$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: QnogKu8XMJoq4kYcvXHIA9GYGseNR7D6ej6JTfJ2uVs= Subject key identifier: B7:4E:08:74:75:B6:A4:3E:CF:FE:B4:A7:95:B5:72:72:EB:7F:60:A0 Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 1188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 1161 Signing time: Fri 22 Aug 2025 17:22:10 +0000 Manifest this update: Fri 22 Aug 2025 17:22:10 +0000 Manifest next update: Fri 29 Aug 2025 17:22:09 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: JisBBJB4OGwIWMrCNu6359eRYwSE6g8G8zN9K4QBLRw=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4488 (0x1188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Aug 22 17:22:10 2025 GMT Not After : Aug 29 17:22:09 2025 GMT Subject: CN=68a8a742-ee08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:71:fe:f4:dc:37:a5:71:96:f3:be:fd:8b: 59:55:df:c7:4d:f9:ac:57:8e:1d:25:cf:08:3e:d0: 1b:9a:fe:c8:03:32:41:52:d4:ce:ac:b7:91:56:de: b6:61:74:29:e9:f9:ed:31:f7:cc:d4:0e:69:c5:c4: 82:05:c9:4f:17:a3:ad:8b:77:1a:ff:62:ef:d1:46: 63:a2:af:5a:da:1e:3d:d2:20:8a:37:37:f2:67:e9: 68:26:3e:24:b0:63:a1:a6:8e:2b:7c:d9:da:2b:52: 63:f3:16:96:e8:ed:cb:a0:a4:a2:0c:59:ec:6c:d2: ef:36:1c:3d:dd:e3:4a:89:d5:69:c1:78:08:75:9c: 64:c6:0d:05:9d:00:95:bd:0a:a6:f2:54:d8:8d:0f: d3:f5:c7:c4:42:cb:0e:95:dc:e2:bc:39:31:08:5b: 68:c9:88:50:1b:74:e5:5d:70:58:d9:6c:a6:d7:13: dc:56:b1:3a:a2:f3:81:79:f7:2f:57:3c:63:eb:dc: 42:37:da:22:8c:14:52:f7:fc:fa:dd:81:3a:61:e3: c6:3a:28:03:80:20:81:fa:33:78:13:85:97:9a:d6: a8:d1:98:96:75:a9:45:9f:55:6a:5b:17:0a:61:ec: 5d:8b:a0:e7:14:66:d8:ac:99:39:b2:84:9e:0d:4e: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4E:08:74:75:B6:A4:3E:CF:FE:B4:A7:95:B5:72:72:EB:7F:60:A0 X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:aa:1f:85:92:1a:5a:11:95:76:2a:c4:35:07:f7:02:c1:f8: ba:f6:10:d3:a3:4a:8f:43:d5:bb:37:2b:14:c3:4b:ab:49:10: 67:20:1b:d9:a6:2c:73:84:4a:ad:47:dd:22:01:e5:de:5e:00: f8:9f:29:6c:5c:11:b4:4d:d7:86:43:09:1c:bc:e7:a4:6f:7b: 97:0c:09:50:a0:da:dd:5b:c0:dd:2e:0d:9e:e3:75:ca:01:a3: 2d:94:9c:dd:0d:5b:aa:94:8f:c9:ea:7d:01:69:77:4f:ee:2c: 7c:27:89:97:8a:42:6a:d3:bc:3c:76:86:08:fe:20:dd:a5:0c: 3a:09:88:fd:50:50:8c:34:32:67:24:f3:76:49:ba:8e:1d:95: 56:1b:82:7b:49:d5:af:36:6e:0b:41:01:5f:e7:29:9c:37:4c: 4e:9d:79:5f:50:12:6e:a1:f1:6f:4d:6c:65:b0:65:58:b3:f4: 71:b7:31:c5:8a:ed:97:69:d9:64:c6:4d:a0:39:e2:5e:ac:cd: 9b:1b:57:da:4a:ec:72:40:de:c4:10:2f:d2:eb:4d:d2:96:43: ad:bf:6a:1c:b9:42:ee:17:99:a9:f8:6f:c4:0f:d0:7f:7f:19: fd:9b:f9:01:8f:57:09:3b:2f:3e:40:e5:61:b7:b3:55:18:e4: dc:9d:ad:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUwODIyMTcyMjEwWhcNMjUwODI5MTcyMjA5WjAYMRYwFAYD VQQDEw02OGE4YTc0Mi1lZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+Rx/vTcN6VxlvO+/YtZVd/HTfmsV44dJc8IPtAbmv7IAzJBUtTOrLeRVt62 YXQp6fntMffM1A5pxcSCBclPF6Oti3ca/2Lv0UZjoq9a2h490iCKNzfyZ+loJj4k sGOhpo4rfNnaK1Jj8xaW6O3LoKSiDFnsbNLvNhw93eNKidVpwXgIdZxkxg0FnQCV vQqm8lTYjQ/T9cfEQssOldzivDkxCFtoyYhQG3TlXXBY2Wym1xPcVrE6ovOBefcv Vzxj69xCN9oijBRS9/z63YE6YePGOigDgCCB+jN4E4WXmtao0ZiWdalFn1VqWxcK Yexdi6DnFGbYrJk5soSeDU6iJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdOCHR1 tqQ+z/60p5W1cnLrf2CgMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrqh+FkhpaEZV2KsQ1B/cCwfi69hDTo0qPQ9W7NysUw0urSRBnIBvZ pixzhEqtR90iAeXeXgD4nylsXBG0TdeGQwkcvOekb3uXDAlQoNrdW8DdLg2e43XK AaMtlJzdDVuqlI/J6n0BaXdP7ix8J4mXikJq07w8doYI/iDdpQw6CYj9UFCMNDJn JPN2SbqOHZVWG4J7SdWvNm4LQQFf5ymcN0xOnXlfUBJuofFvTWxlsGVYs/RxtzHF iu2Xadlkxk2gOeJerM2bG1faSuxyQN7EEC/S603SlkOtv2ocuULuF5mp+G/ED9B/ fxn9m/kBj1cJOy8+QOVht7NVGOTcna3p -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:04 2025 by rpki-client