$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: B4lx8wKiP0YxX/xJZL3nKgtaAUaz7GnfEWxJf4JxY8M= Subject key identifier: 70:73:CB:C7:49:FA:00:45:5F:5B:37:B7:99:4F:9C:4D:E4:0F:6B:45 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0B86 Signing time: Sun 24 Aug 2025 19:00:32 +0000 Manifest this update: Sun 24 Aug 2025 19:00:31 +0000 Manifest next update: Sun 31 Aug 2025 19:00:31 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: kZL0ODuv5OYbvnyfBNO8xawcgsn5uuYwvvIWLVvJoJU=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2956 (0xb8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Aug 24 19:00:31 2025 GMT Not After : Aug 31 19:00:31 2025 GMT Subject: CN=68ab6150-b104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:8a:76:0b:56:c1:a5:6e:6c:da:d1:2a:4c: cc:fb:51:c5:a0:a0:81:ac:26:c0:34:09:64:f8:6c: fd:c7:ff:97:3e:4d:ea:89:6c:6a:a6:48:42:0e:9b: e0:c7:8f:86:e4:8d:b5:3d:f9:56:b7:04:b2:87:a6: 4f:5b:1d:0f:57:86:5d:3d:2d:56:e7:93:be:36:b7: 58:72:49:1c:65:3f:86:48:dc:a3:7b:05:c1:2e:11: d4:73:4f:aa:e8:7f:9b:da:fd:60:86:e0:14:08:89: 31:e4:c8:8f:23:be:8e:fa:95:03:e3:b9:8e:71:60: 77:74:6d:f4:07:39:96:b0:1d:ed:02:2c:f0:f4:14: 83:5e:ec:80:36:72:20:47:93:e3:3d:3d:00:24:d0: d8:e5:68:0b:4b:a8:f9:d4:c6:81:4b:52:3a:8b:a7: 8d:26:f7:97:35:f2:2e:cd:9f:d8:8b:c6:d3:cf:73: c4:ed:55:21:91:05:62:05:7d:3d:68:a0:da:5c:f6: 2e:b6:05:05:c3:be:e8:dc:3e:ec:e3:c6:85:6d:fc: 5f:9a:45:75:91:c3:17:81:ed:35:98:8b:5d:ff:45: f5:60:fd:60:7b:7c:4a:ac:93:1e:d3:cf:02:74:8b: fc:89:e7:a5:c6:08:fe:18:aa:8a:67:c9:dd:f7:8c: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:73:CB:C7:49:FA:00:45:5F:5B:37:B7:99:4F:9C:4D:E4:0F:6B:45 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a0:47:30:a5:65:34:42:ca:8d:41:b3:85:0b:5f:5e:bb:db: ea:b6:6e:0b:0e:e9:63:06:46:8a:bd:23:89:b3:69:c0:89:80: d4:7c:eb:1d:b0:42:d8:f6:1a:be:a3:4b:f0:ad:0f:18:6b:8f: 48:60:3d:5b:00:9b:ca:fb:6c:34:17:bf:c1:84:75:df:bd:60: 76:fd:c2:ae:24:68:65:f2:b6:f3:1e:6a:4a:40:6b:d1:8b:17: 13:06:2f:a7:9d:00:be:ea:63:3e:4b:2a:58:9a:b9:87:67:22: dc:b8:5f:23:e7:a7:bf:cd:d9:33:eb:8b:f9:10:08:a5:c8:99: 20:a8:05:42:e2:60:76:c3:08:33:cc:15:22:d4:6f:4f:c6:a5: c1:23:fa:ad:f0:56:e9:26:48:90:14:61:aa:a4:fb:3f:2c:55: 4e:7e:17:48:e0:43:33:6b:ee:27:43:7b:4f:33:80:dd:f0:b9: 69:98:fc:26:b4:e8:2e:76:14:50:d1:3b:cc:cb:89:2f:d6:ac: 48:27:1b:3c:e9:35:05:05:18:7c:a7:d2:d8:0a:49:07:f3:ef: 6a:42:51:14:0b:72:11:8c:5b:c5:f9:d4:a4:ea:2c:b7:1e:c8: 42:dd:b3:76:2c:e6:e9:23:de:ae:46:a9:e3:a1:16:99:fb:95: c7:b4:6c:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUwODI0MTkwMDMxWhcNMjUwODMxMTkwMDMxWjAYMRYwFAYD VQQDEw02OGFiNjE1MC1iMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nCKdgtWwaVubNrRKkzM+1HFoKCBrCbANAlk+Gz9x/+XPk3qiWxqpkhCDpvg x4+G5I21PflWtwSyh6ZPWx0PV4ZdPS1W55O+NrdYckkcZT+GSNyjewXBLhHUc0+q 6H+b2v1ghuAUCIkx5MiPI76O+pUD47mOcWB3dG30BzmWsB3tAizw9BSDXuyANnIg R5PjPT0AJNDY5WgLS6j51MaBS1I6i6eNJveXNfIuzZ/Yi8bTz3PE7VUhkQViBX09 aKDaXPYutgUFw77o3D7s48aFbfxfmkV1kcMXge01mItd/0X1YP1ge3xKrJMe088C dIv8ieelxgj+GKqKZ8nd94xj9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBzy8dJ +gBFX1s3t5lPnE3kD2tFMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4oEcwpWU0QsqNQbOFC19eu9vqtm4LDuljBkaKvSOJs2nAiYDUfOsd sELY9hq+o0vwrQ8Ya49IYD1bAJvK+2w0F7/BhHXfvWB2/cKuJGhl8rbzHmpKQGvR ixcTBi+nnQC+6mM+SypYmrmHZyLcuF8j56e/zdkz64v5EAilyJkgqAVC4mB2wwgz zBUi1G9PxqXBI/qt8FbpJkiQFGGqpPs/LFVOfhdI4EMza+4nQ3tPM4Dd8LlpmPwm tOgudhRQ0TvMy4kv1qxIJxs86TUFBRh8p9LYCkkH8+9qQlEUC3IRjFvF+dSk6iy3 HshC3bN2LObpI96uRqnjoRaZ+5XHtGwU -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:28 2025 by rpki-client