$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: g16nrEhvh7KOpSOqEwbgp7XFettviJIEVG7pYC1wfx0= Subject key identifier: 12:5C:78:CD:B2:21:6A:E4:02:4E:D3:0F:E1:D5:64:E9:F9:C3:B4:79 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 0806 Signing time: Fri 22 Aug 2025 20:33:57 +0000 Manifest this update: Fri 22 Aug 2025 20:33:56 +0000 Manifest next update: Fri 29 Aug 2025 20:33:56 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: XDqXz9IfRUBkoH+RtEMYcHTacNckNHUrJlgMq6ed9JY=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Aug 22 20:33:56 2025 GMT Not After : Aug 29 20:33:56 2025 GMT Subject: CN=68a8d435-b703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:1b:c7:93:ea:93:cc:3c:fb:84:ee:fe:ef: cd:c4:75:c9:ea:f8:78:e7:88:7f:60:b5:24:02:ad: 03:d4:62:d7:cc:b8:cd:eb:8b:9e:bd:fd:d4:6c:f8: bb:76:62:e4:f0:75:9e:21:29:f2:98:58:d1:a8:2f: 25:4b:80:4f:06:d2:3b:9e:70:ae:8e:92:fb:18:79: ee:dc:32:e7:b0:5a:a8:9f:b0:26:69:a6:a8:77:10: cb:e3:0e:00:6a:49:17:a0:6c:3a:b7:5a:81:ea:63: 92:f1:b2:14:99:af:0b:5a:b0:6d:72:f1:bc:1b:24: 47:5a:b9:9e:06:ec:09:0c:11:5a:84:de:e1:b7:4d: 45:99:9a:a7:fa:dc:51:49:f9:5a:0d:c0:c5:21:76: 9e:d3:ad:5f:a6:a9:76:2d:ed:0d:ed:5e:d2:84:0b: 90:84:ca:fa:f8:95:27:47:e7:bc:10:f8:f4:8a:d8: 9c:e0:4d:7a:7b:39:85:cd:43:24:b7:8d:8d:2c:d3: bd:20:b1:80:f9:1c:58:2d:cf:ac:7c:21:eb:fd:1b: 8a:ae:ab:f8:07:8d:68:fa:dc:1f:5d:5c:68:0b:d2: 81:8a:52:39:66:85:61:b4:2c:0f:51:f2:f2:8c:72: 3d:80:a6:9f:d5:96:99:18:1f:d0:a5:0b:b7:64:75: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5C:78:CD:B2:21:6A:E4:02:4E:D3:0F:E1:D5:64:E9:F9:C3:B4:79 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:3a:41:17:30:fd:e0:26:9e:e3:e5:70:56:42:25:a5:c4:eb: e9:5c:52:a2:44:a1:a9:10:95:ed:d5:56:a2:23:10:dc:6a:dc: b5:47:90:5e:3c:f7:08:81:a0:99:99:be:4e:90:2e:87:9f:b6: b3:dc:80:ed:7e:8b:be:5d:e7:46:b4:1f:99:a9:bd:a1:d3:8d: 90:fd:99:47:30:65:bf:0a:66:79:df:7e:41:fa:60:e3:02:4d: 45:cc:fa:4a:62:ad:f4:d2:94:4e:4e:ac:c0:d2:ee:ed:2a:d7: 34:81:6b:b7:5d:a6:cc:17:d3:ba:1a:d5:e3:66:95:c8:73:68: df:e3:6d:5b:b3:99:35:29:5e:03:1a:ed:34:25:bd:3a:91:1e: 7b:24:97:e3:2a:18:14:4b:88:a6:6e:77:84:15:74:3f:d4:a2: a8:de:e1:fc:ee:d6:2f:4a:eb:b2:fa:2a:0b:99:e6:3a:f5:12: 5c:50:42:4f:99:e0:1f:f3:89:65:60:85:b3:9c:0f:30:9d:74: a2:b9:21:b6:25:af:ac:58:b3:c2:19:80:f9:19:d1:a6:00:e3: 20:70:fc:ab:05:0f:b7:f3:c7:41:ec:63:72:96:78:a7:da:d4: e1:b5:21:15:a8:6e:22:3f:7b:38:c5:47:5d:1c:d5:8e:f3:aa: c6:25:e1:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUwODIyMjAzMzU2WhcNMjUwODI5MjAzMzU2WjAYMRYwFAYD VQQDEw02OGE4ZDQzNS1iNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlG4bx5Pqk8w8+4Tu/u/NxHXJ6vh454h/YLUkAq0D1GLXzLjN64uevf3UbPi7 dmLk8HWeISnymFjRqC8lS4BPBtI7nnCujpL7GHnu3DLnsFqon7AmaaaodxDL4w4A akkXoGw6t1qB6mOS8bIUma8LWrBtcvG8GyRHWrmeBuwJDBFahN7ht01FmZqn+txR SflaDcDFIXae061fpql2Le0N7V7ShAuQhMr6+JUnR+e8EPj0itic4E16ezmFzUMk t42NLNO9ILGA+RxYLc+sfCHr/RuKrqv4B41o+twfXVxoC9KBilI5ZoVhtCwPUfLy jHI9gKaf1ZaZGB/QpQu3ZHU35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJceM2y IWrkAk7TD+HVZOn5w7R5MB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1OkEXMP3gJp7j5XBWQiWlxOvpXFKiRKGpEJXt1VaiIxDcaty1R5Be PPcIgaCZmb5OkC6Hn7az3IDtfou+XedGtB+Zqb2h042Q/ZlHMGW/CmZ5335B+mDj Ak1FzPpKYq300pROTqzA0u7tKtc0gWu3XabMF9O6GtXjZpXIc2jf421bs5k1KV4D Gu00Jb06kR57JJfjKhgUS4imbneEFXQ/1KKo3uH87tYvSuuy+ioLmeY69RJcUEJP meAf84llYIWznA8wnXSiuSG2Ja+sWLPCGYD5GdGmAOMgcPyrBQ+388dB7GNylnin 2tThtSEVqG4iP3s4xUddHNWO86rGJeGK -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:49 2025 by rpki-client