$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: KABjIdSOSvOMVer6l/5IL9rBBQFOn15lPWNXKtrDvY4= Subject key identifier: D2:E1:17:65:86:67:CD:51:E3:A0:79:29:47:D6:81:F7:9C:09:40:22 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 185C Signing time: Sat 26 Jul 2025 16:32:24 +0000 Manifest this update: Sat 26 Jul 2025 16:32:23 +0000 Manifest next update: Sat 02 Aug 2025 16:32:23 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: ujEZqNejEiAZb3fIc3H7LPfYvz1qcvYoTXrprY3igAg=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6262 (0x1876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Jul 26 16:32:23 2025 GMT Not After : Aug 2 16:32:23 2025 GMT Subject: CN=68850317-22ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:a2:c5:67:da:a9:68:6f:b8:a3:19:83:fa: 78:c5:ef:97:1c:15:e5:2b:6c:44:00:12:e9:35:20: 9a:9a:af:1b:e8:91:3d:2b:fd:50:65:01:8d:42:bd: 81:39:59:3d:15:b9:60:5c:d6:12:89:dc:e9:ed:56: 18:70:a2:3e:5e:84:ef:17:e8:51:ed:36:2a:f8:0b: 63:ce:23:30:07:21:07:a3:3d:c1:a0:b3:ef:3c:71: c4:6e:c2:5e:1a:36:3b:63:d1:28:ac:d2:51:fc:99: dd:99:e9:0f:61:7e:83:98:0a:f8:45:25:5e:3e:56: 5c:52:d3:37:79:e2:cb:77:02:a5:d4:0c:e9:e6:b9: 46:68:39:3b:c3:cf:7f:8a:4f:21:41:b1:e7:c8:d9: ea:84:ad:c4:1f:1f:53:77:f8:c1:04:03:c5:82:30: ed:3e:b3:b8:3c:4b:8d:0e:70:48:b1:36:d8:00:fd: 25:fa:c1:e1:82:6c:02:e0:5c:0a:52:96:14:0e:02: c4:4e:63:56:a2:4f:dd:51:19:ca:3c:c7:14:73:fc: 7b:b9:f6:89:a0:b3:8a:19:bd:82:51:b7:1b:68:fc: 07:5a:8f:38:3d:2d:5f:fe:33:13:0c:a3:ce:c5:07: 67:dc:6c:6e:76:c0:71:0a:90:73:71:28:ac:bb:9e: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E1:17:65:86:67:CD:51:E3:A0:79:29:47:D6:81:F7:9C:09:40:22 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:31:8e:57:38:92:d1:39:02:70:d8:95:fb:1d:31:ae:4f:cd: 23:9c:50:4d:a2:5c:31:b0:05:0d:25:f0:0c:c4:df:0b:ce:3d: 5d:00:c4:9c:a7:d3:16:3b:c3:d8:03:ac:fe:e4:b6:51:ee:9a: 3f:d3:a4:e5:1a:71:73:56:10:7d:28:f6:a1:c6:83:08:fd:a0: 07:c7:01:03:3a:19:6b:c2:68:23:20:5f:3a:80:8d:30:7d:07: f9:1f:98:51:fd:68:2c:ef:cb:72:b0:0c:63:df:68:df:ae:8f: 5a:fc:c0:2f:4a:15:bc:a9:f3:99:4b:19:d1:d2:69:76:13:c3: 95:07:3d:ac:e5:b3:92:76:60:6a:08:2c:52:e2:83:ba:7f:28: c9:f8:88:48:99:94:1f:40:4b:ae:c7:ea:c9:21:71:62:11:23: 8c:85:67:37:d1:a4:49:3c:1c:f4:a9:a8:37:b1:4f:0e:76:15: 3c:68:68:16:e8:a9:dc:46:91:08:fd:14:ab:f5:06:6f:3b:26: 4e:8a:97:b0:50:21:9a:16:47:f1:50:91:c7:c9:7e:89:50:02: e5:71:eb:74:7e:d1:4f:2f:be:03:9b:1c:71:fb:a6:07:91:15: a8:00:86:92:ac:16:70:ce:81:5b:4f:37:e1:5a:74:7f:cc:b3: 10:d5:50:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUwNzI2MTYzMjIzWhcNMjUwODAyMTYzMjIzWjAYMRYwFAYD VQQDEw02ODg1MDMxNy0yMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCaixWfaqWhvuKMZg/p4xe+XHBXlK2xEABLpNSCamq8b6JE9K/1QZQGNQr2B OVk9FblgXNYSidzp7VYYcKI+XoTvF+hR7TYq+AtjziMwByEHoz3BoLPvPHHEbsJe GjY7Y9EorNJR/JndmekPYX6DmAr4RSVePlZcUtM3eeLLdwKl1Azp5rlGaDk7w89/ ik8hQbHnyNnqhK3EHx9Td/jBBAPFgjDtPrO4PEuNDnBIsTbYAP0l+sHhgmwC4FwK UpYUDgLETmNWok/dURnKPMcUc/x7ufaJoLOKGb2CUbcbaPwHWo84PS1f/jMTDKPO xQdn3GxudsBxCpBzcSisu56l4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLhF2WG Z81R46B5KUfWgfecCUAiMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvMY5XOJLROQJw2JX7HTGuT80jnFBNolwxsAUNJfAMxN8Lzj1dAMSc p9MWO8PYA6z+5LZR7po/06TlGnFzVhB9KPahxoMI/aAHxwEDOhlrwmgjIF86gI0w fQf5H5hR/Wgs78tysAxj32jfro9a/MAvShW8qfOZSxnR0ml2E8OVBz2s5bOSdmBq CCxS4oO6fyjJ+IhImZQfQEuux+rJIXFiESOMhWc30aRJPBz0qag3sU8OdhU8aGgW 6KncRpEI/RSr9QZvOyZOipewUCGaFkfxUJHHyX6JUALlcet0ftFPL74Dmxxx+6YH kRWoAIaSrBZwzoFbTzfhWnR/zLMQ1VCg -----END CERTIFICATE-----Generated at Sun Jul 27 08:43:29 2025 by rpki-client