$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: 6mtq91l4h8p3MpQmTlQOrjpLrhry5NoIWHK0rJSv6jk= Subject key identifier: 26:57:F1:D1:34:E9:AF:C5:84:25:58:0D:6C:CD:D0:09:44:E1:CE:5E Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 11AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 11A0 Signing time: Sun 20 Jul 2025 17:14:23 +0000 Manifest this update: Sun 20 Jul 2025 17:14:22 +0000 Manifest next update: Sun 27 Jul 2025 17:14:22 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: Cp5hYe3bDC7CK0GFBcnn8t3CzbcgFFP0ZCFK1gtsF1k=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4523 (0x11ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Jul 20 17:14:22 2025 GMT Not After : Jul 27 17:14:22 2025 GMT Subject: CN=687d23ee-d4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:36:d8:17:5d:3c:78:b6:8b:e3:5a:25:a9: 59:7f:2b:92:74:5f:66:38:48:43:5c:85:e4:45:65: 87:e7:fb:e5:14:02:21:ba:7d:f1:d4:c0:ed:51:50: ea:d5:7a:e3:fd:83:c1:fe:05:56:ba:c9:d7:bb:56: 6d:9e:0d:7e:91:37:2b:76:d9:8b:0d:6f:c9:9b:88: 88:e7:8e:bb:c6:48:7f:5f:65:6e:64:9b:83:25:7c: e4:f0:59:50:be:83:d0:e2:fd:cd:07:86:6c:74:84: d0:e5:74:fe:62:a9:df:b5:ef:7b:37:ae:5e:40:e0: b3:41:25:70:90:4d:ea:ac:5d:39:17:ce:11:72:f2: 37:ed:14:6b:5c:d1:56:48:49:c8:a2:a6:3d:44:4e: a5:4c:01:da:93:38:a3:b2:88:78:0c:de:33:de:47: 00:2b:ca:2a:e1:ea:ee:81:04:4a:ea:af:3e:15:06: 7f:ea:b3:01:ab:cc:2c:a4:53:6f:a1:b1:5a:0d:32: ac:ca:37:72:20:93:15:2a:c1:ee:14:d1:99:4b:3d: 75:d1:c6:0f:54:c6:ae:1e:b7:d3:04:7a:bf:5f:29: 86:ca:20:58:75:66:db:35:6c:79:98:67:7e:80:aa: 5a:4f:e8:5d:7f:01:bf:56:24:c2:f4:fb:2c:55:21: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:57:F1:D1:34:E9:AF:C5:84:25:58:0D:6C:CD:D0:09:44:E1:CE:5E X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e7:75:ae:d4:e1:b9:3d:a3:28:18:8f:88:49:3b:d1:7a:51: f8:9d:ac:30:d6:68:dc:15:74:f0:70:66:9a:7b:b8:31:df:45: c9:58:cd:ba:2a:e2:26:c1:7d:df:75:a3:94:50:92:b9:84:5a: b6:1b:8f:d7:3c:fa:45:9e:ce:35:bd:5b:49:03:ec:d6:0f:9b: a6:59:04:96:5a:ca:d3:01:89:92:c7:8e:09:a1:11:fe:cd:3e: 77:d9:d1:f8:a0:2c:24:f6:c7:28:ea:92:82:6e:9e:3f:03:68: b6:f9:68:e5:f2:aa:7f:53:b2:33:e9:2f:d4:b7:f3:a6:d4:de: db:a3:e6:e5:02:2b:19:30:49:19:5e:25:b7:70:ac:e1:e1:50: 3e:b2:16:19:aa:19:56:77:e2:a1:d9:ab:4c:55:84:f9:3e:78: be:9b:c8:53:6b:10:94:eb:91:1b:3f:df:18:52:b8:99:0f:9b: 31:7c:8b:0f:fb:08:25:a0:74:c6:50:ca:82:f4:8a:4e:6e:21: d4:52:63:dc:96:8a:ec:f8:ea:d6:71:a8:1b:6e:75:78:0b:05: b8:fb:dc:dc:b5:d2:71:ea:6f:8d:d0:ff:e3:d5:db:e1:5e:c5: a7:ae:c3:91:7f:cf:2d:74:ae:68:7c:f4:6d:e8:ce:e5:00:10: a0:63:4e:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUwNzIwMTcxNDIyWhcNMjUwNzI3MTcxNDIyWjAYMRYwFAYD VQQDEw02ODdkMjNlZS1kNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIg22BddPHi2i+NaJalZfyuSdF9mOEhDXIXkRWWH5/vlFAIhun3x1MDtUVDq 1Xrj/YPB/gVWusnXu1Ztng1+kTcrdtmLDW/Jm4iI5467xkh/X2VuZJuDJXzk8FlQ voPQ4v3NB4ZsdITQ5XT+Yqnfte97N65eQOCzQSVwkE3qrF05F84RcvI37RRrXNFW SEnIoqY9RE6lTAHakzijsoh4DN4z3kcAK8oq4erugQRK6q8+FQZ/6rMBq8wspFNv obFaDTKsyjdyIJMVKsHuFNGZSz110cYPVMauHrfTBHq/XymGyiBYdWbbNWx5mGd+ gKpaT+hdfwG/ViTC9PssVSHD9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZX8dE0 6a/FhCVYDWzN0AlE4c5eMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd53Wu1OG5PaMoGI+ISTvRelH4naww1mjcFXTwcGaae7gx30XJWM26 KuImwX3fdaOUUJK5hFq2G4/XPPpFns41vVtJA+zWD5umWQSWWsrTAYmSx44JoRH+ zT532dH4oCwk9sco6pKCbp4/A2i2+Wjl8qp/U7Iz6S/Ut/Om1N7bo+blAisZMEkZ XiW3cKzh4VA+shYZqhlWd+Kh2atMVYT5Pni+m8hTaxCU65EbP98YUriZD5sxfIsP +wgloHTGUMqC9IpObiHUUmPclors+OrWcagbbnV4CwW4+9zctdJx6m+N0P/j1dvh XsWnrsORf88tdK5ofPRt6M7lABCgY06A -----END CERTIFICATE-----Generated at Sun Jul 20 21:19:55 2025 by rpki-client