$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft File: v_236_RdfGG_nSOQip84wzKYWXA.mft (raw, json) Hash identifier: wk6S1XLn+gC70+yIUbuDS1AQsYsKLxKG8KrOwI4zN1o= Subject key identifier: 30:5B:FC:C5:7F:A0:1A:42:8B:A3:FF:64:EE:BE:52:FF:A6:A7:39:B5 Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Certificate serial: 1936 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft Manifest number: 1920 Signing time: Fri 22 Aug 2025 16:32:18 +0000 Manifest this update: Fri 22 Aug 2025 16:32:17 +0000 Manifest next update: Fri 29 Aug 2025 16:32:17 +0000 Files and hashes: 1: v_236_RdfGG_nSOQip84wzKYWXA.crl (hash: hvsbfI9ndaxkzOqZe8ipEVKldxQ8C75IwzHFgAIOJFc=) 2: 8732232CCBA011E887F87451C4F9AE02.roa (hash: d4g6nOFA6rT76ss8TIfPVoSl8yk4nYFL3JBknIEAxA8=) 3: 62B6389287C211EE949BAE7BC4F9AE02.roa (hash: olDXMZkGA0r/qNiSe03tThyIk85/feQoUgNKftYserc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6454 (0x1936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Validity Not Before: Aug 22 16:32:17 2025 GMT Not After : Aug 29 16:32:17 2025 GMT Subject: CN=68a89b91-d548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:4f:24:3d:8a:e4:9b:a2:ec:a3:52:0e:5f: 8c:a1:0e:a3:0b:63:fa:de:3f:75:53:fc:af:78:3a: 1a:2d:8e:b7:a8:9b:7b:bd:ce:ca:9f:9e:df:5c:12: 64:1d:bc:76:52:76:1c:0e:d2:d8:f2:e2:cd:ce:55: 00:ab:cd:70:16:43:a6:6b:de:82:9d:ea:6d:76:62: fa:b9:ab:d7:20:d6:15:16:0c:41:b4:61:04:ce:6a: 1d:2c:a3:1c:2a:fa:9c:49:d1:64:02:bc:9d:a8:24: b5:8c:ce:c5:8e:6d:43:1f:a6:b2:ea:b9:8c:e9:27: 4c:4b:22:53:fd:76:be:50:f4:f8:ac:6c:e2:1e:1e: b7:4e:81:36:97:a0:a6:75:bc:94:d2:4c:25:ad:6e: 1f:bc:a3:18:c4:c1:d1:01:ab:df:c9:2b:dc:92:28: 1c:78:19:2b:70:09:8f:d4:d1:c5:22:57:3a:42:74: 5f:59:14:59:16:c2:75:fa:9b:d7:c0:a0:42:6d:de: 7d:ec:1f:fd:4c:c6:a5:07:93:6e:48:53:5b:70:87: ea:75:d9:2b:6f:e5:44:57:07:dc:af:cb:46:71:66: 5e:f9:c5:7f:d6:37:bb:13:db:61:77:98:58:a5:21: 78:02:05:bc:8e:03:21:2a:6d:4c:6e:5b:ea:56:c6: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:FC:C5:7F:A0:1A:42:8B:A3:FF:64:EE:BE:52:FF:A6:A7:39:B5 X509v3 Authority Key Identifier: keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:fb:af:5b:40:64:4f:65:6e:f9:9d:49:c5:f3:c3:d5:6a:f2: da:40:2f:59:f5:51:56:a6:1f:63:a0:43:dd:e5:d0:bd:10:01: de:53:a8:95:6e:c6:ed:81:06:40:2b:e4:10:63:83:93:36:2a: f1:27:d3:da:7a:91:04:27:a3:0b:8d:8c:eb:bf:89:7c:31:30: b2:c5:09:29:ef:48:a2:6c:e5:48:40:3a:53:d8:65:1f:ba:6c: 86:e5:48:a8:45:33:ae:ae:1c:43:c2:7b:67:63:da:57:a1:e4: 2f:40:47:3b:cd:30:32:56:96:58:f2:e3:ff:4d:e3:25:7f:c8: 82:97:8b:d1:34:29:b7:dc:e5:da:b7:b8:7d:ca:45:90:69:40: 42:f8:96:12:59:16:e4:35:fd:29:92:7f:be:fa:db:5f:14:85: 0f:fb:0b:e7:be:2a:21:ce:7a:ee:72:49:d3:19:1a:46:1a:67: 16:9c:98:08:21:cf:5b:67:d8:7e:3b:6f:a6:21:a1:a9:ee:46: 96:7c:62:5f:3c:a5:3d:df:b6:5a:62:58:01:8c:4a:b1:41:4c: d5:f9:bb:e9:27:e5:72:89:de:13:89:6c:a2:18:46:b5:8b:2c: 4d:99:40:38:bc:8f:29:59:b9:fe:9c:06:1c:d6:da:8c:5e:c8: 83:66:e7:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz MzI5ODU5NzAwHhcNMjUwODIyMTYzMjE3WhcNMjUwODI5MTYzMjE3WjAYMRYwFAYD VQQDEw02OGE4OWI5MS1kNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/lPJD2K5Jui7KNSDl+MoQ6jC2P63j91U/yveDoaLY63qJt7vc7Kn57fXBJk Hbx2UnYcDtLY8uLNzlUAq81wFkOma96CneptdmL6uavXINYVFgxBtGEEzmodLKMc KvqcSdFkArydqCS1jM7Fjm1DH6ay6rmM6SdMSyJT/Xa+UPT4rGziHh63ToE2l6Cm dbyU0kwlrW4fvKMYxMHRAavfySvckigceBkrcAmP1NHFIlc6QnRfWRRZFsJ1+pvX wKBCbd597B/9TMalB5NuSFNbcIfqddkrb+VEVwfcr8tGcWZe+cV/1je7E9thd5hY pSF4AgW8jgMhKm1MblvqVsaNoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBb/MV/ oBpCi6P/ZO6+Uv+mpzm1MB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5 NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjlGQi9BRjAwOThEMDg5NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZH R19uU09RaXA4NHd6S1lXWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR+69bQGRPZW75nUnF88PVavLaQC9Z9VFWph9joEPd5dC9EAHeU6iV bsbtgQZAK+QQY4OTNirxJ9PaepEEJ6MLjYzrv4l8MTCyxQkp70iibOVIQDpT2GUf umyG5UioRTOurhxDwntnY9pXoeQvQEc7zTAyVpZY8uP/TeMlf8iCl4vRNCm33OXa t7h9ykWQaUBC+JYSWRbkNf0pkn+++ttfFIUP+wvnviohznrucknTGRpGGmcWnJgI Ic9bZ9h+O2+mIaGp7kaWfGJfPKU937ZaYlgBjEqxQUzV+bvpJ+Vyid4TiWyiGEa1 iyxNmUA4vI8pWbn+nAYc1tqMXsiDZufC -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:24 2025 by rpki-client