$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: t20C5cNzuWMmBpVYwJtsqn3QL2IALKupTFY3de7Zd3Q= Subject key identifier: 45:4F:F2:AE:35:D4:F6:F5:17:8C:92:27:63:83:00:C7:BD:B2:E6:ED Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 12F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 12DD Signing time: Fri 22 Aug 2025 17:10:52 +0000 Manifest this update: Fri 22 Aug 2025 17:10:52 +0000 Manifest next update: Fri 29 Aug 2025 17:10:52 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: ziab9cz0rEQPdk5QShdQ9YfFDFzNTCQdIqm2jgPJJcY=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4851 (0x12f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Aug 22 17:10:52 2025 GMT Not After : Aug 29 17:10:52 2025 GMT Subject: CN=68a8a49c-1371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:28:45:0c:a6:00:b9:1b:dc:30:eb:0f:2d: ed:a5:88:07:3f:1d:a9:39:14:a4:74:6f:a4:fa:65: 78:bc:d4:52:7b:74:06:0b:71:5f:55:d9:42:88:eb: 76:b6:9e:66:5d:ed:4c:e7:ba:10:83:ed:cf:42:5f: 94:5e:96:a3:1a:6b:5a:14:94:89:a8:53:c8:8c:c8: e7:0d:0f:c7:fe:74:ad:4f:03:4c:7f:d0:f9:c9:79: 24:45:c6:4c:8b:d6:08:95:52:ef:a5:4d:d9:76:15: 71:4d:e9:78:60:aa:dc:12:f1:1d:0a:10:7c:69:87: d3:5b:4b:04:3e:79:cb:ad:a2:7a:5f:09:28:74:50: ee:e0:8f:d2:03:9e:48:5a:12:4f:97:24:c0:4f:c6: 9e:17:72:6f:7d:4a:b3:54:79:3c:d4:39:c8:01:78: 67:51:55:d2:e3:f2:cc:f4:48:85:3f:1b:a0:79:23: 91:8f:c8:33:77:2f:d4:30:25:f0:39:e5:8d:93:43: a6:b3:88:eb:b1:7f:6b:25:45:c8:bc:2f:f2:4e:34: 3f:e8:66:51:9d:c2:8f:c7:d3:54:dd:2b:44:2b:51: e3:91:22:ac:ee:ed:77:0a:32:6b:a2:6a:21:99:8f: a8:b8:5b:89:c4:65:3c:dd:c0:a4:dd:73:1f:44:20: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4F:F2:AE:35:D4:F6:F5:17:8C:92:27:63:83:00:C7:BD:B2:E6:ED X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0c:4b:72:89:b8:0b:56:06:7f:2e:4a:f6:87:97:32:d4:36: d3:f4:3f:71:69:1d:e9:a0:72:a2:6a:cb:5f:4a:7f:6c:bb:50: bd:94:95:fa:b0:f0:5f:85:6e:fa:12:5c:cd:0a:f6:a8:26:ec: 0f:fe:26:4c:e0:75:aa:fe:7a:3b:3a:a9:99:fb:35:bb:b7:ac: c1:1f:b4:70:bc:1b:ab:a2:94:fe:92:96:db:3d:f1:9c:ba:12: d1:b7:dd:29:62:60:9a:cd:1c:0e:a0:cf:a2:a8:c4:ee:cc:fe: b3:4a:9c:8f:11:9a:4d:cb:60:75:1b:71:dd:b6:e2:82:57:38: 8e:c7:89:46:bb:99:e3:dd:ef:3f:21:cf:40:a9:2c:19:d6:d2: f9:37:61:32:af:00:28:33:e4:f4:ed:01:4b:cc:d3:55:c7:dd: b7:90:1d:df:4e:e2:90:3a:d7:7e:19:cc:05:c0:59:82:4c:c9: f9:72:39:9b:7d:50:55:97:0a:78:00:d0:cd:3d:36:19:b4:cd: a1:ef:8a:10:a8:80:44:7c:6a:0e:6b:8d:4f:c1:4e:84:73:cf: f9:01:45:e1:7b:e6:31:d7:c2:74:b0:95:bc:5d:fd:85:ed:00: a2:94:e4:c8:42:cc:70:92:b5:d2:f1:47:37:d5:e9:60:37:61: fd:d5:aa:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUwODIyMTcxMDUyWhcNMjUwODI5MTcxMDUyWjAYMRYwFAYD VQQDEw02OGE4YTQ5Yy0xMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXgoRQymALkb3DDrDy3tpYgHPx2pORSkdG+k+mV4vNRSe3QGC3FfVdlCiOt2 tp5mXe1M57oQg+3PQl+UXpajGmtaFJSJqFPIjMjnDQ/H/nStTwNMf9D5yXkkRcZM i9YIlVLvpU3ZdhVxTel4YKrcEvEdChB8aYfTW0sEPnnLraJ6XwkodFDu4I/SA55I WhJPlyTAT8aeF3JvfUqzVHk81DnIAXhnUVXS4/LM9EiFPxugeSORj8gzdy/UMCXw OeWNk0Oms4jrsX9rJUXIvC/yTjQ/6GZRncKPx9NU3StEK1HjkSKs7u13CjJromoh mY+ouFuJxGU83cCk3XMfRCDulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVP8q41 1Pb1F4ySJ2ODAMe9subtMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeDEtyibgLVgZ/Lkr2h5cy1DbT9D9xaR3poHKiastfSn9su1C9lJX6 sPBfhW76ElzNCvaoJuwP/iZM4HWq/no7OqmZ+zW7t6zBH7RwvBuropT+kpbbPfGc uhLRt90pYmCazRwOoM+iqMTuzP6zSpyPEZpNy2B1G3HdtuKCVziOx4lGu5nj3e8/ Ic9AqSwZ1tL5N2EyrwAoM+T07QFLzNNVx923kB3fTuKQOtd+GcwFwFmCTMn5cjmb fVBVlwp4ANDNPTYZtM2h74oQqIBEfGoOa41PwU6Ec8/5AUXhe+Yx18J0sJW8Xf2F 7QCilOTIQsxwkrXS8Uc31elgN2H91apj -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:59 2025 by rpki-client