$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json) Hash identifier: VywAtX1lVvbsbp1iW+0iyWXo3FRn8kPmHNlCvh2mJRk= Subject key identifier: 5B:6C:09:92:CA:29:43:54:BA:99:B0:40:DC:4A:8F:50:9B:12:04:B4 Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft Manifest number: 0682 Signing time: Fri 22 Aug 2025 22:31:49 +0000 Manifest this update: Fri 22 Aug 2025 22:31:49 +0000 Manifest next update: Fri 29 Aug 2025 22:31:49 +0000 Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: 3Hccqfx5oO+iiZ8da3NCL/Lyj2GEUkFP70VYhUp+8jQ=) 2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: HJ5B1NeUHZuSr0dNR5r03BZuHl4ib3IbNLeDtkm6M04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Validity Not Before: Aug 22 22:31:49 2025 GMT Not After : Aug 29 22:31:49 2025 GMT Subject: CN=68a8efd5-d387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:6e:1b:2a:cb:dc:2b:d9:b3:a6:ae:51:e4: f5:09:cb:d7:be:5d:c4:31:24:3f:a4:a2:c2:04:33: ca:dc:c3:21:a8:71:9d:b5:0e:27:25:60:45:e3:9b: 49:6e:dd:01:5d:2e:34:af:56:45:ad:b0:07:de:97: 5c:a9:c9:68:0c:3b:07:86:6f:e2:31:07:c3:66:51: 7d:4c:62:d5:a8:64:f3:60:4e:91:e0:3a:ab:cf:0e: f6:6b:18:79:f5:bc:18:6e:8b:53:6f:6e:0e:2f:3a: 1f:94:0b:60:ca:06:25:06:09:8f:ce:f9:b5:9e:6a: 3a:e2:a6:5d:76:28:a7:f4:e0:a3:c5:5c:9b:c5:a0: 6a:73:b8:aa:34:39:e8:e8:2a:3d:c1:57:fc:f9:aa: fa:ba:f0:9c:44:6f:02:eb:54:72:52:81:6a:88:ed: 7d:a5:7c:be:9f:98:9b:97:f4:0f:09:72:f2:a6:be: 61:fb:eb:e4:3a:76:86:cc:ff:fc:dc:8d:76:67:25: a3:1a:7f:5a:fe:38:d7:d8:0b:18:6f:ef:81:52:ab: 5e:c1:de:0a:ca:44:c0:51:33:5b:cb:43:2a:ff:ea: 00:e2:e3:23:74:e4:59:96:67:cc:84:d3:c4:3c:38: ca:72:29:5e:25:69:e7:5d:0e:db:3b:89:1d:b4:88: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6C:09:92:CA:29:43:54:BA:99:B0:40:DC:4A:8F:50:9B:12:04:B4 X509v3 Authority Key Identifier: keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:1b:29:64:5a:ca:9b:e3:de:18:ea:a6:9f:86:fd:11:f8:78: 81:80:f9:3e:be:f1:41:fd:17:57:bc:3d:ad:63:f3:b2:a6:32: 81:be:c4:5a:aa:13:96:2c:2b:fc:e5:9e:02:ec:c8:24:1e:10: c6:1f:d8:99:af:74:78:15:83:11:ab:5c:ed:63:71:e1:22:78: ed:de:bd:8c:eb:0c:1d:41:36:2a:f2:74:74:f7:29:3b:c1:23: 5b:a5:eb:19:f3:b4:4a:23:cb:e8:79:d8:05:5b:cd:b3:29:b2: 05:11:af:00:e0:bd:21:4a:7a:c2:97:d3:14:5e:d2:71:23:d0: 51:4b:e4:5f:6e:7d:47:97:6a:27:4c:a8:7d:69:68:30:40:5a: 3d:9d:ca:83:fd:ca:73:6f:a2:08:11:25:21:2c:0f:63:00:cc: 20:47:cc:a5:b7:ff:d7:7d:09:53:6d:75:56:57:fb:68:67:47: b5:3d:a7:5f:70:8e:07:73:b7:53:f9:fb:4d:3d:65:13:a7:60: 59:94:fc:d0:e6:e9:0a:49:1f:02:0f:48:36:67:c1:d9:ec:af: 35:d3:31:df:85:7a:94:b7:e6:27:56:5b:e0:01:7c:fd:f9:e8: 8e:44:e6:de:e4:8b:58:f9:4e:85:0c:82:ae:16:72:dc:44:d1: 5f:03:5f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy NzhGMEJGNzEwHhcNMjUwODIyMjIzMTQ5WhcNMjUwODI5MjIzMTQ5WjAYMRYwFAYD VQQDEw02OGE4ZWZkNS1kMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvtuGyrL3CvZs6auUeT1CcvXvl3EMSQ/pKLCBDPK3MMhqHGdtQ4nJWBF45tJ bt0BXS40r1ZFrbAH3pdcqcloDDsHhm/iMQfDZlF9TGLVqGTzYE6R4Dqrzw72axh5 9bwYbotTb24OLzoflAtgygYlBgmPzvm1nmo64qZddiin9OCjxVybxaBqc7iqNDno 6Co9wVf8+ar6uvCcRG8C61RyUoFqiO19pXy+n5ibl/QPCXLypr5h++vkOnaGzP/8 3I12ZyWjGn9a/jjX2AsYb++BUqtewd4KykTAUTNby0Mq/+oA4uMjdORZlmfMhNPE PDjKcileJWnnXQ7bO4kdtIhXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtsCZLK KUNUupmwQNxKj1CbEgS0MB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1 RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzGylkWsqb494Y6qafhv0R+HiBgPk+vvFB/RdXvD2tY/OypjKBvsRa qhOWLCv85Z4C7MgkHhDGH9iZr3R4FYMRq1ztY3HhInjt3r2M6wwdQTYq8nR09yk7 wSNbpesZ87RKI8voedgFW82zKbIFEa8A4L0hSnrCl9MUXtJxI9BRS+Rfbn1Hl2on TKh9aWgwQFo9ncqD/cpzb6IIESUhLA9jAMwgR8ylt//XfQlTbXVWV/toZ0e1Padf cI4Hc7dT+ftNPWUTp2BZlPzQ5ukKSR8CD0g2Z8HZ7K810zHfhXqUt+YnVlvgAXz9 +eiORObe5ItY+U6FDIKuFnLcRNFfA19p -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:11 2025 by rpki-client