16:d5: 24:e4:3e:41:a1:0a:6b:44:3b:f2:3f:a6:d1:bc:f9: 44:a2:1a:36:b1:60:c4:35:03:cb:9b:71:23:b7:ec: 9b:97:5d:48:96:79:70:fa:0f:5d:70:7b:f6:1c:ea: 44:54:25:b1:fd:58:e8:b3:13:b1:a7:fa:8d:32:2d: 1d:18:c6:b2:52:e9:de:66:b6:aa:d3:70:6c:58:45: ce:81:04:18:9c:bc:ce:07:b0:9c:68:6f:08:e8:ff: 2b:02:e2:b2:23:6a:e1:37:9c:35:b8:2c:57:47:2e: e6:d1:08:62:4e:3b:dd:81:5f:de:7a:37:c4:77:7f: fa:09:10:48:b1:c6:8c:27:19:68:a7:48:cf:5a:00: 47:da:78:68:22:9f:80:ed:9a:14:52:68:92:d4:e4: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F7:2A:43:FA:EB:8F:52:F0:5E:88:B8:57:37:04:B2:E7:EB:59:A7 X509v3 Authority Key Identifier: keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a7:c9:72:e2:75:2d:87:3d:72:87:39:63:c8:06:65:02:56: 33:e8:49:61:8b:aa:ae:d0:25:f1:58:2c:78:a8:c9:5b:2e:f6: b5:20:e4:15:a5:60:03:c3:c7:b9:21:0a:1c:08:a1:14:c4:8f: 3a:2e:0d:63:4f:11:b1:f4:9e:c0:6e:0d:f8:4d:b9:d6:8e:6c: b0:b2:c1:3b:20:86:ff:56:79:a2:04:b7:9a:75:de:90:f5:4e: 7d:98:03:dd:b8:80:28:cc:ec:22:92:d3:34:a1:c3:62:3a:84: 0e:57:d3:6f:6e:28:02:f3:50:e0:95:e0:c7:46:08:26:b8:a8: bb:5f:d0:21:03:1e:d0:6a:79:ce:c4:da:57:ad:e8:14:ac:42: 2a:62:77:99:ea:68:37:fb:3e:44:4e:f8:39:22:31:d8:ac:78: ba:93:4f:dc:87:48:52:5e:44:d8:85:1f:35:69:5e:0f:87:f3: e5:55:bd:07:fb:4c:d5:64:e3:b3:9e:97:ab:4d:ef:d8:f4:3b: 11:c4:cd:0b:1e:6a:77:6b:9d:43:15:f1:26:c2:c5:1c:92:15: 6d:51:b0:a8:76:48:18:5f:64:3d:5d:26:0b:6b:3a:27:15:c0: f3:cf:ff:e3:8b:ae:d5:67:d8:f9:8c:5a:ed:5b:87:fe:24:f3: 98:9e:0e:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx QUQzNzE0RUMwHhcNMjUwODIzMDEwNjExWhcNMjUwODMwMDEwNjExWjAYMRYwFAYD VQQDEw02OGE5MTQwMy0yM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylcgVv33kyWexheSXxhLbilKBquW9GxNHHsu74hE41HaiQCgrlb0o2C7hZxS lqQVQ7UdsRSLI0CYDGrtZKGzfOUeNbaHXFGrdyujK3yOvMtPcu5IBO+E6kY4GCL0 G1KaYNoWJs9yFtUk5D5BoQprRDvyP6bRvPlEoho2sWDENQPLm3Ejt+ybl11Ilnlw +g9dcHv2HOpEVCWx/VjosxOxp/qNMi0dGMayUuneZraq03BsWEXOgQQYnLzOB7Cc aG8I6P8rAuKyI2rhN5w1uCxXRy7m0QhiTjvdgV/eejfEd3/6CRBIscaMJxlop0jP WgBH2nhoIp+A7ZoUUmiS1OTZ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT3KkP6 649S8F6IuFc3BLLn61mnMB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3 QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU1RC80MEU0M0I4MEI3QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hm X0lBUGdQOHBhNnNhMDNGT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATp8ly4nUthz1yhzljyAZlAlYz6Elhi6qu0CXxWCx4qMlbLva1IOQV pWADw8e5IQocCKEUxI86Lg1jTxGx9J7Abg34TbnWjmywssE7IIb/VnmiBLeadd6Q 9U59mAPduIAozOwiktM0ocNiOoQOV9NvbigC81DgleDHRggmuKi7X9AhAx7QannO xNpXregUrEIqYneZ6mg3+z5ETvg5IjHYrHi6k0/ch0hSXkTYhR81aV4Ph/PlVb0H +0zVZOOznperTe/Y9DsRxM0LHmp3a51DFfEmwsUckhVtUbCodkgYX2Q9XSYLazon FcDzz//ji67VZ9j5jFrtW4f+JPOYng6M -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:17 2025 by rpki-client