$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: Ooa6iDOa6Ou58bmJO/AfiKw8ZEPu0lWGHgqdGNetzvA= Subject key identifier: 18:AD:2A:0B:B1:63:B0:9A:BE:7F:F9:A2:16:B8:64:E4:CE:4B:BD:A1 Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 045E Signing time: Sat 23 Aug 2025 00:28:33 +0000 Manifest this update: Sat 23 Aug 2025 00:28:32 +0000 Manifest next update: Sat 30 Aug 2025 00:28:32 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: FDwvqAUDymElD/kWl5YelhFW13BTt+LLjPBj24Rj0hI=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: bFGAY7gHkrvRuSHehHQRzFx9uBqTtWyMVWm0D4E7juI=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Validity Not Before: Aug 23 00:28:32 2025 GMT Not After : Aug 30 00:28:32 2025 GMT Subject: CN=68a90b30-be5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:c3:f0:3b:ec:45:94:9f:49:9a:6e:ce:36: 65:92:62:89:0c:16:9b:00:cd:76:72:38:ab:6c:75: 19:cc:4d:f9:7a:4c:23:9c:33:8d:12:23:d0:51:f7: a9:c4:8e:da:e6:b3:31:f7:3e:bd:1e:9c:03:6c:9b: d6:b4:a7:39:63:00:d3:83:65:0f:eb:1c:41:46:94: 61:7b:61:c1:d1:ab:1e:58:5f:5b:98:37:d8:3b:43: 6c:fb:65:a6:7a:91:5e:84:a1:1e:48:29:6f:33:d7: 96:fd:9c:b8:ec:1d:dd:af:35:02:6f:f2:a1:a9:1c: 51:f1:08:ff:00:e1:8f:4b:52:cb:47:35:f3:cd:fb: a2:9e:50:b2:f3:5c:58:d1:47:94:0e:8d:ec:f7:91: 28:96:40:c7:0e:d0:45:54:6b:de:50:32:e5:36:77: a6:c4:28:8e:6f:76:5c:9c:3f:2a:c8:21:4e:bb:68: 87:46:7e:99:42:0b:8c:d1:a6:70:af:e6:17:fd:2a: ac:04:a8:78:4f:73:0f:96:ca:95:4a:df:24:bd:78: ef:dd:72:ef:c1:cf:61:f6:e7:6c:a2:71:5b:9b:ab: 26:fd:2c:85:86:ea:51:2c:f7:53:1b:0b:9f:ac:3d: 3a:f1:d0:de:12:5c:07:7c:da:63:7a:44:2b:3b:cf: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AD:2A:0B:B1:63:B0:9A:BE:7F:F9:A2:16:B8:64:E4:CE:4B:BD:A1 X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:06:7e:67:0f:4d:bb:6e:19:80:c8:e2:bd:b8:c9:3f:3a:4f: 3e:00:a1:48:b4:b7:70:ce:e9:7e:b2:a0:28:27:d0:cc:e5:f9: 6e:f1:de:b9:34:d4:fa:5d:ea:a2:16:90:c3:b6:4e:f2:16:5a: 4c:95:8f:26:2a:5c:e3:fc:31:92:be:b8:fd:c0:16:39:67:93: 51:84:0c:4b:5e:19:8e:e7:30:b3:9a:da:b1:30:03:2e:55:df: 7a:d0:94:56:fb:5b:78:53:ff:95:35:ca:2c:57:c3:43:e2:c9: 8c:9b:ed:37:60:f8:bb:49:00:9e:00:df:86:99:c4:fb:d8:58: 4b:d4:ab:34:e5:ad:31:b3:87:ec:4f:83:a9:b6:57:c4:37:35: 46:46:00:7d:78:97:2f:25:53:8d:4c:86:9a:e2:53:54:69:26: 2d:b6:8a:54:40:b5:92:82:94:45:bf:65:1f:de:59:a2:31:88: c2:d0:82:cc:b6:e7:50:3a:9d:5d:f6:b9:6f:9d:9c:e6:4e:0c: aa:01:1d:95:71:45:d2:1d:d1:8e:a0:28:54:05:98:41:51:5f: 08:28:1f:10:bc:7e:09:38:c5:91:8b:e3:09:d1:f5:c2:ec:ec: d9:03:6e:3f:ad:23:58:04:c1:aa:6f:f8:30:73:47:36:d6:6e: 58:20:0c:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjUwODIzMDAyODMyWhcNMjUwODMwMDAyODMyWjAYMRYwFAYD VQQDEw02OGE5MGIzMC1iZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3TD8DvsRZSfSZpuzjZlkmKJDBabAM12cjirbHUZzE35ekwjnDONEiPQUfep xI7a5rMx9z69HpwDbJvWtKc5YwDTg2UP6xxBRpRhe2HB0aseWF9bmDfYO0Ns+2Wm epFehKEeSClvM9eW/Zy47B3drzUCb/KhqRxR8Qj/AOGPS1LLRzXzzfuinlCy81xY 0UeUDo3s95EolkDHDtBFVGveUDLlNnemxCiOb3ZcnD8qyCFOu2iHRn6ZQguM0aZw r+YX/SqsBKh4T3MPlsqVSt8kvXjv3XLvwc9h9udsonFbm6sm/SyFhupRLPdTGwuf rD068dDeElwHfNpjekQrO8+3gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBitKgux Y7Cavn/5oha4ZOTOS72hMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVBn5nD027bhmAyOK9uMk/Ok8+AKFItLdwzul+sqAoJ9DM5flu8d65 NNT6XeqiFpDDtk7yFlpMlY8mKlzj/DGSvrj9wBY5Z5NRhAxLXhmO5zCzmtqxMAMu Vd960JRW+1t4U/+VNcosV8ND4smMm+03YPi7SQCeAN+GmcT72FhL1Ks05a0xs4fs T4OptlfENzVGRgB9eJcvJVONTIaa4lNUaSYttopUQLWSgpRFv2Uf3lmiMYjC0ILM tudQOp1d9rlvnZzmTgyqAR2VcUXSHdGOoChUBZhBUV8IKB8QvH4JOMWRi+MJ0fXC 7OzZA24/rSNYBMGqb/gwc0c21m5YIAy8 -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:59 2025 by rpki-client