$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft File: _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json) Hash identifier: To2+XzRZFucSOrxDz8ZUOfsyemgYsv76OgsHSK1nXC0= Subject key identifier: 8C:4F:BA:83:13:50:F4:0B:04:20:F0:FD:D2:0C:98:6A:FE:D2:9C:E5 Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 Certificate issuer: /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Certificate serial: 2715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft Manifest number: 2706 Signing time: Fri 22 Aug 2025 15:42:41 +0000 Manifest this update: Fri 22 Aug 2025 15:42:40 +0000 Manifest next update: Fri 29 Aug 2025 15:42:40 +0000 Files and hashes: 1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: awm2e82miZ+bp8GCyqpKXD+bIbcDjRXnjWbwppZGScM=) 2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: AGdYmprG1+spdhAmRDse9H6yLxE5LG56xPYvpdtuuFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10005 (0x2715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Validity Not Before: Aug 22 15:42:40 2025 GMT Not After : Aug 29 15:42:40 2025 GMT Subject: CN=68a88ff0-9bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8b:40:cd:fc:71:78:aa:94:95:f8:73:ac:15: d8:f9:2c:10:d2:50:ee:68:42:f2:b7:05:29:2d:fb: 36:41:5c:11:d9:2e:82:ce:70:9f:b6:5b:01:77:df: 63:04:b9:8e:3c:7a:8c:18:19:2b:b5:75:86:7c:ac: 48:55:b3:fa:09:f7:34:00:63:9d:a9:9a:5a:4f:ab: 42:12:e8:f9:35:da:4f:8b:01:06:55:da:bf:06:73: b6:42:4b:ca:c9:99:05:92:0b:a2:d7:52:5c:10:de: fb:17:b7:41:8c:cd:c9:f4:12:8d:46:7f:c1:18:27: 52:d6:8a:86:02:5b:b3:9b:e6:32:41:5c:23:eb:f0: 66:f0:9b:e4:a5:ba:62:f1:ed:2d:31:9d:ab:df:54: 1d:2b:75:c7:37:39:2d:55:74:0a:a3:8c:1a:76:4b: 30:f4:7c:0f:8a:96:12:8d:fd:a3:bd:97:24:ae:17: 03:4d:62:59:fa:28:72:b2:a6:7a:a3:61:cb:d3:86: c4:f5:4c:73:da:5d:f9:08:ab:91:0e:b7:3d:f1:49: fb:c6:0f:ca:5d:3a:c4:8e:e6:b9:d2:38:93:f0:11: 78:a2:c4:b2:e3:5d:17:e7:a0:c7:ec:be:12:6e:4e: f0:8c:a1:89:b4:b6:d4:73:78:de:2a:3e:9b:93:e2: cf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4F:BA:83:13:50:F4:0B:04:20:F0:FD:D2:0C:98:6A:FE:D2:9C:E5 X509v3 Authority Key Identifier: keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:15:93:00:38:f5:4f:f3:89:d6:de:03:61:ba:76:73:72:ca: fc:d6:ba:8b:b6:3f:b3:d0:83:db:29:32:56:66:be:a5:41:c7: 3e:33:03:d1:b2:08:97:77:e8:d5:ad:d1:9a:b4:dd:21:ce:77: a0:6d:ce:fb:64:a5:e4:b2:d0:0d:ef:54:10:43:57:ac:aa:07: 00:d0:24:c1:d1:ee:f1:63:c0:7e:e9:e4:47:2c:7b:91:8c:7c: a2:87:ee:eb:e0:ce:4d:53:0a:69:a9:ad:98:d4:a1:65:3f:61: 22:f2:df:51:81:b1:ed:e2:db:3a:d1:22:af:89:6f:73:31:65: 9f:7b:ec:9c:f3:1e:4b:8b:e6:a2:5f:3d:55:d5:07:47:bb:c3: 8c:71:6b:fe:1f:ed:3a:77:df:03:23:29:67:96:8d:9c:42:61: 4e:b8:ec:05:f6:13:c6:b4:5c:b6:c8:12:dc:b7:44:00:78:a5: 62:2d:71:d8:ec:7e:cc:be:52:8c:e7:3d:dc:77:d2:2b:3d:8d: ce:51:d4:dc:5b:3f:50:1b:02:05:96:1d:a4:6f:d9:10:7e:92: f4:de:8c:e9:fc:b8:ce:42:bb:0a:35:dd:93:84:09:16:47:d7: 02:8b:bf:67:f2:07:51:22:a8:a9:a4:b8:02:6b:8c:3d:dc:64: db:5e:dc:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFDOUQxMTAvBgNVBAUTKEZDNjU1QTIxNTQzRUNGNTdCRkEzRUJERjc5NDZBOTk1 NjFFQzUyRjUwHhcNMjUwODIyMTU0MjQwWhcNMjUwODI5MTU0MjQwWjAYMRYwFAYD VQQDEw02OGE4OGZmMC05YmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ItAzfxxeKqUlfhzrBXY+SwQ0lDuaELytwUpLfs2QVwR2S6CznCftlsBd99j BLmOPHqMGBkrtXWGfKxIVbP6Cfc0AGOdqZpaT6tCEuj5NdpPiwEGVdq/BnO2QkvK yZkFkgui11JcEN77F7dBjM3J9BKNRn/BGCdS1oqGAluzm+YyQVwj6/Bm8Jvkpbpi 8e0tMZ2r31QdK3XHNzktVXQKo4wadksw9HwPipYSjf2jvZckrhcDTWJZ+ihysqZ6 o2HL04bE9Uxz2l35CKuRDrc98Un7xg/KXTrEjua50jiT8BF4osSy410X56DH7L4S bk7wjKGJtLbUc3jeKj6bk+LPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxPuoMT UPQLBCDw/dIMmGr+0pzlMB8GA1UdIwQYMBaAFPxlWiFUPs9Xv6Pr33lGqZVh7FL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUM5RC83M0FDQTVFNENG NDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXoxZV9vLXZmZVVhcGxXSHNV dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVmFJVlEtejFlX28tdmZlVWFwbFdIc1V2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUM5RC83M0FDQTVFNENGNDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXox ZV9vLXZmZVVhcGxXSHNVdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGFZMAOPVP84nW3gNhunZzcsr81rqLtj+z0IPbKTJWZr6lQcc+MwPR sgiXd+jVrdGatN0hznegbc77ZKXkstAN71QQQ1esqgcA0CTB0e7xY8B+6eRHLHuR jHyih+7r4M5NUwppqa2Y1KFlP2Ei8t9RgbHt4ts60SKviW9zMWWfe+yc8x5Li+ai Xz1V1QdHu8OMcWv+H+06d98DIylnlo2cQmFOuOwF9hPGtFy2yBLct0QAeKViLXHY 7H7MvlKM5z3cd9IrPY3OUdTcWz9QGwIFlh2kb9kQfpL03ozp/LjOQrsKNd2ThAkW R9cCi79n8gdRIqippLgCa4w93GTbXtzc -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:47 2025 by rpki-client