$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: qPtcESy5DOg2jkZcS8maBJHKU1q7HhJtLOvzrrCpHhQ= Subject key identifier: CD:EC:E2:68:2A:90:A1:76:C7:95:B2:BD:8C:13:06:F0:CA:97:CA:E2 Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 0401 Signing time: Sat 23 Aug 2025 00:42:27 +0000 Manifest this update: Sat 23 Aug 2025 00:42:27 +0000 Manifest next update: Sat 30 Aug 2025 00:42:27 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: GfBI+sTFr6772MSRvN5hR9jrHTBWGHWSrvTkXxnd+Ys=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: Aug 23 00:42:27 2025 GMT Not After : Aug 30 00:42:27 2025 GMT Subject: CN=68a90e73-96e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:20:57:ec:11:e3:32:e5:37:02:86:f4:09: e0:6f:5a:a6:a2:06:61:81:c9:8f:9a:83:ca:02:e9: 44:03:5e:4d:a5:d4:7f:66:d6:a8:41:56:0e:94:c5: a4:ec:58:4d:0f:48:68:de:46:59:c3:04:36:46:bc: c3:d6:ad:69:2d:a5:bf:6d:9b:8d:4a:54:83:18:08: 75:9e:14:68:16:ca:c2:84:ad:c0:5f:f9:66:89:75: c7:5f:df:ec:2b:07:e7:a7:76:a7:97:02:67:ba:a6: 5f:12:ba:18:7a:9f:a3:ac:cb:fe:91:54:57:6d:6c: 80:9a:5a:a5:22:ab:59:6e:12:67:c1:3a:18:7c:e6: 9f:08:57:4a:b9:a0:dd:ac:48:50:94:7c:aa:f4:33: eb:0b:29:b9:be:31:8d:a7:e9:b0:26:4c:cf:8d:89: 74:a5:96:b3:25:a2:b1:e6:4e:ea:5b:6f:e7:7f:9c: db:d5:1e:3e:41:43:15:6c:e8:31:bb:58:85:2f:5c: 9f:4e:a3:96:49:3e:47:f1:97:79:fb:f5:9e:d5:c4: 21:1b:1f:cc:67:61:c9:2c:53:a2:6b:65:f8:7b:ff: 2e:e3:3a:97:2c:7b:1e:51:e4:92:39:f9:a1:5c:7f: b4:8b:96:a9:86:a6:34:a7:3c:55:c8:04:f9:52:e3: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EC:E2:68:2A:90:A1:76:C7:95:B2:BD:8C:13:06:F0:CA:97:CA:E2 X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:56:e5:bf:64:33:ac:81:92:38:bc:5f:85:13:b8:12:93:29: f1:80:61:bf:7c:85:3f:36:8b:c4:04:ab:b4:1b:a1:f4:01:03: 4d:e2:f6:e8:da:24:18:02:e4:93:e2:6e:ca:b0:c6:8d:ca:ed: 2f:77:21:af:ac:c3:69:89:93:af:c0:46:7b:db:48:25:53:3b: 45:0f:da:ca:e3:11:1c:51:ac:ab:5e:51:b0:09:25:36:ec:aa: 9d:e9:65:17:e8:37:a9:a0:9b:11:a9:2a:3c:6b:a3:01:9d:e0: a3:10:75:61:2a:f8:8d:3a:d0:78:f4:34:ae:59:69:c0:88:4f: f1:c0:2e:e8:aa:fe:ae:ef:37:67:1b:7d:f2:18:57:4a:ab:18: d7:80:c3:8a:7b:18:68:7a:77:72:49:30:6f:87:38:2d:de:24: 19:1a:e1:09:a2:20:42:eb:94:57:fe:4b:6d:68:3d:0d:b6:0d: 91:f4:21:f8:14:98:dc:f0:9a:f4:77:5c:97:b6:06:57:5d:79: 6c:5d:0b:db:51:69:df:ab:e8:00:cc:b5:d0:89:4b:dc:eb:ed: d0:a5:0a:a8:34:8d:24:7e:fc:c9:61:72:8f:0b:1c:bd:cb:56: 12:7d:ad:ba:f6:3f:47:6f:05:1f:7b:c8:29:97:44:12:32:38: f0:dd:de:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjUwODIzMDA0MjI3WhcNMjUwODMwMDA0MjI3WjAYMRYwFAYD VQQDEw02OGE5MGU3My05NmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hggV+wR4zLlNwKG9Angb1qmogZhgcmPmoPKAulEA15NpdR/ZtaoQVYOlMWk 7FhND0ho3kZZwwQ2RrzD1q1pLaW/bZuNSlSDGAh1nhRoFsrChK3AX/lmiXXHX9/s Kwfnp3anlwJnuqZfEroYep+jrMv+kVRXbWyAmlqlIqtZbhJnwToYfOafCFdKuaDd rEhQlHyq9DPrCym5vjGNp+mwJkzPjYl0pZazJaKx5k7qW2/nf5zb1R4+QUMVbOgx u1iFL1yfTqOWST5H8Zd5+/We1cQhGx/MZ2HJLFOia2X4e/8u4zqXLHseUeSSOfmh XH+0i5aphqY0pzxVyAT5UuNj6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3s4mgq kKF2x5WyvYwTBvDKl8riMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATVuW/ZDOsgZI4vF+FE7gSkynxgGG/fIU/NovEBKu0G6H0AQNN4vbo 2iQYAuST4m7KsMaNyu0vdyGvrMNpiZOvwEZ720glUztFD9rK4xEcUayrXlGwCSU2 7Kqd6WUX6DepoJsRqSo8a6MBneCjEHVhKviNOtB49DSuWWnAiE/xwC7oqv6u7zdn G33yGFdKqxjXgMOKexhoendySTBvhzgt3iQZGuEJoiBC65RX/kttaD0Ntg2R9CH4 FJjc8Jr0d1yXtgZXXXlsXQvbUWnfq+gAzLXQiUvc6+3QpQqoNI0kfvzJYXKPCxy9 y1YSfa269j9HbwUfe8gpl0QSMjjw3d5D -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:39 2025 by rpki-client