$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: 9EF5hcf+omxjTCw1fqY5tr7a1ZgpEvNFEfr8EflkNoc= Subject key identifier: 86:43:22:4E:40:8E:E3:B6:81:9C:8F:CB:AB:20:48:EC:2A:01:FB:05 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C48 Signing time: Fri 22 Aug 2025 18:41:42 +0000 Manifest this update: Fri 22 Aug 2025 18:41:42 +0000 Manifest next update: Fri 29 Aug 2025 18:41:42 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: 4IRaH4SW5n/Y0dL9kn0rgYHM5/BwfUkwdwcFsF3TR+g=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: E0+Wetfx26FkfR/4N1Ow0BnaKFJugSEUCFgfURwthKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Aug 22 18:41:42 2025 GMT Not After : Aug 29 18:41:42 2025 GMT Subject: CN=68a8b9e6-64f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:0f:56:f6:68:64:4e:f0:19:2f:42:d8:da: bb:4a:38:33:ae:af:de:15:4e:31:0a:91:f5:c1:b4: 10:f4:28:72:ea:e4:3e:bd:c0:84:06:7d:06:4e:1e: dc:ed:0a:c2:53:d7:de:92:40:f8:7c:17:65:68:53: b0:90:cc:82:bc:66:3c:e1:5a:1c:7e:31:1e:22:33: 9c:ba:75:c2:51:ef:c3:42:ff:a6:63:37:34:45:36: b4:e6:55:03:71:95:e7:0a:ae:0f:9b:c1:9c:16:25: dc:77:a0:40:a3:28:d6:8b:d0:11:24:4f:75:14:90: 00:45:36:e1:05:d0:9e:be:a0:77:33:1e:57:dd:31: 5f:ac:37:52:8c:5f:1a:dd:73:d2:8a:d2:0d:b2:7f: bd:41:61:25:eb:1a:8c:55:e9:6c:9b:c0:1e:41:ff: b4:1b:40:dc:d9:49:92:f3:55:ef:a7:e8:b2:f8:f1: 0d:81:44:9f:70:6d:fc:a1:42:2e:79:47:c8:39:96: 27:57:7f:0e:82:7f:f0:df:db:ad:cf:25:ab:5e:f1: a1:64:ac:59:cc:3d:ac:ce:41:fd:31:d1:83:d6:88: 99:12:e8:9b:64:2e:e7:b2:1f:44:4d:f2:68:5d:a8: bc:5e:c3:6e:e4:69:d9:42:2e:2c:1e:07:bf:4d:fa: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:43:22:4E:40:8E:E3:B6:81:9C:8F:CB:AB:20:48:EC:2A:01:FB:05 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3a:26:b0:0b:24:ed:51:f0:2f:d7:18:05:0f:54:7b:85:6d: cc:94:9a:d0:fa:3d:37:f5:ae:23:2c:b0:fd:1c:5c:00:27:80: 5b:05:d9:37:36:1d:7f:55:99:c9:43:65:c0:05:ef:e8:54:37: 7e:a2:5b:dd:be:08:48:4a:0a:dc:5b:b8:99:05:9b:1c:91:3f: 6c:bf:c1:7b:46:df:a7:68:5b:7b:fe:e9:d8:8a:0a:6d:09:20: 47:cc:69:50:9d:98:cf:a5:77:f8:a5:85:f3:87:ad:5d:73:0e: 87:d3:22:48:d7:c1:6f:f4:50:41:c9:39:b3:a7:c9:f8:1f:6a: 64:3e:ed:59:13:0d:40:9a:72:33:90:6b:b6:e9:1a:36:ca:2a: fc:c7:7a:10:9c:4a:6b:a8:de:80:b3:b2:49:9b:0d:b9:ad:f9: e1:b1:c8:79:72:56:5a:0b:32:0f:f8:8c:15:4c:b3:a1:fc:26: 3d:f1:a5:92:08:5b:1f:b6:c3:8e:3b:41:53:e3:3f:1a:d2:a2: 1e:86:67:b9:a5:26:62:84:a2:33:34:0c:d6:10:d7:75:6d:2d: e0:c7:3e:45:c1:04:7d:8a:5d:70:c3:13:7f:88:20:fa:e7:2f: 6d:be:fc:52:d6:9d:94:bf:20:a2:9c:7c:c1:98:6a:61:3d:ed: e0:7c:62:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUwODIyMTg0MTQyWhcNMjUwODI5MTg0MTQyWjAYMRYwFAYD VQQDEw02OGE4YjllNi02NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIAPVvZoZE7wGS9C2Nq7Sjgzrq/eFU4xCpH1wbQQ9Chy6uQ+vcCEBn0GTh7c 7QrCU9fekkD4fBdlaFOwkMyCvGY84VocfjEeIjOcunXCUe/DQv+mYzc0RTa05lUD cZXnCq4Pm8GcFiXcd6BAoyjWi9ARJE91FJAARTbhBdCevqB3Mx5X3TFfrDdSjF8a 3XPSitINsn+9QWEl6xqMVelsm8AeQf+0G0Dc2UmS81Xvp+iy+PENgUSfcG38oUIu eUfIOZYnV38Ogn/w39utzyWrXvGhZKxZzD2szkH9MdGD1oiZEuibZC7nsh9ETfJo Xai8XsNu5GnZQi4sHge/TfpeewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZDIk5A juO2gZyPy6sgSOwqAfsFMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7OiawCyTtUfAv1xgFD1R7hW3MlJrQ+j039a4jLLD9HFwAJ4BbBdk3 Nh1/VZnJQ2XABe/oVDd+olvdvghISgrcW7iZBZsckT9sv8F7Rt+naFt7/unYigpt CSBHzGlQnZjPpXf4pYXzh61dcw6H0yJI18Fv9FBByTmzp8n4H2pkPu1ZEw1AmnIz kGu26Ro2yir8x3oQnEprqN6As7JJmw25rfnhsch5clZaCzIP+IwVTLOh/CY98aWS CFsftsOOO0FT4z8a0qIehme5pSZihKIzNAzWENd1bS3gxz5FwQR9il1wwxN/iCD6 5y9tvvxS1p2UvyCinHzBmGphPe3gfGIl -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:06 2025 by rpki-client