$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: N1aAcC9zzx8BnjtJlYP/HrX0qttWx0E/EBHO/jgiWMQ= Subject key identifier: 12:A7:DE:28:D0:D5:D1:D3:5F:34:47:91:27:BF:81:2B:3B:68:55:21 Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: FC Signing time: Sat 23 Aug 2025 05:18:52 +0000 Manifest this update: Sat 23 Aug 2025 05:18:52 +0000 Manifest next update: Sat 30 Aug 2025 05:18:52 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: AGiGTPJGa5+G3MjLZg2WBItz9Xf4r0Ha70eWYG1lLTg=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: kL+8sBegJ1XGnndePATDLqR1ij+F7xDhoLyLkaA0qyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: Aug 23 05:18:52 2025 GMT Not After : Aug 30 05:18:52 2025 GMT Subject: CN=68a94f3c-ef89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:d1:44:dd:eb:20:7a:66:48:64:53:eb:fb: d8:98:4b:c9:0f:0a:f4:88:a4:79:18:c5:7c:8f:d5: 15:68:8d:f2:27:8f:62:d3:f4:79:7b:e7:d7:73:bf: b5:35:8c:24:e3:5c:2c:98:ba:bc:33:8e:93:25:c9: 59:52:12:68:76:44:04:70:ef:46:22:9d:e0:0d:72: e4:80:29:5f:12:35:ab:7f:4a:d6:6a:77:4d:5c:b6: 86:e7:9a:63:73:f4:6d:54:42:d8:3f:a8:f9:00:ca: 35:73:80:a4:8f:3a:28:c8:e3:24:f5:75:0d:46:b6: 74:3f:8b:a1:6b:e7:18:83:c3:2d:3a:33:bd:42:ac: 4a:71:0b:a6:e2:f9:42:bb:b8:01:78:bf:65:69:f8: b3:99:ea:28:48:8e:a2:83:a1:24:f4:76:1c:3d:8d: 5b:31:f6:f2:0b:1c:4c:73:4d:fe:49:9d:ff:50:8a: 97:02:5c:e3:36:5c:4c:5b:aa:4a:a2:0f:84:49:27: bf:51:f0:cd:a9:79:86:2b:d0:23:47:65:2b:08:f0: 51:bb:a6:40:2e:3c:fd:ed:72:63:ed:c6:05:4a:7d: 28:fd:79:d8:ce:74:7b:82:08:03:ee:a3:90:d7:d8: 26:e1:2c:2b:e8:c4:91:5e:ae:49:2a:5e:8f:99:1d: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:DE:28:D0:D5:D1:D3:5F:34:47:91:27:BF:81:2B:3B:68:55:21 X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:74:26:c1:f0:c1:72:32:e5:36:2c:47:44:a6:6c:5c:bd:3e: 39:39:d6:f3:97:20:8c:21:23:9f:2b:dd:7b:1f:3a:58:a9:43: c5:f4:05:5e:47:67:75:00:c5:05:91:7d:23:ab:0c:d8:07:0b: 40:b9:de:8a:3f:5b:0c:f5:e7:f8:fc:76:f1:68:74:72:c8:db: ce:ff:0c:f1:66:81:cf:70:90:9f:78:20:b9:65:9b:cb:81:ff: 2d:49:16:e3:3d:fd:6b:f7:a0:0a:f7:7d:d9:22:a3:f5:d6:7e: b2:e8:ff:12:9e:80:a0:e7:7e:fb:4c:78:84:92:65:c9:6f:38: be:1d:36:b8:d1:5e:7a:c1:08:91:3d:70:80:4f:e3:6d:b6:22: a8:f6:09:b4:ce:a4:4e:0d:8d:f9:7b:e6:c8:7a:4d:f9:66:71: 28:8a:cd:46:7c:c5:0d:0e:85:72:f4:6a:61:2b:c9:b6:e5:a9: 99:ec:12:c0:0b:c0:2d:1e:68:ac:ce:5b:d6:df:a4:ee:d3:27: fd:10:62:18:47:0c:aa:d7:80:83:00:fd:2a:92:31:ad:e0:0f: 76:11:c6:a3:68:20:9c:e1:1d:96:46:06:4b:82:a1:35:fb:fe: f5:6e:d2:75:70:8b:a4:af:3d:b3:f9:31:71:b4:a5:31:1a:7b: 8b:7c:e8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBNDgxMTAvBgNVBAUTKDE5Nzk0RjNDQUEzNzU1MjdCQTBGRDMzNDQ4MEM3RTAz MzhFNzlFMkEwHhcNMjUwODIzMDUxODUyWhcNMjUwODMwMDUxODUyWjAYMRYwFAYD VQQDEw02OGE5NGYzYy1lZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukzRRN3rIHpmSGRT6/vYmEvJDwr0iKR5GMV8j9UVaI3yJ49i0/R5e+fXc7+1 NYwk41wsmLq8M46TJclZUhJodkQEcO9GIp3gDXLkgClfEjWrf0rWandNXLaG55pj c/RtVELYP6j5AMo1c4CkjzooyOMk9XUNRrZ0P4uha+cYg8MtOjO9QqxKcQum4vlC u7gBeL9lafizmeooSI6ig6Ek9HYcPY1bMfbyCxxMc03+SZ3/UIqXAlzjNlxMW6pK og+ESSe/UfDNqXmGK9AjR2UrCPBRu6ZALjz97XJj7cYFSn0o/XnYznR7gggD7qOQ 19gm4Swr6MSRXq5JKl6PmR3ZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKn3ijQ 1dHTXzRHkSe/gSs7aFUhMB8GA1UdIwQYMBaAFBl5TzyqN1Unug/TNEgMfgM4554q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkE0OC9COUUyQUNBMEZF NTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZTZTZEOU0wU0F4LUF6am5u aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZT ZTZEOU0wU0F4LUF6am5uaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKdCbB8MFyMuU2LEdEpmxcvT45OdbzlyCMISOfK917HzpYqUPF9AVe R2d1AMUFkX0jqwzYBwtAud6KP1sM9ef4/HbxaHRyyNvO/wzxZoHPcJCfeCC5ZZvL gf8tSRbjPf1r96AK933ZIqP11n6y6P8SnoCg5377THiEkmXJbzi+HTa40V56wQiR PXCAT+NttiKo9gm0zqRODY35e+bIek35ZnEois1GfMUNDoVy9GphK8m25amZ7BLA C8AtHmiszlvW36Tu0yf9EGIYRwyq14CDAP0qkjGt4A92EcajaCCc4R2WRgZLgqE1 +/71btJ1cIukrz2z+TFxtKUxGnuLfOjo -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:14 2025 by rpki-client