$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: 01e/gq7abdBTZbZ5nLL4/mtj3QAB8Twi3wZItDDZYz4= Subject key identifier: A0:E2:AA:6A:EE:AF:33:4D:DD:2E:BE:5E:92:1B:FD:40:FD:5D:98:44 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 025F Signing time: Sat 23 Aug 2025 02:01:27 +0000 Manifest this update: Sat 23 Aug 2025 02:01:27 +0000 Manifest next update: Sat 30 Aug 2025 02:01:27 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: tj9wYPbGYfsLklkGsma9MoXAa53RMxCVWlfmOevwxUk=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Aug 23 02:01:27 2025 GMT Not After : Aug 30 02:01:27 2025 GMT Subject: CN=68a920f7-0dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:b0:1e:77:10:2e:ff:b9:69:59:50:6c:2b: 90:10:32:a3:93:db:a9:a9:ed:26:6d:ff:00:de:02: e5:0d:29:d7:85:b2:65:b0:48:38:36:da:71:2d:4d: 05:75:19:24:d1:e8:0f:76:d6:77:a4:c3:62:a8:1a: f7:5a:f7:4b:44:68:da:f4:4b:03:03:a7:22:72:d2: b0:cd:d4:fe:59:bc:ab:3c:e9:9a:39:54:45:75:2c: 03:d3:62:50:0d:eb:e9:41:a6:64:4d:95:60:72:ee: 48:b0:c5:96:01:0f:29:d2:4a:bf:7b:69:ec:08:cd: 3c:b8:ef:87:ac:0f:49:6c:ae:9c:b6:98:54:d9:4f: 81:40:13:16:15:02:24:ac:07:27:1a:26:ca:ac:be: 7e:c9:35:8a:0d:c0:c4:62:f1:8d:b8:cc:d3:1d:74: 25:d6:cd:db:ef:8a:03:b5:19:8c:68:c1:2a:0e:b7: af:70:c3:ba:73:6b:6f:37:66:53:a4:2a:0d:84:83: 66:65:ed:95:ab:a2:ae:bb:5d:3b:5a:f4:4d:23:76: bb:93:c9:90:f3:d7:83:c3:49:d0:41:83:68:6e:14: e1:c9:5a:10:aa:10:69:46:2e:31:96:a0:15:67:ce: a0:ee:5d:17:18:f2:3b:2f:0e:af:ae:1e:b3:6f:84: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E2:AA:6A:EE:AF:33:4D:DD:2E:BE:5E:92:1B:FD:40:FD:5D:98:44 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:14:ee:e6:d0:50:3b:ce:28:96:50:94:84:10:42:e6:98:9c: 9b:a6:20:a1:25:f2:79:de:6f:4b:5e:af:a8:59:22:4e:bf:da: 91:6d:59:dc:40:6e:ba:b1:43:2b:39:16:a8:67:ab:93:e5:bd: 42:b6:84:68:e0:6c:b3:40:90:4b:09:e6:a2:59:14:cc:5f:d6: 80:48:67:6d:ca:16:b1:78:ba:a4:05:fa:ec:eb:77:6a:ef:60: 89:99:d2:e9:cf:1f:68:54:a6:42:a7:c0:92:2f:6e:ad:cb:2a: 1e:9f:d4:0e:57:7e:84:57:e6:a9:dc:a9:62:bf:1e:f0:86:ef: 56:fa:88:2e:64:e6:21:7e:14:cf:93:4f:d1:a5:26:c8:26:96: 3a:79:f1:3f:4c:69:32:3f:8e:e9:44:ca:93:b1:5c:ca:49:45: d0:2e:fa:01:89:ce:f3:91:c4:fe:e0:75:28:0f:c2:0a:21:c8: a0:12:6d:5d:1e:5b:49:bd:4b:29:3e:7a:38:4a:62:62:45:63: 38:28:65:b8:8b:81:7d:55:c1:60:51:31:c9:11:a5:31:eb:34: 46:78:87:b1:08:b7:ba:fa:5b:2f:3b:90:9b:0a:8d:ca:38:cc: 54:c9:62:53:64:68:c0:f7:f1:3d:eb:2f:bf:c0:d2:cf:d9:f2: 2d:9b:58:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUwODIzMDIwMTI3WhcNMjUwODMwMDIwMTI3WjAYMRYwFAYD VQQDEw02OGE5MjBmNy0wZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ymwHncQLv+5aVlQbCuQEDKjk9upqe0mbf8A3gLlDSnXhbJlsEg4NtpxLU0F dRkk0egPdtZ3pMNiqBr3WvdLRGja9EsDA6cictKwzdT+WbyrPOmaOVRFdSwD02JQ DevpQaZkTZVgcu5IsMWWAQ8p0kq/e2nsCM08uO+HrA9JbK6ctphU2U+BQBMWFQIk rAcnGibKrL5+yTWKDcDEYvGNuMzTHXQl1s3b74oDtRmMaMEqDrevcMO6c2tvN2ZT pCoNhINmZe2Vq6Kuu107WvRNI3a7k8mQ89eDw0nQQYNobhThyVoQqhBpRi4xlqAV Z86g7l0XGPI7Lw6vrh6zb4QgAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDiqmru rzNN3S6+XpIb/UD9XZhEMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoFO7m0FA7ziiWUJSEEELmmJybpiChJfJ53m9LXq+oWSJOv9qRbVnc QG66sUMrORaoZ6uT5b1CtoRo4GyzQJBLCeaiWRTMX9aASGdtyhaxeLqkBfrs63dq 72CJmdLpzx9oVKZCp8CSL26tyyoen9QOV36EV+ap3Klivx7whu9W+oguZOYhfhTP k0/RpSbIJpY6efE/TGkyP47pRMqTsVzKSUXQLvoBic7zkcT+4HUoD8IKIcigEm1d HltJvUspPno4SmJiRWM4KGW4i4F9VcFgUTHJEaUx6zRGeIexCLe6+lsvO5CbCo3K OMxUyWJTZGjA9/E96y+/wNLP2fItm1hm -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:14 2025 by rpki-client