$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: vcN11ZBMG3Gmq8J3g8fRPM7Z1ulZ2ZDCmluk01G/4nc= Subject key identifier: CB:0E:54:51:1E:D2:5C:F0:2A:42:BA:01:68:46:F8:06:3D:C1:5A:C9 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 01FA Signing time: Sat 23 Aug 2025 02:31:51 +0000 Manifest this update: Sat 23 Aug 2025 02:31:50 +0000 Manifest next update: Sat 30 Aug 2025 02:31:50 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: f8FDs0h9Rx59IOzIvhD5SxCfteccqORs3Q6S4TedSa4=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Aug 23 02:31:50 2025 GMT Not After : Aug 30 02:31:50 2025 GMT Subject: CN=68a92816-4147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:ef:97:80:4b:00:55:a7:9d:8d:dc:73:d5: 17:f9:05:d5:3b:3e:1f:7d:5a:ee:25:91:8e:e6:4b: 6d:36:66:11:34:be:77:4b:2b:1e:87:db:55:da:e5: b7:5a:c6:c0:00:be:f6:e8:7c:f1:c3:ce:13:73:97: be:c2:fd:b7:e6:f9:d9:17:02:88:6f:6b:7d:11:69: 80:9a:98:91:40:ef:0f:58:63:8d:da:98:0d:88:3b: 7c:a2:d3:77:48:68:b2:6e:42:2f:98:74:4d:b8:15: 32:71:86:11:10:77:44:03:23:ae:73:ce:5c:bc:e7: 6e:f7:d0:34:73:cf:f5:62:db:9d:ba:4e:b6:22:e6: 78:ee:fa:3c:46:2f:52:98:0e:03:89:d5:d7:16:78: af:bc:2e:4e:35:78:51:0e:13:f2:56:a0:68:3f:e8: 0a:80:81:ec:c6:0a:4f:26:1d:63:de:f6:4c:68:91: c8:b6:65:fb:21:22:b6:57:cc:f6:b5:11:3f:94:c8: 9d:ab:2c:7c:06:93:4f:1c:b6:2b:85:7e:10:6a:d9: 9a:32:07:b2:d5:b0:53:25:59:55:f6:fb:fa:07:2c: 63:25:b9:ea:ca:3a:f9:9f:f1:f5:5a:08:c3:c9:a0: 56:88:1a:b9:3f:00:73:85:bf:38:1b:2a:01:2b:15: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0E:54:51:1E:D2:5C:F0:2A:42:BA:01:68:46:F8:06:3D:C1:5A:C9 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:18:fe:94:87:6b:78:8e:f1:2c:2f:35:3c:43:29:b1:96:fd: 6b:40:d9:ad:23:27:30:b5:1c:12:50:ac:4b:c1:16:7b:f8:6f: 02:30:c0:70:3f:99:34:bc:e4:c6:89:ea:ac:27:db:10:51:01: c1:47:cf:3c:87:e0:50:85:fd:dd:62:b3:68:dd:5a:f4:9d:61: 63:f2:26:94:c4:5a:98:d6:74:33:1e:ee:d3:4b:c4:28:41:3c: 68:be:23:7f:2a:b8:01:e8:12:db:62:05:69:01:f9:61:c4:2e: f0:04:1b:93:ea:de:d5:10:4f:9e:5f:70:86:32:0d:9e:6c:ec: 6f:ee:4d:d1:6f:74:d1:2a:3c:18:cb:b2:07:f2:5f:09:c5:a1: 80:d7:c0:a6:a6:a5:4f:e2:bc:b8:f3:a2:ee:9d:2a:79:23:86: e8:d4:fb:09:03:f3:4b:5e:ad:34:7b:8c:59:eb:54:e8:1f:57: 6e:38:bb:23:cf:33:fe:05:f6:13:04:91:a3:45:42:01:67:c0: d6:1a:68:18:78:d5:4e:45:72:d9:60:13:7f:35:f7:5d:40:6c: 27:12:8d:20:ea:22:66:a5:84:2b:ea:24:6c:d7:be:e4:5a:78: 60:d7:d1:95:22:07:ae:7e:6a:50:9d:3f:4e:5a:4f:00:c4:0f: 7c:30:86:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUwODIzMDIzMTUwWhcNMjUwODMwMDIzMTUwWjAYMRYwFAYD VQQDEw02OGE5MjgxNi00MTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7Pvl4BLAFWnnY3cc9UX+QXVOz4ffVruJZGO5kttNmYRNL53Syseh9tV2uW3 WsbAAL726Hzxw84Tc5e+wv235vnZFwKIb2t9EWmAmpiRQO8PWGON2pgNiDt8otN3 SGiybkIvmHRNuBUycYYREHdEAyOuc85cvOdu99A0c8/1Ytuduk62IuZ47vo8Ri9S mA4DidXXFnivvC5ONXhRDhPyVqBoP+gKgIHsxgpPJh1j3vZMaJHItmX7ISK2V8z2 tRE/lMidqyx8BpNPHLYrhX4QatmaMgey1bBTJVlV9vv6ByxjJbnqyjr5n/H1WgjD yaBWiBq5PwBzhb84GyoBKxWg3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsOVFEe 0lzwKkK6AWhG+AY9wVrJMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfGP6Uh2t4jvEsLzU8Qymxlv1rQNmtIycwtRwSUKxLwRZ7+G8CMMBw P5k0vOTGieqsJ9sQUQHBR888h+BQhf3dYrNo3Vr0nWFj8iaUxFqY1nQzHu7TS8Qo QTxoviN/KrgB6BLbYgVpAflhxC7wBBuT6t7VEE+eX3CGMg2ebOxv7k3Rb3TRKjwY y7IH8l8JxaGA18CmpqVP4ry486LunSp5I4bo1PsJA/NLXq00e4xZ61ToH1duOLsj zzP+BfYTBJGjRUIBZ8DWGmgYeNVORXLZYBN/NfddQGwnEo0g6iJmpYQr6iRs177k Wnhg19GVIgeufmpQnT9OWk8AxA98MIYA -----END CERTIFICATE-----Generated at Sun Aug 24 00:53:27 2025 by rpki-client