$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft File: GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json) Hash identifier: 5Ax/NunxartIfalS3cNVt/+GbD6WtiAFB/zN07A6MvU= Subject key identifier: 9D:14:4F:87:C1:D3:E5:F1:4A:1E:EE:40:C4:3F:15:35:94:25:76:AB Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 Certificate issuer: /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Certificate serial: 04FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft Manifest number: 04FA Signing time: Fri 22 Aug 2025 23:52:13 +0000 Manifest this update: Fri 22 Aug 2025 23:52:12 +0000 Manifest next update: Fri 29 Aug 2025 23:52:12 +0000 Files and hashes: 1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: V8LmGYsOUqFV2WD63DGBKc5pS8viev80DlT+h9gONFQ=) 2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: 40Tp9vYlwNjlXHzULzghK25QKYAH3IMjVH7JAvH5N/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Validity Not Before: Aug 22 23:52:12 2025 GMT Not After : Aug 29 23:52:12 2025 GMT Subject: CN=68a902ad-e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:4c:f1:53:8c:09:60:d6:76:63:f1:8d:08: b3:45:2c:c0:b8:95:69:bb:69:d7:90:bc:c0:83:44: 60:e4:86:a2:40:02:e3:f8:75:fb:01:eb:e9:ee:2b: bc:16:ac:62:b0:cf:56:d4:36:cd:92:2d:b5:1a:ba: e5:cb:4f:dc:3e:d7:b8:fd:50:63:32:df:05:c6:3a: 0d:f8:fe:67:29:a9:fb:b1:ea:b4:83:b3:a3:f8:23: 45:e5:c3:75:b2:e7:df:33:e3:b7:ad:b6:71:4a:90: 06:2c:e3:80:a1:7b:ca:fc:52:07:56:29:b9:41:6b: c1:4a:a0:cf:a5:84:74:ba:52:2c:a6:47:b0:ab:e4: 1c:1a:e7:e3:5e:e1:43:96:a6:87:ee:6e:42:4c:8c: d7:b4:53:fc:90:18:d3:ac:8a:14:fe:34:47:5c:d5: 76:bb:49:8d:c9:34:5b:7a:f3:40:a2:a8:15:66:93: 57:2b:12:20:7f:b9:01:06:9a:e0:0a:c1:cc:aa:f5: 5b:ea:dc:b5:56:2b:67:3c:ce:d5:7c:b7:3c:a4:32: b5:3b:fa:92:fa:65:bc:7d:e3:46:f7:4c:66:22:cd: 9d:ef:e4:fd:1b:9a:fb:24:e2:43:d1:54:75:d2:83: 49:da:90:e6:dc:87:04:25:fa:4a:c2:d4:08:a5:c6: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:14:4F:87:C1:D3:E5:F1:4A:1E:EE:40:C4:3F:15:35:94:25:76:AB X509v3 Authority Key Identifier: keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3b:25:27:70:0f:8c:c6:e8:51:59:1a:cd:72:39:56:60:80: 2a:76:3f:6a:f4:37:3d:c3:c1:6c:f8:e6:10:13:5f:d8:bf:95: 97:4a:6c:d7:47:b5:45:4b:e4:ff:6a:4b:5a:e3:bb:c8:65:0e: 65:2e:ca:53:ab:19:b4:98:b4:c9:2c:1f:26:1d:17:2c:69:37: 00:52:58:d0:7e:1f:4a:fc:c9:72:9c:c2:07:bf:14:4d:e3:99: 5d:05:b5:99:83:13:f7:37:7d:ec:d9:32:3e:17:a8:3d:6a:26: 3a:b7:57:8f:ad:6f:cb:92:f8:59:0e:3b:11:a2:e0:e6:2a:2b: d5:59:f6:9b:a9:1c:e8:34:fd:32:d0:fa:7f:4a:da:79:cd:9a: 75:2e:69:4a:3e:f9:b8:96:51:8e:6d:53:b9:da:80:14:e2:49: 7c:e0:9d:7c:25:f4:6d:ed:b5:05:4f:d2:4f:70:4e:37:a2:89: f6:bf:e9:ab:84:f8:aa:4d:5e:e0:ce:34:c6:5e:40:fe:68:10: 67:00:61:63:c5:de:e5:83:ed:56:c5:ca:89:31:46:1b:cb:b1: 40:a0:f0:a6:e5:94:2a:e3:55:6a:b0:a8:af:83:9c:17:bb:55: 48:c8:20:7a:e8:cf:df:72:a2:8a:5d:46:52:9a:9c:9e:d2:f9: 81:8c:85:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0RjgxMTAvBgNVBAUTKDFBN0E1MEQ1MjE1QTkyNTkxMTA0MDZCMEI2OTM2RkFF MTRFQTdEODMwHhcNMjUwODIyMjM1MjEyWhcNMjUwODI5MjM1MjEyWjAYMRYwFAYD VQQDEw02OGE5MDJhZC1lM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA275M8VOMCWDWdmPxjQizRSzAuJVpu2nXkLzAg0Rg5IaiQALj+HX7Aevp7iu8 FqxisM9W1DbNki21Grrly0/cPte4/VBjMt8FxjoN+P5nKan7seq0g7Oj+CNF5cN1 suffM+O3rbZxSpAGLOOAoXvK/FIHVim5QWvBSqDPpYR0ulIspkewq+QcGufjXuFD lqaH7m5CTIzXtFP8kBjTrIoU/jRHXNV2u0mNyTRbevNAoqgVZpNXKxIgf7kBBprg CsHMqvVb6ty1VitnPM7VfLc8pDK1O/qS+mW8feNG90xmIs2d7+T9G5r7JOJD0VR1 0oNJ2pDm3IcEJfpKwtQIpcaZGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0UT4fB 0+XxSh7uQMQ/FTWUJXarMB8GA1UdIwQYMBaAFBp6UNUhWpJZEQQGsLaTb64U6n2D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRGOC82NTQ4NjFEODIw RjUxMUVDQTY3NUM0NDJDNEY5QUUwMi9HbnBRMVNGYWtsa1JCQWF3dHBOdnJoVHFm WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ducFExU0Zha2xrUkJBYXd0cE52cmhUcWZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRGOC82NTQ4NjFEODIwRjUxMUVDQTY3NUM0NDJDNEY5QUUwMi9HbnBRMVNGYWts a1JCQWF3dHBOdnJoVHFmWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWOyUncA+MxuhRWRrNcjlWYIAqdj9q9Dc9w8Fs+OYQE1/Yv5WXSmzX R7VFS+T/akta47vIZQ5lLspTqxm0mLTJLB8mHRcsaTcAUljQfh9K/MlynMIHvxRN 45ldBbWZgxP3N33s2TI+F6g9aiY6t1ePrW/LkvhZDjsRouDmKivVWfabqRzoNP0y 0Pp/Stp5zZp1LmlKPvm4llGObVO52oAU4kl84J18JfRt7bUFT9JPcE43oon2v+mr hPiqTV7gzjTGXkD+aBBnAGFjxd7lg+1WxcqJMUYby7FAoPCm5ZQq41VqsKivg5wX u1VIyCB66M/fcqKKXUZSmpye0vmBjIV6 -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:58 2025 by rpki-client