$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json) Hash identifier: gal5z3jRyRjg4oDO87wlkWCvovhn/CY3J+ZVzHBnAsM= Subject key identifier: 5A:0D:B6:EE:35:C5:05:C6:0A:D2:04:B2:5A:BC:39:39:F2:56:0E:39 Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft Manifest number: 4A Signing time: Sat 23 Aug 2025 07:41:44 +0000 Manifest this update: Sat 23 Aug 2025 07:41:43 +0000 Manifest next update: Sat 30 Aug 2025 07:41:43 +0000 Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: Gvoc6t7gO853UtoxRBMSLS7HOjl3nnWeYZjyIWuBiMg=) 2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=) 3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Validity Not Before: Aug 23 07:41:43 2025 GMT Not After : Aug 30 07:41:43 2025 GMT Subject: CN=68a970b8-9301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:8e:98:3f:7f:41:b3:df:1f:0e:4c:10:06: e0:ce:9c:0e:53:81:e3:d4:cf:c1:c5:3a:8f:df:55: e5:97:30:24:9f:3b:e5:ad:52:a6:bb:2e:5b:9f:7a: 19:12:c8:dd:f1:1d:96:40:33:a0:e8:c1:17:aa:33: 63:9e:dc:ba:43:bd:2e:7f:ea:20:40:31:d5:d6:b0: 66:cd:49:1f:6d:2b:42:10:7c:38:b3:3c:3d:ca:8f: d6:14:0e:0c:6c:74:94:ff:82:84:8a:42:1d:02:f6: ab:4a:18:b3:c0:a4:d6:98:3b:cb:10:bc:8d:df:92: 1f:b3:2d:21:6d:5b:31:c6:c2:72:25:c7:97:c4:92: a1:de:61:a0:38:8a:38:a9:66:af:62:25:66:7a:50: b8:b0:bf:f2:86:08:92:87:d1:1b:ee:6a:e5:91:61: 3e:9c:2c:02:7d:44:e4:6e:92:f4:d7:40:3b:b5:00: ac:62:2a:67:5a:a5:c0:a5:78:18:06:dc:4a:84:75: 2e:25:5f:a3:88:ff:7e:e2:6b:79:3b:ea:68:8c:96: 51:58:bc:a0:8c:4d:b1:97:9d:86:b4:ff:ae:26:97: 39:58:1d:db:8d:4f:5e:6a:6b:a3:d0:3f:9e:30:b0: 66:f1:7e:39:57:e6:77:01:55:40:3a:4a:a7:53:36: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0D:B6:EE:35:C5:05:C6:0A:D2:04:B2:5A:BC:39:39:F2:56:0E:39 X509v3 Authority Key Identifier: keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ed:d2:73:98:cc:76:9f:02:69:f8:d0:35:78:f4:1a:04:4f: 70:7e:69:cf:ed:f8:ce:ed:79:86:de:c2:ec:36:77:6c:b9:4c: fc:0d:73:d3:42:a2:d0:8d:3e:7e:72:63:42:e5:30:68:1b:02: a6:0d:68:1b:52:62:51:ec:69:7a:78:fd:5a:74:d6:43:fa:bf: d8:3e:89:a2:27:5e:6c:f2:cf:58:8f:e0:3d:0c:7b:76:94:de: 81:2d:0d:d3:f9:f8:cd:66:8b:52:32:73:a6:65:25:a8:45:e3: 1b:19:b8:bd:45:64:1e:97:ff:d5:08:9f:2e:02:b0:a0:be:a9: 03:ab:60:80:b1:0f:25:66:2b:11:e0:dd:a1:28:dc:68:91:c1: ca:cf:35:a4:77:5a:ff:94:42:c4:1e:4b:c3:cc:5c:2c:95:8c: 53:ad:fb:6d:1f:89:5f:af:98:f2:02:5a:25:0f:d0:3d:30:9f: 69:fe:ff:e2:78:d9:a3:6a:82:de:29:38:4a:83:43:e7:d6:1d: c1:aa:d2:e4:c2:3e:94:18:9d:71:ec:97:1f:fb:ef:fb:39:7f: 6c:b4:c9:9d:5c:a3:a5:68:c3:22:44:64:a1:42:89:6a:36:e0: 90:03:9e:ca:23:ee:56:22:b6:bb:88:51:c1:36:2b:49:1f:88: 48:a1:38:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0QyMTExMC8GA1UEBRMoODE4QkI5MDMzMjcxN0Y5MzU3MzBEQUYxNDcwOEZGQzJG NjA1RjA1RjAeFw0yNTA4MjMwNzQxNDNaFw0yNTA4MzAwNzQxNDNaMBgxFjAUBgNV BAMTDTY4YTk3MGI4LTkzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTEI6YP39Bs98fDkwQBuDOnA5TgePUz8HFOo/fVeWXMCSfO+WtUqa7LlufehkS yN3xHZZAM6DowReqM2Oe3LpDvS5/6iBAMdXWsGbNSR9tK0IQfDizPD3Kj9YUDgxs dJT/goSKQh0C9qtKGLPApNaYO8sQvI3fkh+zLSFtWzHGwnIlx5fEkqHeYaA4ijip Zq9iJWZ6ULiwv/KGCJKH0RvuauWRYT6cLAJ9RORukvTXQDu1AKxiKmdapcCleBgG 3EqEdS4lX6OI/37ia3k76miMllFYvKCMTbGXnYa0/64mlzlYHduNT15qa6PQP54w sGbxfjlX5ncBVUA6SqdTNrx5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWg227jXF BcYK0gSyWrw5OfJWDjkwHwYDVR0jBBgwFoAUgYu5AzJxf5NXMNrxRwj/wvYF8F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRDIxLzM4QzI2MUU0MUMz ODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1l1NUF6SnhmNU5YTU5yeFJ3al93dllGOEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RDIxLzM4QzI2MUU0MUMzODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVO WE1OcnhSd2pfd3ZZRjhGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACDt0nOYzHafAmn40DV49BoET3B+ac/t+M7teYbewuw2d2y5TPwNc9NC otCNPn5yY0LlMGgbAqYNaBtSYlHsaXp4/Vp01kP6v9g+iaInXmzyz1iP4D0Me3aU 3oEtDdP5+M1mi1Iyc6ZlJahF4xsZuL1FZB6X/9UIny4CsKC+qQOrYICxDyVmKxHg 3aEo3GiRwcrPNaR3Wv+UQsQeS8PMXCyVjFOt+20fiV+vmPICWiUP0D0wn2n+/+J4 2aNqgt4pOEqDQ+fWHcGq0uTCPpQYnXHslx/77/s5f2y0yZ1co6VowyJEZKFCiWo2 4JADnsoj7lYitruIUcE2K0kfiEihOD0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:39 2025 by rpki-client