$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft File: G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json) Hash identifier: AgZVbscMcDzpK6P6tpDOOv+chqvddrbS3iSNsA0NzPY= Subject key identifier: 83:89:BC:A3:36:9D:6E:BA:19:7D:48:D6:A5:39:BD:FE:65:9C:98:AC Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 Certificate issuer: /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft Manifest number: 1498 Signing time: Fri 22 Aug 2025 18:40:22 +0000 Manifest this update: Fri 22 Aug 2025 18:40:21 +0000 Manifest next update: Fri 29 Aug 2025 18:40:21 +0000 Files and hashes: 1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: P/UROE9pK2J0PcuPhnILy3Zr7MeMdEcKEplZ2YaWBgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Validity Not Before: Aug 22 18:40:21 2025 GMT Not After : Aug 29 18:40:21 2025 GMT Subject: CN=68a8b996-6793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:e0:a1:57:d9:75:4c:c4:98:13:1e:0a:64: 3b:c5:36:c0:c5:43:e5:24:04:ee:f1:fa:e5:48:24: fe:63:d7:70:8d:87:eb:dc:f3:19:38:f8:77:ec:14: 39:a3:45:16:00:9f:fa:c5:57:42:84:20:54:03:d1: 56:6b:24:8e:00:cf:de:ba:67:ba:7a:56:b1:03:fb: 98:cf:3e:fc:15:9b:da:46:c9:f9:bf:9b:69:a7:60: a8:e4:05:a8:6e:53:46:5d:14:50:4b:d0:e5:66:6a: ca:af:b3:27:80:ed:89:e6:6a:b8:91:7b:5b:21:73: 5e:64:ae:41:61:71:ff:1f:7c:30:3c:55:d6:18:77: 55:cb:2c:5e:16:9e:b9:db:36:1f:95:df:5b:96:71: e1:81:c0:e6:f7:b8:a2:ac:33:e2:09:bd:9c:ab:98: 9d:f3:59:09:a5:04:63:1f:b8:fd:a8:bf:34:05:7d: 3d:d7:de:5f:06:bd:58:c2:bd:65:c8:8d:ac:a7:85: 81:7d:8b:bf:aa:82:17:64:25:d8:3e:52:a1:f8:86: bd:39:18:b7:64:24:a3:2a:8d:6f:f4:94:aa:6f:64: 06:ae:d9:86:d7:65:a5:9c:5e:3c:23:5c:4f:ee:28: 27:74:ab:5f:4c:87:a0:30:ee:50:89:f8:54:0a:9d: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:89:BC:A3:36:9D:6E:BA:19:7D:48:D6:A5:39:BD:FE:65:9C:98:AC X509v3 Authority Key Identifier: keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:41:0b:c1:08:70:cb:85:69:db:a7:6f:dd:cd:23:6a:bf:cc: 0e:e7:9a:7f:d0:00:83:37:27:c5:33:6c:fb:46:d7:14:dd:85: 61:8c:a0:96:f4:13:db:e0:86:b3:46:4d:f6:02:8a:e4:31:12: d6:0b:97:e3:5f:3d:31:00:f1:e0:0e:6a:56:1e:0a:b3:f1:03: 4e:9d:73:31:4f:9c:7d:e7:fa:eb:a7:d1:5c:98:1f:52:f9:64: be:32:4d:d7:13:ce:13:95:da:9d:92:d2:a1:cb:bd:f1:4a:e1: 68:2a:1e:ed:60:c7:f3:d2:c2:dc:11:ae:9a:72:67:55:86:02: bc:9b:cd:da:93:6a:c7:8e:46:12:9b:31:b2:cd:97:e5:5c:1d: a2:64:3e:b0:2e:db:76:fc:6c:a8:65:17:28:27:d6:bc:33:56: 4f:a1:e4:fb:13:a0:3a:ed:c9:ad:35:73:53:f7:b2:9f:ac:51: 80:8e:86:94:50:15:59:32:14:97:f6:b0:eb:71:5a:01:1e:76: 77:d0:75:7c:26:b5:50:b3:a8:6f:5b:5c:f0:c2:93:bb:58:ee: 3e:b6:1a:33:2d:cb:2d:f4:69:a2:ea:58:54:98:47:6b:60:c7: 77:44:90:0d:d8:00:fd:c4:49:43:d3:42:41:2a:9e:22:a9:d3: e0:f1:93:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND RjZBMDFBMzAwHhcNMjUwODIyMTg0MDIxWhcNMjUwODI5MTg0MDIxWjAYMRYwFAYD VQQDEw02OGE4Yjk5Ni02NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl7goVfZdUzEmBMeCmQ7xTbAxUPlJATu8frlSCT+Y9dwjYfr3PMZOPh37BQ5 o0UWAJ/6xVdChCBUA9FWaySOAM/eume6elaxA/uYzz78FZvaRsn5v5tpp2Co5AWo blNGXRRQS9DlZmrKr7MngO2J5mq4kXtbIXNeZK5BYXH/H3wwPFXWGHdVyyxeFp65 2zYfld9blnHhgcDm97iirDPiCb2cq5id81kJpQRjH7j9qL80BX09195fBr1Ywr1l yI2sp4WBfYu/qoIXZCXYPlKh+Ia9ORi3ZCSjKo1v9JSqb2QGrtmG12WlnF48I1xP 7igndKtfTIegMO5QifhUCp1mUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOJvKM2 nW66GX1I1qU5vf5lnJisMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ NHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgQQvBCHDLhWnbp2/dzSNqv8wO55p/0ACDNyfFM2z7RtcU3YVhjKCW 9BPb4IazRk32AorkMRLWC5fjXz0xAPHgDmpWHgqz8QNOnXMxT5x95/rrp9FcmB9S +WS+Mk3XE84TldqdktKhy73xSuFoKh7tYMfz0sLcEa6acmdVhgK8m83ak2rHjkYS mzGyzZflXB2iZD6wLtt2/GyoZRcoJ9a8M1ZPoeT7E6A67cmtNXNT97KfrFGAjoaU UBVZMhSX9rDrcVoBHnZ30HV8JrVQs6hvW1zwwpO7WO4+thozLcst9Gmi6lhUmEdr YMd3RJAN2AD9xElD00JBKp4iqdPg8ZN1 -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:27 2025 by rpki-client