$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: k0GcgqxYtlP69sXzH13Dn1e7mMn8d0475PCT2vJnNnk= Subject key identifier: 06:B6:0D:4E:E2:77:DC:F5:42:C4:C7:39:2B:A2:F2:2E:5B:73:FC:6F Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0C97 Signing time: Fri 22 Aug 2025 19:31:51 +0000 Manifest this update: Fri 22 Aug 2025 19:31:50 +0000 Manifest next update: Fri 29 Aug 2025 19:31:50 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: FG9tSf2hLVnKJSjUtEWTJk20hbK0jHlOr3kYWD8xeAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Aug 22 19:31:50 2025 GMT Not After : Aug 29 19:31:50 2025 GMT Subject: CN=68a8c5a7-c436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:38:bc:fe:f2:92:c9:af:19:cf:9c:d2:99: c0:e8:0d:2d:39:d3:79:1d:a1:d7:3b:c4:74:2f:12: 4e:5f:b9:29:58:f0:f4:68:8f:ef:49:fd:d9:b8:a8: 8b:a0:01:8f:32:55:dc:46:76:b9:af:be:af:6f:40: d8:d9:10:90:ca:98:c9:7c:37:5a:d6:1d:5b:e7:f8: 16:a0:44:ad:41:5a:1c:98:7e:ab:36:8e:71:7b:be: 7a:f5:60:98:61:47:77:0c:66:6b:15:80:81:3f:9a: 4c:db:d8:86:e0:8c:30:21:41:69:ab:dc:76:14:8e: 0e:f0:29:d1:c3:de:4a:31:5a:3f:1d:8a:b0:ec:21: 2c:be:f9:d0:48:7d:91:5c:0d:bb:d1:d8:c5:a3:f9: c7:0c:e0:ae:46:e7:cd:ee:fe:fb:e5:63:52:08:45: 3f:bd:9e:8e:f1:23:6a:a5:13:09:49:7b:b1:00:d6: 6e:1f:8f:92:9b:52:0e:ba:8a:38:a6:9f:6c:5c:85: fa:8e:c9:63:09:8e:3f:19:b0:16:b4:f8:92:ac:8d: e3:1c:0c:4f:17:9b:af:f6:c3:76:96:f3:59:d1:f2: bc:66:da:4a:58:6f:16:7f:6f:26:09:61:fd:16:f4: ac:06:a2:92:f3:8d:32:09:2a:87:a7:f3:49:1f:bc: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B6:0D:4E:E2:77:DC:F5:42:C4:C7:39:2B:A2:F2:2E:5B:73:FC:6F X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fc:c7:db:49:92:58:92:e0:c0:34:cb:c6:f4:53:d8:56:96: 8d:7e:88:e1:69:74:9e:5e:d2:9f:da:ef:98:26:b5:95:4a:83: 18:bc:5c:de:43:9a:7e:97:45:6d:a7:d5:6c:78:24:21:ee:2c: 81:01:26:12:8c:be:f6:1c:69:ee:40:7a:e6:1c:cc:c3:cc:2c: b6:f5:6a:ee:0e:0b:bd:31:ef:6b:e7:5c:85:5d:ad:0d:04:b0: a4:5d:6e:66:ba:36:3a:db:b8:c8:2d:2c:3a:76:18:bf:8b:61: d3:ac:b7:f1:f4:ed:1a:fe:f5:a3:87:0e:ac:35:82:83:1a:40: d8:81:80:e3:74:4e:f1:76:5d:c2:a4:90:1b:b6:ef:8b:01:88: 05:97:4d:7b:e7:8c:f7:7e:6f:e0:d8:b0:30:11:a6:ab:66:af: 89:ba:56:c2:d4:e5:5c:f2:a5:5c:7c:4a:5a:f5:14:56:5a:07: 27:f4:28:9c:eb:d5:67:de:3d:0a:ee:c3:a0:40:55:2f:d9:16: 5b:8a:84:24:05:5a:4d:be:1d:aa:7d:bb:34:fc:f3:60:6d:1c: cd:ea:06:c3:92:7c:86:1f:7a:64:c4:70:e3:7e:f6:a4:67:88: 26:14:2c:43:b8:27:25:92:28:32:bc:da:4e:c3:0c:44:5b:bf: 45:dd:5b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwODIyMTkzMTUwWhcNMjUwODI5MTkzMTUwWjAYMRYwFAYD VQQDEw02OGE4YzVhNy1jNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4no4vP7yksmvGc+c0pnA6A0tOdN5HaHXO8R0LxJOX7kpWPD0aI/vSf3ZuKiL oAGPMlXcRna5r76vb0DY2RCQypjJfDda1h1b5/gWoEStQVocmH6rNo5xe7569WCY YUd3DGZrFYCBP5pM29iG4IwwIUFpq9x2FI4O8CnRw95KMVo/HYqw7CEsvvnQSH2R XA270djFo/nHDOCuRufN7v775WNSCEU/vZ6O8SNqpRMJSXuxANZuH4+Sm1IOuoo4 pp9sXIX6jsljCY4/GbAWtPiSrI3jHAxPF5uv9sN2lvNZ0fK8ZtpKWG8Wf28mCWH9 FvSsBqKS840yCSqHp/NJH7ywswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa2DU7i d9z1QsTHOSui8i5bc/xvMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/MfbSZJYkuDANMvG9FPYVpaNfojhaXSeXtKf2u+YJrWVSoMYvFze Q5p+l0Vtp9VseCQh7iyBASYSjL72HGnuQHrmHMzDzCy29WruDgu9Me9r51yFXa0N BLCkXW5mujY627jILSw6dhi/i2HTrLfx9O0a/vWjhw6sNYKDGkDYgYDjdE7xdl3C pJAbtu+LAYgFl01754z3fm/g2LAwEaarZq+JulbC1OVc8qVcfEpa9RRWWgcn9Cic 69Vn3j0K7sOgQFUv2RZbioQkBVpNvh2qfbs0/PNgbRzN6gbDknyGH3pkxHDjfvak Z4gmFCxDuCclkigyvNpOwwxEW79F3Vta -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:20 2025 by rpki-client