$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: IlyszlfT+tgHlRKP7EBLGF3J+llZL72q7G4Wkh55WaA= Subject key identifier: 8A:3C:DE:A8:65:BC:79:99:65:95:3A:DB:BD:20:95:57:F7:3C:0A:62 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 1050 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 1047 Signing time: Sun 24 Aug 2025 17:22:38 +0000 Manifest this update: Sun 24 Aug 2025 17:22:37 +0000 Manifest next update: Sun 31 Aug 2025 17:22:37 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: iC4Nr8IH/VEVKHySAfO3usoR7z0uDKiprjzzowm7wOU=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: bskjGki25S2tjkA4uEDOBCllOjX3cMsximD4ACjwrOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4176 (0x1050) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Aug 24 17:22:37 2025 GMT Not After : Aug 31 17:22:37 2025 GMT Subject: CN=68ab4a5e-3a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ff:a0:ee:a8:86:7f:6a:73:28:91:44:56:14: a5:ca:22:4a:3d:7f:6a:6e:47:38:88:b8:e1:43:60: 65:27:d4:24:a2:0c:41:5c:49:c2:89:b6:99:0f:5f: 68:bd:c9:76:f5:b7:a6:b0:61:86:4d:31:83:be:2a: cf:fd:9a:ce:e6:4d:af:8e:17:3f:f4:7e:dc:75:87: 9d:65:74:25:fe:1a:13:50:10:36:72:4f:0e:a4:77: 1d:42:19:9c:dd:aa:18:51:26:7a:e2:c1:be:4e:f4: 9e:a6:c8:cb:63:42:a6:de:f3:3f:50:4f:a4:71:29: 51:fc:8b:ea:98:81:48:8a:70:18:3b:4d:1f:a9:b7: d6:72:6a:e4:a6:d3:c2:61:78:95:38:95:36:d3:c5: 64:e0:1e:22:bb:f6:c5:89:0a:c5:21:c2:ab:2a:0e: 92:8d:82:d8:c8:44:e4:27:5b:89:fd:79:f7:11:f5: 21:4a:c4:58:13:37:f7:63:42:62:e6:24:7b:0e:df: 8b:da:49:2b:eb:a5:04:a0:5c:a1:68:8b:19:dd:41: fa:e9:9c:74:17:17:bc:00:5e:92:24:70:d3:b7:e0: 77:03:66:1f:0d:cb:22:8f:8a:3c:34:cb:33:57:4a: a4:ae:db:0c:11:ee:6e:8d:14:72:53:e9:6e:b0:32: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3C:DE:A8:65:BC:79:99:65:95:3A:DB:BD:20:95:57:F7:3C:0A:62 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:9e:06:49:76:8b:0d:d4:8b:f7:e4:67:ea:20:35:07:9d:b0: 2d:4b:bb:b2:5a:df:ad:b0:57:22:31:11:85:09:a3:8a:a9:0e: 6c:c4:7a:a9:d3:ac:9c:3a:e6:05:f3:84:fb:00:77:ed:d8:44: e6:07:a5:ef:56:40:eb:a1:ae:b9:78:82:2f:9d:03:91:c2:be: 65:4b:8a:4a:65:7a:5d:78:dc:e5:0e:a9:3b:cd:ba:84:e6:41: 3e:bd:6f:31:28:f7:c5:0e:e6:33:ed:4e:96:3e:39:fb:7f:b9: 33:f4:54:5c:2e:de:d9:30:91:c8:98:b9:4b:ba:87:5b:d3:3c: 59:9e:88:c0:0e:48:6b:5c:03:9b:7c:a9:c6:4c:20:eb:a1:05: 71:55:0c:e0:02:1d:bb:6d:b8:2b:d3:48:6e:3a:80:d4:26:11: f0:bb:e1:55:a5:10:df:a4:11:19:9c:9e:fd:7a:01:fc:74:dd: 32:70:9e:c3:de:9c:12:4b:3b:49:2e:a7:ba:f2:5a:40:23:ab: 14:bd:22:27:4e:79:4b:72:a7:9f:7b:10:4e:bd:08:2a:49:82: c4:32:0b:10:a8:f7:c3:b6:25:77:d8:32:71:b4:b1:7b:e4:08: 07:4d:0a:d4:3a:83:e0:98:3a:fe:2c:3a:33:a2:4a:19:a2:f5: 91:15:02:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUwODI0MTcyMjM3WhcNMjUwODMxMTcyMjM3WjAYMRYwFAYD VQQDEw02OGFiNGE1ZS0zYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlv+g7qiGf2pzKJFEVhSlyiJKPX9qbkc4iLjhQ2BlJ9QkogxBXEnCibaZD19o vcl29bemsGGGTTGDvirP/ZrO5k2vjhc/9H7cdYedZXQl/hoTUBA2ck8OpHcdQhmc 3aoYUSZ64sG+TvSepsjLY0Km3vM/UE+kcSlR/IvqmIFIinAYO00fqbfWcmrkptPC YXiVOJU208Vk4B4iu/bFiQrFIcKrKg6SjYLYyETkJ1uJ/Xn3EfUhSsRYEzf3Y0Ji 5iR7Dt+L2kkr66UEoFyhaIsZ3UH66Zx0Fxe8AF6SJHDTt+B3A2YfDcsij4o8NMsz V0qkrtsMEe5ujRRyU+lusDI1lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo83qhl vHmZZZU6270glVf3PApiMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAngZJdosN1Iv35GfqIDUHnbAtS7uyWt+tsFciMRGFCaOKqQ5sxHqp 06ycOuYF84T7AHft2ETmB6XvVkDroa65eIIvnQORwr5lS4pKZXpdeNzlDqk7zbqE 5kE+vW8xKPfFDuYz7U6WPjn7f7kz9FRcLt7ZMJHImLlLuodb0zxZnojADkhrXAOb fKnGTCDroQVxVQzgAh27bbgr00huOoDUJhHwu+FVpRDfpBEZnJ79egH8dN0ycJ7D 3pwSSztJLqe68lpAI6sUvSInTnlLcqefexBOvQgqSYLEMgsQqPfDtiV32DJxtLF7 5AgHTQrUOoPgmDr+LDozokoZovWRFQJ0 -----END CERTIFICATE-----Generated at Sun Aug 24 22:05:01 2025 by rpki-client