$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: PDSakaymCYDsCGD5s8qDJSnWAby7LEOa/ypsP+aIoHo= Subject key identifier: 4D:30:A8:CF:59:AA:36:99:2E:DE:DE:29:84:98:3D:D6:B1:07:D2:6E Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0E5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0E53 Signing time: Fri 22 Aug 2025 17:52:58 +0000 Manifest this update: Fri 22 Aug 2025 17:52:57 +0000 Manifest next update: Fri 29 Aug 2025 17:52:57 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: dRuZGz1MJ6bhjXYZHJ+w3JVEVqBwmcD8cGFpse7n8rk=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: KLPJPe472S0O1L4BKJwaeNcAQbh5Hn42irMA5av03NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3678 (0xe5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Aug 22 17:52:57 2025 GMT Not After : Aug 29 17:52:57 2025 GMT Subject: CN=68a8ae79-f2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:2c:23:c1:10:65:58:81:07:92:60:ee:3a: 70:16:de:54:d7:62:f7:96:13:7a:4e:73:cc:a7:ba: a7:e9:98:1d:d1:c6:fe:b4:c5:a0:06:8a:d9:a6:74: 8e:c0:29:31:0f:95:f2:c3:f3:f9:b1:e0:c6:13:f9: 50:b0:77:4a:5d:21:69:28:c1:90:57:7f:34:95:df: ce:a8:2f:d3:f2:aa:83:f7:ea:b0:eb:e7:f8:de:88: c4:d6:17:72:13:76:f4:d7:1d:65:05:71:93:12:21: 48:59:87:9a:8b:20:8e:1c:69:e2:e7:3e:02:aa:ff: b4:2d:aa:47:86:9a:37:29:3c:c8:23:20:a7:f5:b2: 6c:c0:09:f6:96:ec:15:eb:ae:93:98:c6:6a:d0:5a: a1:81:fd:37:5b:43:d1:87:8f:22:23:5d:d1:f3:0d: dc:0c:47:9a:70:47:5d:38:93:6f:ad:20:92:0c:b3: c2:8b:02:b5:20:17:7d:3b:ec:ab:9e:1b:25:54:29: 19:06:22:53:0f:6a:4d:3a:db:42:5e:ea:f5:3f:72: e6:0e:20:e2:b0:32:7b:6c:77:16:d0:27:47:77:70: dc:64:2b:99:3b:19:38:09:fc:7a:5f:ea:a7:94:cc: 47:26:c9:3b:38:21:b7:f5:57:55:09:81:c9:10:ed: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:30:A8:CF:59:AA:36:99:2E:DE:DE:29:84:98:3D:D6:B1:07:D2:6E X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c1:21:5d:1a:08:13:5c:42:98:0f:20:1c:c5:f1:e6:32:40: 16:c3:fe:08:fa:99:1b:0b:83:bf:0c:ae:60:52:26:24:39:02: b4:57:d3:ab:98:f8:3b:ff:51:ad:0c:17:ef:df:9c:84:b9:07: d7:15:1d:64:0f:05:2d:66:f0:86:13:4e:4f:3e:81:e6:aa:13: 35:d9:5f:e8:e3:5f:39:52:fe:d1:55:21:8d:14:35:9b:ad:71: ac:cb:e8:dc:a1:cc:91:dc:a8:e8:ee:33:ad:2d:9a:a6:bb:10: f4:04:65:c6:93:53:d9:c5:c0:85:c2:5e:61:75:06:e3:c6:f3: 02:f1:2e:33:d9:a0:13:52:75:fe:f2:43:b5:f0:a2:7b:dc:3a: 37:5a:80:e5:3e:24:13:7a:cc:fd:86:2a:5f:0d:32:40:32:a4: 32:d2:31:c1:bc:1e:56:b1:db:a7:8b:b3:8b:8b:6a:11:97:6f: 1c:12:f9:1c:52:29:13:65:e0:5c:c5:67:3e:69:6c:7d:44:08: 0e:3f:d4:ad:79:3c:42:c7:65:7b:63:98:e0:72:55:ab:72:11: 07:ed:b0:ec:08:2b:5d:80:30:1c:bc:31:44:b5:da:9b:3f:7f: 02:d4:58:22:71:19:c7:2f:ce:4d:08:c0:3a:ce:54:aa:9b:bf: 05:18:d3:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjUwODIyMTc1MjU3WhcNMjUwODI5MTc1MjU3WjAYMRYwFAYD VQQDEw02OGE4YWU3OS1mMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ8sI8EQZViBB5Jg7jpwFt5U12L3lhN6TnPMp7qn6Zgd0cb+tMWgBorZpnSO wCkxD5Xyw/P5seDGE/lQsHdKXSFpKMGQV380ld/OqC/T8qqD9+qw6+f43ojE1hdy E3b01x1lBXGTEiFIWYeaiyCOHGni5z4Cqv+0LapHhpo3KTzIIyCn9bJswAn2luwV 666TmMZq0Fqhgf03W0PRh48iI13R8w3cDEeacEddOJNvrSCSDLPCiwK1IBd9O+yr nhslVCkZBiJTD2pNOttCXur1P3LmDiDisDJ7bHcW0CdHd3DcZCuZOxk4Cfx6X+qn lMxHJsk7OCG39VdVCYHJEO3Q/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0wqM9Z qjaZLt7eKYSYPdaxB9JuMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrwSFdGggTXEKYDyAcxfHmMkAWw/4I+pkbC4O/DK5gUiYkOQK0V9Or mPg7/1GtDBfv35yEuQfXFR1kDwUtZvCGE05PPoHmqhM12V/o4185Uv7RVSGNFDWb rXGsy+jcocyR3Kjo7jOtLZqmuxD0BGXGk1PZxcCFwl5hdQbjxvMC8S4z2aATUnX+ 8kO18KJ73Do3WoDlPiQTesz9hipfDTJAMqQy0jHBvB5Wsduni7OLi2oRl28cEvkc UikTZeBcxWc+aWx9RAgOP9SteTxCx2V7Y5jgclWrchEH7bDsCCtdgDAcvDFEtdqb P38C1FgicRnHL85NCMA6zlSqm78FGNNL -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:45 2025 by rpki-client