$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: MsYaFDgBdgAx7asmM+iNl2OGRe93ZuNBHQw4eLdljSo= Subject key identifier: A1:73:39:47:FC:8C:87:45:47:5B:A9:6E:96:2D:38:D1:64:9E:16:68 Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 0911 Signing time: Fri 22 Aug 2025 20:26:00 +0000 Manifest this update: Fri 22 Aug 2025 20:26:00 +0000 Manifest next update: Fri 29 Aug 2025 20:26:00 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: cvccbq9uHEMnSe5OayASvU6vjvdMsbxs7L7Du1DtEoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: Aug 22 20:26:00 2025 GMT Not After : Aug 29 20:26:00 2025 GMT Subject: CN=68a8d258-b423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:ad:07:2e:e0:90:c3:99:26:20:2d:62:af: b3:0a:dc:32:00:00:10:f7:69:c2:d7:2e:25:da:12: d4:22:d2:56:73:7b:c5:ca:c5:56:4c:1d:bc:e2:a1: 14:b8:9e:2c:74:e7:a1:19:6c:87:95:32:d2:f7:01: 07:59:a0:40:8d:34:fe:cf:f5:ec:fc:07:72:9e:70: 21:8d:9b:80:92:48:b8:56:15:88:1a:01:5d:85:5a: 5b:1f:51:77:12:d2:e2:03:53:51:e6:e2:fd:b8:99: 77:75:e4:be:10:aa:e1:0c:91:ef:d8:ab:ad:3a:57: d4:4d:9e:d4:4f:79:c2:4b:b0:bb:9b:73:5c:4d:f0: 3d:e9:f9:95:33:5e:ea:a9:35:4e:42:30:b6:8f:e6: 56:20:a8:91:b8:f4:ac:dd:f0:a2:76:26:7a:0e:ae: ea:9b:c7:a6:6d:17:9e:08:ea:16:f4:d1:3c:36:ee: 11:a3:6a:da:eb:4b:9a:75:b3:87:90:d0:3b:c4:2b: f4:7a:3f:a0:b6:24:88:c5:94:cf:a1:f7:63:2a:7b: c3:d6:a4:fe:4c:24:ad:75:f7:9a:02:a4:93:e9:f5: d5:5b:8a:64:cf:d8:33:c4:c0:46:33:5b:6e:8b:b0: 5f:19:6a:fc:2e:33:4d:ed:93:2a:f3:ff:09:4b:d8: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:39:47:FC:8C:87:45:47:5B:A9:6E:96:2D:38:D1:64:9E:16:68 X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:33:ce:09:6b:a2:a5:af:31:e4:69:fa:63:b9:f5:8b:d3:29: 1f:0e:c3:0b:b5:f6:91:25:99:3d:86:ad:08:96:f5:e7:21:2b: 82:74:47:f5:ed:0b:52:95:72:4b:16:cb:71:9c:17:13:fd:a7: f2:3c:d6:ee:6c:7a:e6:d3:ad:4b:75:ce:8c:7d:c2:dd:d9:1c: 9f:4c:2b:f1:17:4f:8b:44:65:94:5d:87:4d:1a:58:fd:b5:a5: e7:4c:3d:fd:f2:a5:26:60:6d:28:68:92:0b:a6:4d:0a:f8:fb: 47:04:2b:7f:21:79:40:c7:6a:6c:09:07:7b:c0:71:e1:67:20: 80:37:77:00:f0:7d:23:88:17:f8:16:f7:81:d8:14:60:87:cd: 58:c5:03:10:13:7f:e9:12:01:75:2b:60:32:05:7e:79:ed:63: ed:60:d7:5d:66:8e:d6:61:be:b6:75:50:e0:8a:c9:59:80:50: b7:4a:fb:aa:12:6a:0a:33:03:6b:14:f0:2a:5c:d6:7b:49:4b: d3:d0:da:3d:62:54:78:a9:3d:c5:3c:53:b1:76:c1:a4:71:53: 1e:3f:ec:70:6c:bf:ab:36:46:92:a2:ef:a6:11:e6:bb:b8:5d: 66:e1:e2:74:13:cd:3b:1b:54:e1:c5:f2:44:3e:de:47:f0:e3: 94:29:ac:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjUwODIyMjAyNjAwWhcNMjUwODI5MjAyNjAwWjAYMRYwFAYD VQQDEw02OGE4ZDI1OC1iNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIKtBy7gkMOZJiAtYq+zCtwyAAAQ92nC1y4l2hLUItJWc3vFysVWTB284qEU uJ4sdOehGWyHlTLS9wEHWaBAjTT+z/Xs/AdynnAhjZuAkki4VhWIGgFdhVpbH1F3 EtLiA1NR5uL9uJl3deS+EKrhDJHv2KutOlfUTZ7UT3nCS7C7m3NcTfA96fmVM17q qTVOQjC2j+ZWIKiRuPSs3fCidiZ6Dq7qm8embReeCOoW9NE8Nu4Ro2ra60uadbOH kNA7xCv0ej+gtiSIxZTPofdjKnvD1qT+TCStdfeaAqST6fXVW4pkz9gzxMBGM1tu i7BfGWr8LjNN7ZMq8/8JS9jg7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFzOUf8 jIdFR1upbpYtONFknhZoMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjM84Ja6KlrzHkafpjufWL0ykfDsMLtfaRJZk9hq0IlvXnISuCdEf1 7QtSlXJLFstxnBcT/afyPNbubHrm061Ldc6MfcLd2RyfTCvxF0+LRGWUXYdNGlj9 taXnTD398qUmYG0oaJILpk0K+PtHBCt/IXlAx2psCQd7wHHhZyCAN3cA8H0jiBf4 FveB2BRgh81YxQMQE3/pEgF1K2AyBX557WPtYNddZo7WYb62dVDgislZgFC3Svuq EmoKMwNrFPAqXNZ7SUvT0No9YlR4qT3FPFOxdsGkcVMeP+xwbL+rNkaSou+mEea7 uF1m4eJ0E807G1ThxfJEPt5H8OOUKaxS -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:53 2025 by rpki-client