$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json) Hash identifier: tUJuJo3r0TBniCNRfkGELjGG/MCYydAEQ/8uezEFJ8Y= Subject key identifier: 4A:37:51:CE:D3:82:D4:C9:E8:02:2A:A7:77:22:E6:E7:20:C3:E3:31 Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft Manifest number: 33 Signing time: Sat 23 Aug 2025 07:51:01 +0000 Manifest this update: Sat 23 Aug 2025 07:51:00 +0000 Manifest next update: Sat 30 Aug 2025 07:51:00 +0000 Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: LP23fj+F+JUBGKbPBfnig8ueUS/IScAMuEqMeex+3e8=) 2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Validity Not Before: Aug 23 07:51:00 2025 GMT Not After : Aug 30 07:51:00 2025 GMT Subject: CN=68a972e4-0850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:c2:ae:87:ea:73:de:43:ad:c9:14:c4:c5: c7:62:77:02:c5:af:c4:f4:2f:ff:0e:e2:5e:77:80: c8:c0:bd:55:eb:1c:ac:7c:16:3f:8c:ac:77:4b:52: bd:8d:47:d6:3e:f9:05:8b:5a:3f:c1:c6:46:04:f8: 61:ff:89:6d:4c:c0:bb:2a:00:83:3f:8c:fc:7d:35: 36:22:be:e9:0a:dc:48:ec:bf:4d:2f:a3:60:94:53: b5:b8:2d:34:4a:8d:d5:cc:86:de:98:38:c4:3d:09: 94:0a:86:81:12:11:0f:ff:96:d1:43:58:9e:af:76: 78:1d:7f:0f:02:08:c1:e7:90:22:af:3b:ff:e6:50: 91:1c:22:31:6d:80:81:09:91:07:28:ba:61:55:98: 7b:7f:e2:61:36:2e:c6:7c:bf:05:34:d7:ad:18:16: 40:63:1f:0e:1d:8d:4b:8f:5b:8b:da:be:48:cf:af: a0:b6:cb:b9:29:1c:37:35:6d:dc:cb:02:c4:09:93: 3c:c4:f7:a7:43:53:fc:6c:85:59:f0:3c:87:21:53: d3:d4:a9:0c:31:07:fd:75:67:68:74:f0:c9:da:84: 24:40:27:47:d4:4c:82:c0:35:2a:f7:6f:ff:da:49: 92:c6:e3:90:2c:a8:35:19:7d:b5:a9:38:91:fc:c6: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:51:CE:D3:82:D4:C9:E8:02:2A:A7:77:22:E6:E7:20:C3:E3:31 X509v3 Authority Key Identifier: keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:eb:c5:6f:29:53:64:57:ee:f0:43:04:60:de:2d:a3:c6:79: a4:2a:d6:5e:96:8b:c8:8b:e7:93:37:3c:30:25:c8:a3:cd:65: 91:fa:10:40:12:da:d7:fd:f4:d5:af:ef:6b:3c:24:20:0a:13: fa:87:a2:d7:5b:e3:a5:c5:37:10:6a:9b:61:3d:d6:2e:38:c7: 83:31:ca:60:91:de:a3:f8:e5:03:3f:4f:e9:83:96:eb:be:5a: 38:e9:c3:2a:3a:3a:87:36:d1:46:09:7c:c3:a5:8c:5a:9d:40: de:a9:b6:6e:b5:b9:2f:b9:90:8b:1d:63:8c:db:d9:f3:ee:bd: 4f:a7:6a:77:4a:ee:b4:d3:b4:24:9e:38:d9:a1:00:8a:11:6a: be:14:a6:46:0f:74:89:88:45:f9:f3:74:b9:93:12:60:e7:cd: bf:7c:08:bd:06:50:ab:f2:ff:e2:f1:58:25:28:e6:85:97:ef: 97:57:75:54:3d:ab:21:cd:67:11:41:93:70:0c:1f:41:99:2a: 7c:d0:bd:5f:36:b7:99:a0:aa:9e:d1:49:56:6e:a3:a3:28:c7: 05:22:15:50:ae:8d:38:9f:f9:20:35:67:3c:fb:65:23:b6:df: 44:9b:14:11:ba:22:fd:0a:2a:ff:35:4f:a0:48:9d:26:c7:ba: c3:7d:18:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3 MzVDRUY0MDAeFw0yNTA4MjMwNzUxMDBaFw0yNTA4MzAwNzUxMDBaMBgxFjAUBgNV BAMTDTY4YTk3MmU0LTA4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzzcKuh+pz3kOtyRTExcdidwLFr8T0L/8O4l53gMjAvVXrHKx8Fj+MrHdLUr2N R9Y++QWLWj/BxkYE+GH/iW1MwLsqAIM/jPx9NTYivukK3Ejsv00vo2CUU7W4LTRK jdXMht6YOMQ9CZQKhoESEQ//ltFDWJ6vdngdfw8CCMHnkCKvO//mUJEcIjFtgIEJ kQcoumFVmHt/4mE2LsZ8vwU0160YFkBjHw4djUuPW4vavkjPr6C2y7kpHDc1bdzL AsQJkzzE96dDU/xshVnwPIchU9PUqQwxB/11Z2h08MnahCRAJ0fUTILANSr3b//a SZLG45AsqDUZfbWpOJH8xozHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSjdRztOC 1MnoAiqndyLm5yDD4zEwHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1 NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MzUyLzgyOTM4MDQ2MzE1NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVx N2JsUVVaVEw5RTNOYzcwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABzrxW8pU2RX7vBDBGDeLaPGeaQq1l6Wi8iL55M3PDAlyKPNZZH6EEAS 2tf99NWv72s8JCAKE/qHotdb46XFNxBqm2E91i44x4MxymCR3qP45QM/T+mDluu+ Wjjpwyo6Ooc20UYJfMOljFqdQN6ptm61uS+5kIsdY4zb2fPuvU+nandK7rTTtCSe ONmhAIoRar4UpkYPdImIRfnzdLmTEmDnzb98CL0GUKvy/+LxWCUo5oWX75dXdVQ9 qyHNZxFBk3AMH0GZKnzQvV82t5mgqp7RSVZuo6MoxwUiFVCujTif+SA1Zzz7ZSO2 30SbFBG6Iv0KKv81T6BInSbHusN9GDU= -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:58 2025 by rpki-client