$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: OYqx2S9dCn3JRRieF6coJluJQMEvLuvZwmQixm/onVk= Subject key identifier: D6:08:29:C3:84:03:6F:B9:64:B2:BF:C4:A2:6C:84:48:E6:74:5F:2C Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 01AF Signing time: Sat 23 Aug 2025 03:19:58 +0000 Manifest this update: Sat 23 Aug 2025 03:19:58 +0000 Manifest next update: Sat 30 Aug 2025 03:19:58 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: USigY38LxZcLe25RGiajzROJI5kId/xkqRZ2RwH5Lxw=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: 9PDqSioWn5hBKEyF3Xh2bcZ5nBkq113KFDA0GhUPDK8=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: TYXUwM1es+viCTvOIJkrXn99Lf7hGCjK/asxpXmwfB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Aug 23 03:19:58 2025 GMT Not After : Aug 30 03:19:58 2025 GMT Subject: CN=68a9335e-ddd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:ec:f4:80:14:c8:a9:d6:a6:74:7d:98:83: 6a:35:15:ad:e0:7d:3f:60:35:d5:02:fa:d7:c3:d1: 24:27:5f:b6:54:90:c3:bd:8a:af:64:73:2c:e4:70: d0:52:8c:91:20:b4:69:e0:a9:0d:65:c7:62:40:88: f4:b8:bf:c7:9a:be:6e:0f:a5:b2:3c:3b:d2:4a:e0: 41:b0:16:8a:11:a7:d2:f5:d7:da:5d:d1:4d:15:d8: 23:e4:27:d2:d5:5d:71:93:5d:0f:72:09:8e:fb:21: fe:1f:80:1c:cc:a3:6d:4f:b0:c5:a2:b9:5f:c5:eb: e4:de:ea:eb:a6:9f:a3:14:af:19:ec:27:02:b7:c9: 61:51:58:cd:42:61:31:95:08:64:51:eb:db:a2:34: 54:f7:f4:ac:30:f8:c8:74:c0:5e:27:f8:ef:88:89: 53:a8:87:7f:11:c8:09:fb:7d:8e:51:41:73:44:8f: d8:b3:56:2a:7e:ec:d8:83:0d:0c:1a:75:7d:e8:bf: de:6c:ec:48:87:0c:dd:8c:52:50:79:2f:d0:fa:03: 8c:5d:19:90:15:5c:97:10:78:4c:9f:57:e5:80:59: c2:f5:8b:b1:3a:00:1c:0f:60:96:2a:ae:69:90:5c: c5:e0:0e:3e:1a:e0:04:f7:2f:23:b0:6c:2d:b3:fb: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:08:29:C3:84:03:6F:B9:64:B2:BF:C4:A2:6C:84:48:E6:74:5F:2C X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:38:51:62:39:67:3d:08:ec:e1:03:85:6a:b2:66:cd:fb:8e: 03:db:2e:d4:26:5b:9b:45:f2:04:c5:b9:c2:df:1e:0c:5d:fc: 87:5b:f2:3e:07:c4:1a:dd:d9:28:d9:7d:b8:af:17:e6:e1:ce: 02:8d:e6:e1:2a:1d:72:de:0a:d3:d1:05:e0:c9:e0:b0:6f:58: c3:54:7f:16:47:44:db:42:ec:1a:63:99:1f:74:f9:e1:26:81: e8:a7:8f:c9:05:f2:9d:52:9f:69:18:d1:34:27:b6:ce:38:51: e8:d8:2f:7b:ec:db:1d:a2:52:c1:c0:3f:1e:17:eb:d1:6a:50: c6:6f:ab:ce:16:2e:bb:84:9b:e8:70:f1:ad:b1:93:81:25:a1: fc:d8:59:c4:0a:6c:98:0a:43:ce:90:be:e9:18:7b:35:54:07: db:c5:af:45:70:4c:66:4c:35:f5:69:25:cf:24:a9:c4:8f:6a: 2c:b8:f8:ee:b5:a4:e5:be:7c:27:82:b3:4b:4d:38:5c:48:39: c0:de:af:63:17:74:6e:ce:d2:0e:cf:ba:da:b9:25:96:82:fe: ca:3e:bc:be:54:4e:b1:79:09:ef:3c:7e:5d:0b:5b:2a:96:80: 61:ac:5f:eb:b9:60:69:5d:73:ce:fe:bb:1c:f6:32:c0:f2:cd: 4c:77:92:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUwODIzMDMxOTU4WhcNMjUwODMwMDMxOTU4WjAYMRYwFAYD VQQDEw02OGE5MzM1ZS1kZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX7s9IAUyKnWpnR9mINqNRWt4H0/YDXVAvrXw9EkJ1+2VJDDvYqvZHMs5HDQ UoyRILRp4KkNZcdiQIj0uL/Hmr5uD6WyPDvSSuBBsBaKEafS9dfaXdFNFdgj5CfS 1V1xk10PcgmO+yH+H4AczKNtT7DForlfxevk3urrpp+jFK8Z7CcCt8lhUVjNQmEx lQhkUevbojRU9/SsMPjIdMBeJ/jviIlTqId/EcgJ+32OUUFzRI/Ys1YqfuzYgw0M GnV96L/ebOxIhwzdjFJQeS/Q+gOMXRmQFVyXEHhMn1flgFnC9YuxOgAcD2CWKq5p kFzF4A4+GuAE9y8jsGwts/sKuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYIKcOE A2+5ZLK/xKJshEjmdF8sMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0OFFiOWc9COzhA4VqsmbN+44D2y7UJlubRfIExbnC3x4MXfyHW/I+ B8Qa3dko2X24rxfm4c4CjebhKh1y3grT0QXgyeCwb1jDVH8WR0TbQuwaY5kfdPnh JoHop4/JBfKdUp9pGNE0J7bOOFHo2C977NsdolLBwD8eF+vRalDGb6vOFi67hJvo cPGtsZOBJaH82FnECmyYCkPOkL7pGHs1VAfbxa9FcExmTDX1aSXPJKnEj2osuPju taTlvnwngrNLTThcSDnA3q9jF3RuztIOz7rauSWWgv7KPry+VE6xeQnvPH5dC1sq loBhrF/ruWBpXXPO/rsc9jLA8s1Md5Lx -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:12 2025 by rpki-client