$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json) Hash identifier: s30JMxqtk805AL/DqmvjT6T8dt8EKjJrJRK4UZWTl2Q= Subject key identifier: BD:2A:CB:02:A8:C2:CD:B4:E2:42:17:5F:99:7E:00:84:DF:16:05:2D Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft Manifest number: 19 Signing time: Sat 23 Aug 2025 08:10:51 +0000 Manifest this update: Sat 23 Aug 2025 08:10:51 +0000 Manifest next update: Sat 30 Aug 2025 08:10:51 +0000 Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: Lk8jfNJ/85K/CWevwKjj2RbAnWBYnpPVRIMPCXoiUb0=) 2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: 92wZUBl6JW7t9Lz6VY8NqyCC30dn+5kR/99dMirbOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Validity Not Before: Aug 23 08:10:51 2025 GMT Not After : Aug 30 08:10:51 2025 GMT Subject: CN=68a9778b-bcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:9b:60:db:26:8a:a4:4c:67:26:d3:33:95: 86:08:30:9f:73:e3:16:c8:2a:10:94:92:a4:93:38: 43:8f:5a:51:66:a6:be:71:94:9c:8d:c1:ca:61:36: 33:ae:bf:1a:63:c0:fc:d9:46:57:3c:a4:5a:6a:53: 3a:b8:5b:63:db:ba:0d:46:35:b7:8e:41:c5:7a:c2: bd:61:83:0d:43:01:75:30:17:ba:81:7e:21:d4:fd: 0d:20:b2:be:db:c0:75:df:f0:7b:0a:e5:63:f0:4e: 5c:3a:8e:db:b2:4c:84:f8:a8:73:94:de:2d:19:47: 9b:f7:80:21:d3:17:79:0c:03:be:f6:b9:5d:6c:61: 66:61:6d:95:b5:5f:ec:0f:c4:76:67:ac:11:83:38: 30:0a:eb:85:fd:d7:e8:ee:08:ab:b0:98:f2:f8:b4: e2:72:22:86:06:7a:55:a1:5b:2d:99:86:b5:00:b3: 58:61:59:10:c3:eb:43:d4:5d:06:75:09:1c:b8:b3: d0:c4:06:62:72:44:66:74:32:ed:6a:5a:23:83:57: be:09:12:84:74:99:17:06:fa:1f:9e:ab:2c:68:25: 74:db:43:28:2e:3e:78:5f:30:08:7a:0f:1e:c4:f2: 3b:99:d9:a2:ee:2b:35:cb:4a:f9:70:3a:26:31:88: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2A:CB:02:A8:C2:CD:B4:E2:42:17:5F:99:7E:00:84:DF:16:05:2D X509v3 Authority Key Identifier: keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:32:ed:0b:5e:5e:07:27:85:64:c9:25:ec:9e:4d:07:09:92: 83:a7:c4:70:48:d5:4b:bd:36:02:6e:75:ad:3f:c5:81:35:0c: fd:d4:5d:70:5d:05:8e:a5:af:5b:04:a6:9a:d1:a9:d3:6e:e2: 30:69:3b:21:c8:54:89:5d:34:18:1f:68:e3:99:3d:e6:05:90: 80:f0:18:67:af:16:27:40:00:e0:d8:32:68:17:d5:f1:b6:b5: be:9c:27:9f:d9:8c:50:3e:ee:60:01:80:2b:32:4c:cc:32:5d: 34:32:58:fe:e7:30:f4:23:06:b0:7a:a2:24:85:dd:59:c9:bf: 6c:02:8a:c1:ba:8c:12:a3:e6:60:26:51:71:92:26:9d:5d:1a: 31:25:3b:28:90:f2:c0:dc:9d:67:1e:ec:13:61:8a:a3:bf:04: 5e:e6:cd:14:c9:f0:32:b9:47:6c:a2:83:7d:18:1a:c5:ba:6c: 95:68:4b:a3:c3:79:76:60:ab:b3:51:d0:4b:19:18:01:e5:5b: 8d:43:be:ef:dd:76:b8:15:a3:41:dc:06:c2:fb:72:da:92:b6: 90:87:a9:3d:bf:a9:6e:d0:3c:2f:66:62:13:43:01:59:21:a7: 70:4c:04:fc:e1:42:0a:87:cf:50:52:3f:06:3b:36:27:1d:c4: 3e:be:71:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoMUExNkEzOTFEMzI1MTcwQjdCODVDNEJGQzc4NTVBMTc3 RDM0N0I2RTAeFw0yNTA4MjMwODEwNTFaFw0yNTA4MzAwODEwNTFaMBgxFjAUBgNV BAMTDTY4YTk3NzhiLWJjYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7rJtg2yaKpExnJtMzlYYIMJ9z4xbIKhCUkqSTOEOPWlFmpr5xlJyNwcphNjOu vxpjwPzZRlc8pFpqUzq4W2Pbug1GNbeOQcV6wr1hgw1DAXUwF7qBfiHU/Q0gsr7b wHXf8HsK5WPwTlw6jtuyTIT4qHOU3i0ZR5v3gCHTF3kMA772uV1sYWZhbZW1X+wP xHZnrBGDODAK64X91+juCKuwmPL4tOJyIoYGelWhWy2ZhrUAs1hhWRDD60PUXQZ1 CRy4s9DEBmJyRGZ0Mu1qWiODV74JEoR0mRcG+h+eqyxoJXTbQyguPnhfMAh6Dx7E 8juZ2aLuKzXLSvlwOiYxiGnBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvSrLAqjC zbTiQhdfmX4AhN8WBS0wHwYDVR0jBBgwFoAUGhajkdMlFwt7hcS/x4VaF300e24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzE4ODJEMEU2NUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0N2hjU194NFZhRjMwMGUy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2hhamtkTWxGd3Q3aGNTX3g0VmFGMzAwZTI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzE4ODJEMEU2NUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0 N2hjU194NFZhRjMwMGUyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYy7QteXgcnhWTJJeyeTQcJkoOnxHBI1Uu9NgJuda0/xYE1DP3UXXBd BY6lr1sEpprRqdNu4jBpOyHIVIldNBgfaOOZPeYFkIDwGGevFidAAODYMmgX1fG2 tb6cJ5/ZjFA+7mABgCsyTMwyXTQyWP7nMPQjBrB6oiSF3VnJv2wCisG6jBKj5mAm UXGSJp1dGjElOyiQ8sDcnWce7BNhiqO/BF7mzRTJ8DK5R2yig30YGsW6bJVoS6PD eXZgq7NR0EsZGAHlW41Dvu/ddrgVo0HcBsL7ctqStpCHqT2/qW7QPC9mYhNDAVkh p3BMBPzhQgqHz1BSPwY7NicdxD6+cSk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:28 2025 by rpki-client