$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: 3NcsWRKlpyX8BqX8iLSmUWWYniXSdy79Tr9c3OgB/O0= Subject key identifier: 64:1D:76:81:EC:AB:F0:41:28:2D:87:9D:79:24:10:82:ED:42:25:49 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 106D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1058 Signing time: Fri 22 Aug 2025 17:32:11 +0000 Manifest this update: Fri 22 Aug 2025 17:32:11 +0000 Manifest next update: Fri 29 Aug 2025 17:32:11 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: SFrwSRxUmQXbQWcHdENECviy/IlpCyFzlErr4UGAcn8=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: lt8gmY8g1SyOkxFazii9tDuABaAafi0NX+TiAw/IKTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4205 (0x106d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Aug 22 17:32:11 2025 GMT Not After : Aug 29 17:32:11 2025 GMT Subject: CN=68a8a99b-c800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:40:c2:94:4e:4c:b0:5c:55:ed:73:79:03: 4c:e4:cd:29:3a:1f:db:1a:0f:82:2c:8d:3b:a2:28: 6b:16:f8:b5:2b:87:d8:9f:6a:5e:b2:24:e9:98:c2: c8:62:0d:91:ab:ba:c4:86:23:e9:8f:72:3d:4f:b7: c4:3c:80:68:91:54:9b:06:e4:5f:b4:40:7b:35:21: 84:45:4e:5a:4e:a3:b0:3c:9f:cc:3b:28:65:db:d1: 7d:77:0c:0f:71:a6:d7:62:1f:a1:7d:4e:78:91:51: 3c:1c:1e:2b:7b:ab:0e:de:52:67:95:86:95:fe:69: 13:4e:fd:7d:e0:48:fb:fc:52:02:6b:3c:03:48:bc: 3a:3a:f9:a1:2f:30:32:3a:b5:af:44:22:13:4f:08: 4d:77:88:72:ab:c3:25:c2:e7:cd:a9:fb:96:26:c2: 57:1e:b3:e8:b3:2d:92:a4:04:e9:78:34:e9:7f:ad: 72:05:a0:23:ef:31:99:95:ab:b8:97:73:92:64:83: 08:59:99:34:59:2a:49:b1:d5:7a:63:be:c2:a7:23: 62:f6:c4:f8:79:39:67:7d:d7:ee:ca:d8:69:e3:f7: 56:58:6d:e5:77:e6:17:f2:22:d5:63:8f:12:40:73: 40:3a:08:8e:fb:f4:78:e1:ab:46:d2:3e:5f:11:d0: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1D:76:81:EC:AB:F0:41:28:2D:87:9D:79:24:10:82:ED:42:25:49 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:da:6b:11:c0:b9:53:a5:a1:d4:4c:b2:b4:e4:0c:2d:11:89: 34:2b:db:fc:d4:d8:4f:7f:a5:3b:a7:e3:5f:21:ad:3a:14:23: 82:a2:2c:44:00:0e:16:fa:8e:40:d7:2c:5e:f1:97:2a:fd:82: 25:87:65:e3:50:42:5e:d5:be:ba:26:a4:1a:84:96:9e:c9:27: ae:90:f8:31:8f:78:83:45:aa:9b:23:b1:af:2b:43:83:9a:80: fe:5a:7b:c7:59:c6:72:c0:05:e2:cb:cf:7e:e3:af:0a:20:8f: 02:2c:e2:b9:c9:cb:05:99:18:79:c6:cd:34:71:2a:8a:f5:aa: 03:e4:50:a1:53:8e:63:ff:2b:56:b7:0a:8c:6d:45:75:21:3f: f3:d2:b9:80:3b:32:6b:a8:78:03:0e:fb:82:3f:e2:21:b1:f4: df:3e:f4:33:ec:b5:fa:1c:90:64:d0:18:9b:bd:e1:35:5c:34: cf:4a:1d:48:86:24:4d:f4:ae:ca:5e:e2:62:5e:6b:3a:aa:26: dd:39:2a:92:46:ef:91:96:9c:5d:2c:2c:02:5e:a1:c4:8a:16: 09:79:a4:50:ef:b2:22:cf:72:a4:db:0c:86:dc:83:1d:1b:be: 98:fe:18:3c:ae:8a:55:93:ac:c7:e4:9d:06:5a:09:3a:e6:c9: a6:83:e4:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwODIyMTczMjExWhcNMjUwODI5MTczMjExWjAYMRYwFAYD VQQDEw02OGE4YTk5Yi1jODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrFAwpROTLBcVe1zeQNM5M0pOh/bGg+CLI07oihrFvi1K4fYn2pesiTpmMLI Yg2Rq7rEhiPpj3I9T7fEPIBokVSbBuRftEB7NSGERU5aTqOwPJ/MOyhl29F9dwwP cabXYh+hfU54kVE8HB4re6sO3lJnlYaV/mkTTv194Ej7/FICazwDSLw6OvmhLzAy OrWvRCITTwhNd4hyq8MlwufNqfuWJsJXHrPosy2SpATpeDTpf61yBaAj7zGZlau4 l3OSZIMIWZk0WSpJsdV6Y77CpyNi9sT4eTlnfdfuythp4/dWWG3ld+YX8iLVY48S QHNAOgiO+/R44atG0j5fEdCvgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQddoHs q/BBKC2HnXkkEILtQiVJMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx2msRwLlTpaHUTLK05AwtEYk0K9v81NhPf6U7p+NfIa06FCOCoixE AA4W+o5A1yxe8Zcq/YIlh2XjUEJe1b66JqQahJaeySeukPgxj3iDRaqbI7GvK0OD moD+WnvHWcZywAXiy89+468KII8CLOK5ycsFmRh5xs00cSqK9aoD5FChU45j/ytW twqMbUV1IT/z0rmAOzJrqHgDDvuCP+IhsfTfPvQz7LX6HJBk0BibveE1XDTPSh1I hiRN9K7KXuJiXms6qibdOSqSRu+RlpxdLCwCXqHEihYJeaRQ77Iiz3Kk2wyG3IMd G76Y/hg8ropVk6zH5J0GWgk65smmg+QI -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:31 2025 by rpki-client