$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: 18/bohWVZxcxy8FVxn9NAOkLbfN+e8WoQMSQx4WLOeI= Subject key identifier: E1:E9:80:DE:1E:2B:08:F8:75:D7:ED:A1:77:C2:23:E3:C0:18:44:10 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 019E Signing time: Sat 23 Aug 2025 03:39:39 +0000 Manifest this update: Sat 23 Aug 2025 03:39:38 +0000 Manifest next update: Sat 30 Aug 2025 03:39:38 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: vA1A+gvo1kSsh52CEr9BhwJi3NoWhjIhfy/MHjbcqFQ=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 0HkSWoIqELp3ylHO6VoceHK/AkbpkOqVqSCheHiI6Uo=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: n8VX91JedlAvIqLFu7Bl3QhQfuPAxDc2ekOd4lvr+ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Aug 23 03:39:38 2025 GMT Not After : Aug 30 03:39:38 2025 GMT Subject: CN=68a937fb-75f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:23:23:63:c9:31:74:41:18:10:f6:92:6e: b8:50:9b:83:05:b2:04:11:5a:e8:87:21:d1:c9:ba: 4c:c9:1a:b7:0e:73:68:66:c6:83:37:58:f5:1a:f8: ab:7f:9d:c2:2f:a2:7e:d5:91:74:bf:26:ff:23:82: 14:b0:b1:5b:e5:30:90:0e:80:b1:41:ee:61:7f:22: 94:89:d4:bc:c8:34:d0:04:5a:01:e2:91:44:b0:e1: 2f:ce:47:44:a1:f7:76:33:db:2e:77:56:1b:45:60: 0a:74:b1:23:fc:8d:98:cb:6d:a6:66:e4:ba:bf:56: 78:2e:d5:62:6d:05:41:3d:19:66:20:5f:c3:42:b4: bc:26:6a:94:a7:07:69:ae:76:13:1a:e3:ac:76:76: 56:f9:bf:c7:7a:65:07:3c:0e:60:e6:cf:55:84:70: 11:c3:47:03:03:f7:fa:67:4f:16:d2:a3:11:2f:c7: dc:16:b7:a8:83:38:9f:56:2a:42:a0:45:a3:4b:d7: 36:d5:76:c1:29:e2:2e:53:d7:64:db:b3:59:b6:64: 43:d8:45:9f:58:9f:e6:ed:46:e6:72:a3:78:93:88: 0a:f3:98:68:80:66:0f:13:97:e7:fb:38:e4:96:a8: 7f:70:c1:fd:00:d8:de:6f:b6:93:b0:5c:6b:c0:71: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:80:DE:1E:2B:08:F8:75:D7:ED:A1:77:C2:23:E3:C0:18:44:10 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:42:1d:93:2d:74:cd:85:c6:da:43:31:04:7a:60:f6:2b:1d: dc:44:87:2c:c1:3b:b8:d9:3d:d8:b6:ca:ee:00:ed:b7:b3:34: b0:09:79:c1:6c:0d:dd:f5:95:a4:81:b3:16:ca:25:7f:34:05: 51:cc:3a:26:3a:31:1c:39:1f:6b:88:97:05:8c:ef:c6:48:bb: 24:e5:14:ea:05:5e:a7:eb:18:14:74:4b:82:ba:82:a3:9d:71: 78:c1:5b:22:4f:37:2a:c8:e0:25:ed:0c:ab:e0:e9:5d:7b:9a: 38:ce:0f:de:1b:80:6a:b4:b2:d0:7b:62:c5:f4:a9:9c:94:da: 37:f6:4c:6e:e5:84:6e:93:4c:d3:03:68:11:bf:ed:83:38:2f: e5:01:94:c4:0e:cb:45:bc:ff:f8:71:88:70:bb:b0:56:ea:a6: d2:79:bf:41:8b:37:d5:e8:33:89:db:04:89:03:34:c0:8b:25: 66:b7:43:4d:0e:41:49:3e:5d:6e:1b:74:60:f3:32:14:54:53: 0f:2c:18:14:a4:68:70:4b:1b:5a:fb:98:33:55:80:5f:32:76: a2:d2:30:0a:c1:bc:8c:d1:d8:c5:33:c9:00:91:8d:f6:05:1a: 48:38:ba:eb:02:1e:e9:fb:1f:1d:50:70:dd:a9:b1:8f:75:83: f7:29:0b:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjUwODIzMDMzOTM4WhcNMjUwODMwMDMzOTM4WjAYMRYwFAYD VQQDEw02OGE5MzdmYi03NWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYojI2PJMXRBGBD2km64UJuDBbIEEVrohyHRybpMyRq3DnNoZsaDN1j1Gvir f53CL6J+1ZF0vyb/I4IUsLFb5TCQDoCxQe5hfyKUidS8yDTQBFoB4pFEsOEvzkdE ofd2M9sud1YbRWAKdLEj/I2Yy22mZuS6v1Z4LtVibQVBPRlmIF/DQrS8JmqUpwdp rnYTGuOsdnZW+b/HemUHPA5g5s9VhHARw0cDA/f6Z08W0qMRL8fcFreogzifVipC oEWjS9c21XbBKeIuU9dk27NZtmRD2EWfWJ/m7UbmcqN4k4gK85hogGYPE5fn+zjk lqh/cMH9ANjeb7aTsFxrwHHW3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHpgN4e Kwj4ddftoXfCI+PAGEQQMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaQh2TLXTNhcbaQzEEemD2Kx3cRIcswTu42T3YtsruAO23szSwCXnB bA3d9ZWkgbMWyiV/NAVRzDomOjEcOR9riJcFjO/GSLsk5RTqBV6n6xgUdEuCuoKj nXF4wVsiTzcqyOAl7Qyr4Olde5o4zg/eG4BqtLLQe2LF9KmclNo39kxu5YRuk0zT A2gRv+2DOC/lAZTEDstFvP/4cYhwu7BW6qbSeb9BizfV6DOJ2wSJAzTAiyVmt0NN DkFJPl1uG3Rg8zIUVFMPLBgUpGhwSxta+5gzVYBfMnai0jAKwbyM0djFM8kAkY32 BRpIOLrrAh7p+x8dUHDdqbGPdYP3KQsj -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:10 2025 by rpki-client