$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json) Hash identifier: W6Ln8UM3SQ4UGE8SlXAF9dP97/9fMDeVVZDic33odUk= Subject key identifier: A7:98:9A:48:AD:08:AD:C0:23:81:6E:0B:87:0D:EC:D8:7C:BB:D1:D6 Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Certificate serial: 2299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft Manifest number: 2290 Signing time: Fri 22 Aug 2025 15:54:22 +0000 Manifest this update: Fri 22 Aug 2025 15:54:22 +0000 Manifest next update: Fri 29 Aug 2025 15:54:22 +0000 Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: e34rpFTYEMCcgW5vXC3+2lc+PjAU/6Pdst52G/XYtGs=) 2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=) 3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=) 4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8857 (0x2299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Validity Not Before: Aug 22 15:54:22 2025 GMT Not After : Aug 29 15:54:22 2025 GMT Subject: CN=68a892ae-a3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:47:c6:67:f8:3d:67:22:13:4c:88:bf:28:ca: ab:a3:6f:55:7d:08:ad:80:c2:37:c2:14:4c:5d:bc: 28:7d:5f:26:11:16:92:52:b1:8c:1b:db:3e:52:d0: 7d:3f:0f:de:5c:36:6d:91:ac:b9:7f:53:2b:72:f3: 00:21:23:af:a6:5a:5e:a0:ca:74:2c:bb:0c:7f:91: 37:d9:c3:2b:66:71:52:7c:77:89:37:f2:f7:ac:1b: 7a:a9:17:36:29:ac:3a:72:01:e0:2f:45:4e:e0:48: b4:bd:65:2d:dc:fc:53:ab:3c:94:fb:7a:5e:bd:43: df:21:57:9f:60:7d:cf:9c:a4:bb:71:cb:a3:2f:f6: ab:88:9c:ed:3d:51:f1:3c:18:8f:08:f5:7d:c0:7d: 00:d2:f0:c9:14:05:a2:90:66:ff:1a:7e:35:9f:82: 99:aa:c4:52:76:a8:2e:b1:9f:d4:3d:fc:d8:83:b6: a2:09:b8:9f:5f:e3:8b:ab:9f:af:68:9a:92:33:a6: 77:09:33:39:ad:74:e0:83:23:f6:a5:e6:38:8e:ed: e3:30:86:8d:a3:d5:ac:0f:9e:b9:54:69:38:dc:3b: 50:4a:39:a4:af:65:bc:5f:b5:d6:64:fa:69:cb:be: 99:27:4a:f3:e4:bd:93:17:c0:b0:b2:f8:a0:d7:9b: ca:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:98:9A:48:AD:08:AD:C0:23:81:6E:0B:87:0D:EC:D8:7C:BB:D1:D6 X509v3 Authority Key Identifier: keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2e:c1:b3:27:e9:50:32:5b:39:b0:b4:f0:a8:34:64:8f:de: 83:1c:15:46:1b:6d:5b:43:c0:f5:39:12:47:bb:1e:94:4f:48: af:19:68:19:73:c0:c7:3b:2f:d5:28:01:c2:f8:66:08:3d:05: e7:a4:5c:ab:34:72:42:09:09:ce:57:50:47:7f:e0:8e:03:3e: e6:41:f2:28:26:ab:3b:4b:db:54:05:c3:dc:4a:f7:ea:32:a6: 87:60:09:fc:23:f9:ff:e8:ad:4d:e6:e5:7f:a8:69:21:67:65: fe:a1:b2:fd:c8:02:18:d8:c8:e4:cd:53:57:a5:87:a9:42:01: 82:f3:f4:42:69:06:a4:db:29:37:a5:cd:41:c1:70:89:bd:39: f3:b8:6b:6f:22:9b:cd:0b:cf:7a:0c:6f:b3:17:2c:50:1c:0e: 2e:ec:c3:93:a1:86:89:a0:d5:d4:61:d8:32:de:49:06:5d:ac: 0b:b3:d8:8e:90:f3:d4:de:b6:85:bc:74:42:f6:a1:25:96:74: e2:d6:3e:cf:17:e2:b1:5d:d9:b6:89:4e:86:dc:78:dc:8d:36: 3c:57:30:85:0b:3e:16:51:82:16:58:32:dd:15:f8:ed:a4:63: f0:09:26:99:06:46:65:9b:55:a4:dc:4c:f2:4e:96:f8:ff:ce: 88:28:66:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0 QTFGOUI1MUQwHhcNMjUwODIyMTU1NDIyWhcNMjUwODI5MTU1NDIyWjAYMRYwFAYD VQQDEw02OGE4OTJhZS1hM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70fGZ/g9ZyITTIi/KMqro29VfQitgMI3whRMXbwofV8mERaSUrGMG9s+UtB9 Pw/eXDZtkay5f1MrcvMAISOvplpeoMp0LLsMf5E32cMrZnFSfHeJN/L3rBt6qRc2 Kaw6cgHgL0VO4Ei0vWUt3PxTqzyU+3pevUPfIVefYH3PnKS7ccujL/ariJztPVHx PBiPCPV9wH0A0vDJFAWikGb/Gn41n4KZqsRSdqgusZ/UPfzYg7aiCbifX+OLq5+v aJqSM6Z3CTM5rXTggyP2peY4ju3jMIaNo9WsD565VGk43DtQSjmkr2W8X7XWZPpp y76ZJ0rz5L2TF8Cwsvig15vKGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeYmkit CK3AI4FuC4cN7Nh8u9HWMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00 LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnLsGzJ+lQMls5sLTwqDRkj96DHBVGG21bQ8D1ORJHux6UT0ivGWgZ c8DHOy/VKAHC+GYIPQXnpFyrNHJCCQnOV1BHf+COAz7mQfIoJqs7S9tUBcPcSvfq MqaHYAn8I/n/6K1N5uV/qGkhZ2X+obL9yAIY2MjkzVNXpYepQgGC8/RCaQak2yk3 pc1BwXCJvTnzuGtvIpvNC896DG+zFyxQHA4u7MOToYaJoNXUYdgy3kkGXawLs9iO kPPU3raFvHRC9qEllnTi1j7PF+KxXdm2iU6G3HjcjTY8VzCFCz4WUYIWWDLdFfjt pGPwCSaZBkZlm1Wk3EzyTpb4/86IKGaS -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:01 2025 by rpki-client