$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: ttIa+Gw3QAR9TI06rKxvN5ICiM9A00GnRcrJiCsTqqI= Subject key identifier: D3:95:EA:DF:44:4A:FF:EF:7B:9B:2C:6D:97:FF:8F:35:7B:84:42:50 Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 045A Signing time: Sat 23 Aug 2025 00:27:08 +0000 Manifest this update: Sat 23 Aug 2025 00:27:07 +0000 Manifest next update: Sat 30 Aug 2025 00:27:07 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: nFuiyVXmIhK//oUhe8B9BoVztX/9qjEzUcNQEK18tHQ=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 1DZcNpDHzzTtCr5+Y6ZKGblRfHTeQUJGW1MQDytyGms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Aug 23 00:27:07 2025 GMT Not After : Aug 30 00:27:07 2025 GMT Subject: CN=68a90adb-91f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:ed:1d:2e:6f:af:86:b8:a5:70:83:ee:59: 32:8f:c7:cc:d0:3e:22:6f:95:03:a4:9a:66:34:3c: 03:52:4e:2a:0e:22:a1:99:ae:86:88:5a:cd:6d:4f: bc:ce:5a:23:d4:28:d2:c1:ee:cc:18:af:ea:67:19: 5f:5b:fb:4b:69:2a:5f:51:d3:ac:58:34:d2:0d:5a: 5d:7a:b6:aa:22:39:df:be:d6:2f:bb:1d:88:11:c5: 93:10:3f:47:2b:e8:20:e5:4a:01:87:8b:68:3d:83: 08:65:50:9e:8f:cb:f2:0a:e6:ec:61:5f:e4:8a:16: 5f:5f:99:13:80:d4:ff:93:d0:22:29:ab:b2:7b:88: c4:29:4d:ff:e5:49:a7:59:29:5c:8e:fe:09:56:45: 2f:4d:7d:2c:12:52:60:cc:28:e8:16:1b:9f:4c:32: a7:b9:f1:b4:97:a9:cf:60:18:24:90:ee:c9:ab:4d: b0:5d:59:38:e5:b9:dd:d7:f5:42:95:1e:a7:24:ab: 45:f9:2f:3d:de:4e:dd:cc:2d:f3:e6:be:bf:50:b2: 34:a2:34:9a:d0:71:3b:7b:c5:d3:ce:0b:8a:b7:1d: a3:c8:d1:ee:73:5b:4d:8f:cc:e8:f8:27:d0:93:ce: d8:ca:c8:c3:64:0a:9d:a0:f9:5a:15:23:0c:5c:87: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:EA:DF:44:4A:FF:EF:7B:9B:2C:6D:97:FF:8F:35:7B:84:42:50 X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:2b:3d:34:04:ed:c6:72:6a:f5:4a:05:14:09:60:3a:6c:73: 73:a7:4a:39:1a:11:4f:ff:8c:45:cc:f5:f1:13:bf:f5:86:25: 5e:17:c3:e8:c3:05:25:09:8f:37:cc:a8:a8:a9:6d:b0:5a:a1: 6f:4c:8e:d3:22:67:f9:e7:53:74:8e:b4:2e:dc:8b:4f:67:77: 42:33:90:94:ff:f9:81:d2:c1:c4:19:64:62:9c:65:f2:9c:1b: ec:88:46:0f:1a:ae:64:68:91:85:ae:8e:38:7d:ba:2d:38:4e: 9b:6b:bb:88:34:54:31:46:4b:cb:b8:eb:6c:67:2c:a0:d4:94: b5:4e:1d:82:f1:00:25:53:df:b7:1e:bf:f8:09:cb:7e:c5:9e: 20:42:22:fe:5e:a0:38:92:a0:c8:55:c9:66:96:08:e2:32:a1: a1:79:e2:37:ed:98:22:17:8b:f6:54:9d:0f:83:9b:79:51:90: 3d:9b:81:87:25:d7:fa:0b:f5:f1:2a:b3:f0:f7:a9:60:5d:02: b7:05:39:3b:c5:7a:5e:f0:3d:04:dc:82:6d:84:03:60:36:dd: 9d:a8:e7:d4:84:15:bd:86:da:1c:34:bf:8f:b7:a0:74:be:86: 10:3c:15:b5:90:15:88:bb:ca:6c:f7:e3:b5:61:46:27:d5:42: 6b:b1:20:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUwODIzMDAyNzA3WhcNMjUwODMwMDAyNzA3WjAYMRYwFAYD VQQDEw02OGE5MGFkYi05MWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKftHS5vr4a4pXCD7lkyj8fM0D4ib5UDpJpmNDwDUk4qDiKhma6GiFrNbU+8 zloj1CjSwe7MGK/qZxlfW/tLaSpfUdOsWDTSDVpderaqIjnfvtYvux2IEcWTED9H K+gg5UoBh4toPYMIZVCej8vyCubsYV/kihZfX5kTgNT/k9AiKauye4jEKU3/5Umn WSlcjv4JVkUvTX0sElJgzCjoFhufTDKnufG0l6nPYBgkkO7Jq02wXVk45bnd1/VC lR6nJKtF+S893k7dzC3z5r6/ULI0ojSa0HE7e8XTzguKtx2jyNHuc1tNj8zo+CfQ k87YysjDZAqdoPlaFSMMXIc2hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOV6t9E Sv/ve5ssbZf/jzV7hEJQMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Kz00BO3Gcmr1SgUUCWA6bHNzp0o5GhFP/4xFzPXxE7/1hiVeF8Po wwUlCY83zKioqW2wWqFvTI7TImf551N0jrQu3ItPZ3dCM5CU//mB0sHEGWRinGXy nBvsiEYPGq5kaJGFro44fbotOE6ba7uINFQxRkvLuOtsZyyg1JS1Th2C8QAlU9+3 Hr/4Cct+xZ4gQiL+XqA4kqDIVclmlgjiMqGheeI37ZgiF4v2VJ0Pg5t5UZA9m4GH Jdf6C/XxKrPw96lgXQK3BTk7xXpe8D0E3IJthANgNt2dqOfUhBW9htocNL+Pt6B0 voYQPBW1kBWIu8ps9+O1YUYn1UJrsSDa -----END CERTIFICATE-----Generated at Sat Aug 23 18:21:20 2025 by rpki-client