$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: xym/PahqJVbdU0xdod0eO95L642CqZEWQt4/su5FpYw= Subject key identifier: 49:62:4F:9B:7B:6B:16:2B:9C:0D:04:CA:A9:C2:3F:45:F6:85:04:E8 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 186A Signing time: Fri 22 Aug 2025 16:35:47 +0000 Manifest this update: Fri 22 Aug 2025 16:35:46 +0000 Manifest next update: Fri 29 Aug 2025 16:35:46 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: ka0VjwNYLms9nf5Fzm5LEwCdatVvSMLaraPWfH3DGdw=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6276 (0x1884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Aug 22 16:35:46 2025 GMT Not After : Aug 29 16:35:46 2025 GMT Subject: CN=68a89c62-2aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:71:8c:c1:bc:5d:3f:b3:91:08:c2:35:8d: 22:b9:4e:7f:82:39:c8:98:83:61:18:37:e6:cc:4d: 59:db:85:a6:f8:0c:39:02:8f:b2:4c:30:5b:20:be: f0:05:ee:46:c6:ba:b9:1f:cd:4d:e6:00:26:db:7f: dc:19:b0:a1:ec:82:68:8e:a3:56:df:37:f3:0e:0b: 63:df:28:c3:9e:ad:18:b6:95:d6:08:6a:87:dd:51: 34:6d:8e:ab:1a:a1:cb:3b:4d:57:39:ec:92:2a:c5: ee:f9:b8:c7:0b:5d:e6:44:1b:bc:9b:8d:2d:9e:79: 4f:c9:ec:0f:ff:42:2f:89:a6:a7:b2:1f:96:be:af: 3e:fb:6e:97:63:fb:68:c3:a4:86:b4:cf:b6:64:57: 24:c0:83:2d:ac:c1:a7:7c:f2:97:44:62:e4:3f:20: 75:1f:92:d3:29:47:ef:fa:0c:27:4b:86:79:eb:49: d9:c9:94:aa:2c:d0:78:d1:54:99:34:fc:98:3a:8c: f5:14:4b:4d:1c:7c:74:31:ee:58:ab:8f:8f:b8:c2: ad:c6:c3:33:02:ce:45:0c:b0:0c:b2:30:9b:ce:02: 0d:7a:9f:03:5e:6f:92:a0:03:ee:56:34:94:01:68: 73:13:f5:87:2c:b7:05:3d:d7:e3:35:b9:00:04:4c: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:62:4F:9B:7B:6B:16:2B:9C:0D:04:CA:A9:C2:3F:45:F6:85:04:E8 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:57:a5:7a:84:cb:3c:cd:a7:31:54:26:ad:58:44:42:fd:f7: 0d:01:bb:e8:24:8c:ce:73:0c:82:7f:3e:07:cf:8b:54:3a:e3: f2:7e:90:3a:13:e4:20:11:a7:54:28:30:8c:2a:46:1b:79:b5: 01:a3:72:6f:c5:1d:da:77:4b:aa:b3:2b:38:e6:d1:1c:0f:d4: b2:37:97:37:8c:21:17:d8:db:53:03:46:65:9b:1e:17:b6:78: 12:40:f7:b5:4e:88:8f:6d:9f:1e:c0:9f:63:f3:35:6a:1f:4c: 4e:03:5f:ce:b0:84:f9:2e:24:13:ad:e5:2b:41:6d:83:52:9f: 57:1c:4b:be:05:8d:41:8c:e3:e9:f5:4d:59:6a:1e:ab:6d:d0: b0:61:36:43:34:75:34:e9:6e:2c:4e:ac:1d:de:47:f9:1a:54: 50:08:2a:32:fc:51:7c:e1:bf:f7:74:3b:06:8a:45:ab:51:1a: 9d:15:fa:0c:ef:34:95:ca:d3:1d:11:04:62:60:cc:3b:5a:cf: 0a:1d:52:50:fe:28:85:c3:1d:50:e0:a7:b0:f4:49:a0:5a:eb: 88:eb:c3:7a:05:83:37:eb:b4:a0:1a:c2:ee:ef:33:69:96:cf: a5:74:76:b2:4e:fc:4e:fa:74:28:3d:28:0a:7a:b6:ea:9c:0b: 48:a3:d9:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUwODIyMTYzNTQ2WhcNMjUwODI5MTYzNTQ2WjAYMRYwFAYD VQQDEw02OGE4OWM2Mi0yYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPBxjMG8XT+zkQjCNY0iuU5/gjnImINhGDfmzE1Z24Wm+Aw5Ao+yTDBbIL7w Be5Gxrq5H81N5gAm23/cGbCh7IJojqNW3zfzDgtj3yjDnq0YtpXWCGqH3VE0bY6r GqHLO01XOeySKsXu+bjHC13mRBu8m40tnnlPyewP/0Iviaansh+Wvq8++26XY/to w6SGtM+2ZFckwIMtrMGnfPKXRGLkPyB1H5LTKUfv+gwnS4Z560nZyZSqLNB40VSZ NPyYOoz1FEtNHHx0Me5Yq4+PuMKtxsMzAs5FDLAMsjCbzgINep8DXm+SoAPuVjSU AWhzE/WHLLcFPdfjNbkABEzJowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEliT5t7 axYrnA0EyqnCP0X2hQToMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeV6V6hMs8zacxVCatWERC/fcNAbvoJIzOcwyCfz4Hz4tUOuPyfpA6 E+QgEadUKDCMKkYbebUBo3JvxR3ad0uqsys45tEcD9SyN5c3jCEX2NtTA0Zlmx4X tngSQPe1ToiPbZ8ewJ9j8zVqH0xOA1/OsIT5LiQTreUrQW2DUp9XHEu+BY1BjOPp 9U1Zah6rbdCwYTZDNHU06W4sTqwd3kf5GlRQCCoy/FF84b/3dDsGikWrURqdFfoM 7zSVytMdEQRiYMw7Ws8KHVJQ/iiFwx1Q4Kew9EmgWuuI68N6BYM367SgGsLu7zNp ls+ldHayTvxO+nQoPSgKerbqnAtIo9km -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:40 2025 by rpki-client