$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json) Hash identifier: KVabmNGekrNVJKjSvPo0Fcgj703XAl8D0wcf0JhsQgs= Subject key identifier: 71:CA:69:8A:E1:22:7C:E1:D4:61:71:31:28:03:B7:CC:98:A8:77:31 Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Certificate serial: 095B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft Manifest number: 1954 Signing time: Fri 22 Aug 2025 17:33:59 +0000 Manifest this update: Fri 22 Aug 2025 17:33:59 +0000 Manifest next update: Fri 29 Aug 2025 17:33:59 +0000 Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: ylr2994KDlb/oG3Mvp+TgvWiY7Zi4fEF64c9dmPZPxg=) 2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: i9BL1rlX0oUvps1Va07G59cz+t1l/lyXzZ/KRVLbWW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Validity Not Before: Aug 22 17:33:59 2025 GMT Not After : Aug 29 17:33:59 2025 GMT Subject: CN=68a8aa07-fa15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:e7:01:c4:cc:58:e2:fb:70:1a:26:7e:b5: c4:22:44:84:77:a7:97:9e:0a:bb:6e:4f:24:16:1f: 12:f5:8a:36:c5:d6:51:f0:f1:d3:4d:64:98:f5:85: 5e:b3:0c:6f:17:08:31:21:f6:71:f3:a1:13:a8:b3: 8c:f2:de:db:ff:c1:10:99:f3:95:d7:1d:3c:93:c9: 6a:fb:06:a6:dc:0f:40:74:73:ba:83:e5:a7:2f:6f: fa:a3:65:55:72:4e:5b:18:00:4c:00:21:61:49:8d: a7:fe:33:85:23:96:6f:6b:90:f9:ee:53:8a:2f:48: aa:8f:2b:8c:ab:ec:17:81:ae:2b:a1:7b:99:e6:0f: 23:b8:4b:b4:ff:9e:5f:cc:52:7a:3e:08:c2:ad:4d: c0:8d:86:85:cf:0e:cb:9a:64:ab:df:0b:2e:99:20: b2:51:4c:cd:c8:f5:e9:05:89:d3:62:91:85:db:1b: ba:76:20:9a:cf:ae:3d:6e:5e:ef:b1:58:de:81:d0: 47:d8:cb:be:69:7a:ee:0f:07:7a:b7:39:c7:90:6d: ac:91:67:0d:18:1e:3d:82:2f:2c:c6:ff:37:1a:ad: 39:09:a1:9e:60:bd:91:4e:f2:e8:a7:3d:86:fe:30: 04:ba:64:f5:99:67:73:58:b7:b5:06:fa:94:02:39: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CA:69:8A:E1:22:7C:E1:D4:61:71:31:28:03:B7:CC:98:A8:77:31 X509v3 Authority Key Identifier: keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:2d:2b:b4:60:7e:9e:4c:b7:1d:4a:29:60:7a:bb:b5:38:47: c4:e8:aa:14:0e:b1:d9:be:71:8b:61:da:ba:de:ff:2b:40:ca: a0:80:7f:a3:b9:88:40:9d:3f:9e:c2:25:6c:2d:54:af:88:6e: d5:07:03:c8:99:05:9d:dc:e3:db:73:39:e1:b8:ce:ac:6b:15: d7:d1:3a:24:13:73:c4:e8:31:4a:4e:73:e4:e4:26:e5:48:b6: 15:68:88:7c:a6:53:2d:e7:b1:50:0c:8b:78:7a:19:91:23:b1: 68:97:01:b4:34:7d:31:48:1f:27:37:d2:82:fa:77:95:58:84: ab:68:9f:67:32:31:34:f2:5b:20:90:23:c1:ed:99:ec:b8:13: ec:9f:8e:a5:c1:e9:d9:cf:0e:28:23:89:82:22:7b:6c:32:9e: 43:aa:a0:7d:14:7f:6e:1b:ae:5b:ba:bf:34:a9:c5:ca:85:8a: b3:f9:23:76:f5:d8:c0:4b:09:e9:42:ad:d4:b9:35:db:24:42: 68:58:b1:12:a0:8e:80:f1:1e:9a:42:dd:ed:75:93:3d:0c:bc: a5:ed:c6:5c:15:39:b4:d1:2f:a3:11:db:9c:56:14:8d:3e:2a: 5f:5f:cb:a8:95:b0:02:be:54:2d:d0:63:99:5f:20:a1:4e:a8: 66:6d:80:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3 MDNENEY3NDUwHhcNMjUwODIyMTczMzU5WhcNMjUwODI5MTczMzU5WjAYMRYwFAYD VQQDEw02OGE4YWEwNy1mYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4rnAcTMWOL7cBomfrXEIkSEd6eXngq7bk8kFh8S9Yo2xdZR8PHTTWSY9YVe swxvFwgxIfZx86ETqLOM8t7b/8EQmfOV1x08k8lq+wam3A9AdHO6g+WnL2/6o2VV ck5bGABMACFhSY2n/jOFI5Zva5D57lOKL0iqjyuMq+wXga4roXuZ5g8juEu0/55f zFJ6PgjCrU3AjYaFzw7LmmSr3wsumSCyUUzNyPXpBYnTYpGF2xu6diCaz649bl7v sVjegdBH2Mu+aXruDwd6tznHkG2skWcNGB49gi8sxv83Gq05CaGeYL2RTvLopz2G /jAEumT1mWdzWLe1BvqUAjnsswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHKaYrh Inzh1GFxMSgDt8yYqHcxMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VB bGtQUTZOMktRalZ3UFU5MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYLSu0YH6eTLcdSilgeru1OEfE6KoUDrHZvnGLYdq63v8rQMqggH+j uYhAnT+ewiVsLVSviG7VBwPImQWd3OPbcznhuM6saxXX0TokE3PE6DFKTnPk5Cbl SLYVaIh8plMt57FQDIt4ehmRI7FolwG0NH0xSB8nN9KC+neVWISraJ9nMjE08lsg kCPB7ZnsuBPsn46lwenZzw4oI4mCIntsMp5DqqB9FH9uG65bur80qcXKhYqz+SN2 9djASwnpQq3UuTXbJEJoWLESoI6A8R6aQt3tdZM9DLyl7cZcFTm00S+jEducVhSN PipfX8uolbACvlQt0GOZXyChTqhmbYCH -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:03 2025 by rpki-client