$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: lD2Ceksw1+5OET4f4Lw2JOuVe6NK/rv761lTO8nlKFA= Subject key identifier: CF:CE:33:C1:FB:09:99:4C:5D:05:A9:84:C2:F6:FA:7A:F4:9A:F8:E4 Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 01BA Signing time: Sat 23 Aug 2025 03:10:48 +0000 Manifest this update: Sat 23 Aug 2025 03:10:47 +0000 Manifest next update: Sat 30 Aug 2025 03:10:47 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: UL0//hjhMs6gCRF4N3z2IK2AkMEdODqqBidR3KqNxtY=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: txIJm5SN5mj5ufLae9sOD2bwnfe8kYJIqTNAvBL7Uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Aug 23 03:10:47 2025 GMT Not After : Aug 30 03:10:47 2025 GMT Subject: CN=68a93138-ab20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:87:96:96:eb:7a:b9:aa:4c:1a:b2:fe:1e:ab: 68:f9:61:a0:2d:03:16:8a:fa:a9:a2:ac:57:7b:85: 26:84:b8:df:c2:d1:65:3b:62:72:b7:6c:7a:75:fc: d1:3d:3f:90:52:27:11:21:db:90:ad:1d:a5:31:10: 3c:54:5b:41:fa:50:f0:05:9e:a2:d0:ef:98:33:22: 2f:7e:bc:7c:a6:83:39:1e:c7:3c:45:71:ff:32:62: f6:6c:da:5f:ff:06:f1:3b:b6:47:73:25:f7:d4:96: 82:44:6c:ad:cb:28:81:ae:57:e2:07:19:30:f6:64: 10:2c:1e:d0:b4:6a:2c:93:12:aa:2b:10:4e:ba:d5: 38:2a:02:11:e0:66:fb:b2:15:50:b1:86:3c:3c:4a: 01:52:f1:44:7d:6e:dc:ce:b3:2b:b6:97:93:2a:51: cf:72:52:59:ef:25:26:7d:aa:30:ac:c0:46:fd:9e: bf:c6:c7:71:3c:e4:61:e1:1f:df:fd:ce:5c:c0:b0: 3b:d0:67:6c:74:c6:71:c8:ee:b3:6f:10:72:96:2c: bc:fc:bb:49:bd:d6:b8:8e:2c:84:1e:4d:18:4e:af: d1:75:49:cc:58:b1:bd:4f:3e:63:b5:a1:8b:d9:11: 42:b4:cb:7d:3f:21:89:ab:0e:05:69:54:94:d2:c8: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:33:C1:FB:09:99:4C:5D:05:A9:84:C2:F6:FA:7A:F4:9A:F8:E4 X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ac:17:c1:51:91:04:8c:9b:20:a5:d8:89:ef:a6:bb:95:56: a2:f7:05:f4:47:8a:f9:66:56:20:e3:36:bf:0e:c6:e5:4a:07: 18:50:97:a7:0c:31:f1:5d:37:43:c1:04:c4:17:02:c2:2c:1a: 6b:c2:95:ca:66:51:58:b6:d4:7a:1e:48:7d:48:8a:e9:0a:89: f4:c0:6d:7c:0e:ff:3d:17:f9:f9:36:c4:9c:7d:0e:52:82:7c: 9a:1e:f7:f5:b2:44:c9:11:1c:af:a8:04:06:f7:55:fc:1d:c9: c5:6c:b8:29:88:3c:83:72:5f:78:ab:bc:dd:d4:84:45:1d:35: bc:6c:35:e3:d1:5b:7d:ca:0a:b1:a4:e2:31:18:92:a8:da:dc: 20:17:7a:7f:5a:68:6a:30:db:89:fc:2d:5f:63:d9:97:d6:a1: ae:b3:89:5d:06:31:c1:ba:de:29:b3:7e:59:c4:39:d5:fc:7d: 55:8a:87:29:81:20:e9:2d:8c:aa:a5:33:29:cb:40:ab:7a:ab: 56:52:24:a3:c5:91:e8:b2:ae:e3:8e:ae:8e:50:64:af:99:01: 31:0d:2f:b9:e5:52:b6:93:82:09:b9:f6:33:1b:da:51:79:99: 92:71:0a:de:4d:c3:18:76:0a:34:66:e2:8f:50:d9:03:02:9e: fb:29:2f:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUwODIzMDMxMDQ3WhcNMjUwODMwMDMxMDQ3WjAYMRYwFAYD VQQDEw02OGE5MzEzOC1hYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/IeWlut6uapMGrL+Hqto+WGgLQMWivqpoqxXe4UmhLjfwtFlO2Jyt2x6dfzR PT+QUicRIduQrR2lMRA8VFtB+lDwBZ6i0O+YMyIvfrx8poM5Hsc8RXH/MmL2bNpf /wbxO7ZHcyX31JaCRGytyyiBrlfiBxkw9mQQLB7QtGoskxKqKxBOutU4KgIR4Gb7 shVQsYY8PEoBUvFEfW7czrMrtpeTKlHPclJZ7yUmfaowrMBG/Z6/xsdxPORh4R/f /c5cwLA70GdsdMZxyO6zbxByliy8/LtJvda4jiyEHk0YTq/RdUnMWLG9Tz5jtaGL 2RFCtMt9PyGJqw4FaVSU0sgxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/OM8H7 CZlMXQWphML2+nr0mvjkMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7rBfBUZEEjJsgpdiJ76a7lVai9wX0R4r5ZlYg4za/DsblSgcYUJen DDHxXTdDwQTEFwLCLBprwpXKZlFYttR6Hkh9SIrpCon0wG18Dv89F/n5NsScfQ5S gnyaHvf1skTJERyvqAQG91X8HcnFbLgpiDyDcl94q7zd1IRFHTW8bDXj0Vt9ygqx pOIxGJKo2twgF3p/WmhqMNuJ/C1fY9mX1qGus4ldBjHBut4ps35ZxDnV/H1Viocp gSDpLYyqpTMpy0CreqtWUiSjxZHosq7jjq6OUGSvmQExDS+55VK2k4IJufYzG9pR eZmScQreTcMYdgo0ZuKPUNkDAp77KS8H -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:29 2025 by rpki-client