$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json) Hash identifier: lRPuFSo3Urj4pkW+ape6Ks574IZ0KKDsgTrH8W1p4zw= Subject key identifier: 44:7A:E4:74:F3:23:75:B7:49:1D:87:41:3B:56:FF:B7:EB:F8:9D:3A Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft Manifest number: 0BE9 Signing time: Thu 18 Sep 2025 19:03:01 +0000 Manifest this update: Thu 18 Sep 2025 19:03:01 +0000 Manifest next update: Thu 25 Sep 2025 19:03:01 +0000 Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: LBe0C52Lb5nZFe+JlbUE64SRY/L28tgIIw46rziBufA=) 2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 2C78FaeQx3m8f9CmVKBPjRPsChYY+d/Ump5Gj8ph3JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Validity Not Before: Sep 18 19:03:01 2025 GMT Not After : Sep 25 19:03:01 2025 GMT Subject: CN=68cc5765-89b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:59:6f:ca:79:9e:ae:0c:a8:80:85:25:7c: 0a:fe:93:d2:48:bb:53:d3:63:5d:c6:cf:45:43:55: 35:a6:30:6f:60:47:61:03:40:21:32:81:9b:12:9b: 9d:89:a7:6b:4e:37:72:16:cf:d3:21:c5:b1:ec:b8: 4d:ed:e5:17:98:a1:c3:28:19:83:9d:61:a8:2a:f3: 04:56:1e:3e:13:27:f2:ab:30:ae:eb:25:f0:87:11: 9a:f1:e7:06:80:e3:06:6b:5d:da:e5:ff:be:a6:af: 35:1b:a4:23:08:15:47:29:d5:18:0c:b4:e3:ec:a2: 3d:86:57:d8:be:40:42:b3:28:9d:04:ec:d0:56:1a: 15:6d:ad:2c:80:a4:47:b9:1b:c5:2a:53:82:05:61: 23:46:c4:78:da:3b:82:09:1e:ee:84:73:3e:61:2d: 66:f5:45:80:f8:4a:c0:60:89:58:a1:25:43:a3:32: 74:db:47:f0:c7:73:e7:27:08:0f:07:d4:d3:b6:03: ed:41:78:21:64:f0:56:0e:4e:15:62:38:b4:df:3b: ac:36:7c:37:72:58:a4:c7:25:02:e2:4c:3f:b8:56: 3a:20:88:58:c7:c9:12:c9:7c:e7:3e:10:4b:4a:22: d6:22:cb:ba:2f:32:2a:4f:3a:fd:f3:b0:d5:78:70: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7A:E4:74:F3:23:75:B7:49:1D:87:41:3B:56:FF:B7:EB:F8:9D:3A X509v3 Authority Key Identifier: keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:0e:63:b4:cc:b1:51:14:c1:76:7b:de:e6:cd:a3:a0:7b:28: 53:5d:73:84:04:ea:30:24:2e:7b:f5:56:db:a5:99:9f:5b:ef: 9f:f1:5d:26:3b:c9:07:be:50:25:91:2d:29:93:74:70:97:0c: d1:21:cb:bf:de:41:6b:58:92:68:38:fa:63:48:ad:b9:83:c5: 74:04:f1:77:f9:16:8f:ae:80:32:68:96:fd:ed:d6:3f:f1:cf: ce:31:7e:46:30:66:f6:6c:d2:0f:48:7f:1e:50:d3:19:77:e2: 48:04:08:d1:c3:90:9e:99:f7:79:f4:15:92:5b:25:dc:6a:11: ed:27:41:c7:db:7f:d4:ae:ae:5f:24:3b:90:5e:61:a6:5d:15: 2a:21:86:bf:04:4b:c4:81:b8:14:89:33:d5:49:77:19:33:27: 57:93:e6:1d:dd:c4:2b:d5:3d:09:71:7a:c5:dc:c1:dd:f8:61: 9c:66:7c:8a:8e:34:fc:63:f2:5f:eb:48:ad:b9:5b:92:9e:d0: 54:18:58:c3:e4:67:2d:e7:1b:6a:01:ee:37:7d:17:32:c0:3d: 47:25:ff:01:5a:94:43:e2:84:09:bc:d4:b0:09:5c:33:15:0f: 46:73:a3:1b:24:69:68:f8:52:5d:b3:00:73:dc:16:7d:d8:1e: 10:70:8a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz RjA1QkQ5OTAwHhcNMjUwOTE4MTkwMzAxWhcNMjUwOTI1MTkwMzAxWjAYMRYwFAYD VQQDEw02OGNjNTc2NS04OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs9Zb8p5nq4MqICFJXwK/pPSSLtT02Ndxs9FQ1U1pjBvYEdhA0AhMoGbEpud iadrTjdyFs/TIcWx7LhN7eUXmKHDKBmDnWGoKvMEVh4+EyfyqzCu6yXwhxGa8ecG gOMGa13a5f++pq81G6QjCBVHKdUYDLTj7KI9hlfYvkBCsyidBOzQVhoVba0sgKRH uRvFKlOCBWEjRsR42juCCR7uhHM+YS1m9UWA+ErAYIlYoSVDozJ020fwx3PnJwgP B9TTtgPtQXghZPBWDk4VYji03zusNnw3clikxyUC4kw/uFY6IIhYx8kSyXznPhBL SiLWIsu6LzIqTzr987DVeHBjdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER65HTz I3W3SR2HQTtW/7fr+J06MB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV NUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACDmO0zLFRFMF2e97mzaOgeyhTXXOEBOowJC579VbbpZmfW++f8V0m O8kHvlAlkS0pk3RwlwzRIcu/3kFrWJJoOPpjSK25g8V0BPF3+RaProAyaJb97dY/ 8c/OMX5GMGb2bNIPSH8eUNMZd+JIBAjRw5Cemfd59BWSWyXcahHtJ0HH23/Urq5f JDuQXmGmXRUqIYa/BEvEgbgUiTPVSXcZMydXk+Yd3cQr1T0JcXrF3MHd+GGcZnyK jjT8Y/Jf60ituVuSntBUGFjD5Gct5xtqAe43fRcywD1HJf8BWpRD4oQJvNSwCVwz FQ9Gc6MbJGlo+FJdswBz3BZ92B4QcIoT -----END CERTIFICATE-----Generated at Fri Sep 19 07:34:05 2025 by rpki-client