$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json) Hash identifier: QEXORkF6oePHykuehFVy+DoeTKG5MpZt2mNXX88mHl0= Subject key identifier: 25:D9:5C:E5:3A:AA:FB:8E:DF:B2:3C:BD:93:76:7C:F3:B0:4E:B1:EC Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Certificate serial: 095C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft Manifest number: 1956 Signing time: Sun 24 Aug 2025 17:24:38 +0000 Manifest this update: Sun 24 Aug 2025 17:24:37 +0000 Manifest next update: Sun 31 Aug 2025 17:24:37 +0000 Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: kFcKKb1K+UBKMUuMBiDzKj5FwX/biwVeR1Uyipm0dVU=) 2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: i9BL1rlX0oUvps1Va07G59cz+t1l/lyXzZ/KRVLbWW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2396 (0x95c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Validity Not Before: Aug 24 17:24:37 2025 GMT Not After : Aug 31 17:24:37 2025 GMT Subject: CN=68ab4ad6-a7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:8a:75:2d:e6:96:e4:83:54:6e:36:45:86: 53:4a:aa:2b:9a:bf:e4:c4:a1:88:eb:88:dd:b4:8d: 05:b2:5e:97:5f:4b:1b:3f:e1:9d:41:10:78:5d:27: 12:a8:b0:e1:ad:95:3f:dc:e3:e1:64:32:bb:c9:41: e1:b1:9f:22:6a:99:a8:75:fa:8d:a3:4e:44:c3:08: ff:8d:ac:6a:8d:7c:fc:8b:ac:83:ec:d4:c1:6a:c9: f5:4b:ee:ee:29:42:b7:a5:9b:cc:ed:6f:cf:43:e1: 36:8d:5e:1a:63:49:96:70:f3:46:26:e1:0e:2e:c4: 67:e1:19:67:d5:a4:8c:94:12:24:e0:c3:66:a6:bf: 69:48:fe:dd:bb:40:f0:9d:de:a6:05:ad:0c:9c:13: 79:be:6e:25:9d:77:c7:ed:2f:c9:89:2b:c5:d4:89: 59:ab:41:58:2a:d6:e3:1b:9c:28:c1:6d:aa:27:09: de:3c:a1:26:d3:f7:3a:5f:70:62:8d:2f:80:5c:fe: 2e:94:10:20:40:0b:63:28:bb:87:3d:ca:db:4d:2d: c4:46:b4:cf:d1:8f:7a:b4:04:67:02:12:b1:86:c3: ea:c3:76:4e:bc:d6:2a:67:aa:10:87:ff:a4:da:b7: 68:da:cd:fa:71:51:9a:59:88:bf:fe:9f:f4:99:71: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:5C:E5:3A:AA:FB:8E:DF:B2:3C:BD:93:76:7C:F3:B0:4E:B1:EC X509v3 Authority Key Identifier: keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:33:41:7f:6f:ef:5f:a0:04:00:66:10:5c:24:fc:db:4d:bd: 14:c8:20:41:93:e0:5d:02:7f:b5:f9:48:e0:43:d5:d0:01:1e: a9:15:4d:e5:af:cd:a3:b6:f4:bf:0c:b5:e6:41:e5:2b:64:d7: 04:74:f6:be:2b:66:96:ce:a9:f1:89:de:49:b7:11:fa:a6:b3: 8d:09:aa:ac:7a:b8:3c:49:3d:0c:1e:51:85:51:00:b0:aa:bf: 92:86:92:0b:f9:5c:1c:22:d9:af:ae:76:84:5b:ef:99:8c:05: 94:3d:26:96:25:86:0f:82:07:78:30:13:cc:d1:8b:a5:f6:4e: f0:1c:0a:b2:96:e7:77:6a:bd:d8:db:ea:28:e8:16:5e:6e:9f: 0e:66:ac:eb:de:ab:6c:fa:df:34:3b:ee:c6:0d:ac:58:b4:35: 78:3a:e8:15:4f:52:f2:13:70:d9:d7:a5:9a:27:2e:16:41:74: 8e:43:b7:ec:3f:a3:91:c2:84:1b:55:d6:eb:27:1a:7c:30:bd: bd:5e:55:91:99:96:e8:cf:84:3c:52:50:c6:61:be:81:e1:3b: b0:7f:ca:a0:92:30:26:e7:ca:4c:6a:4f:d3:5e:31:04:7b:62: f5:60:35:97:b9:5c:96:cd:3d:d5:b4:ba:d7:4f:1a:9b:a5:d5: 25:cc:6a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3 MDNENEY3NDUwHhcNMjUwODI0MTcyNDM3WhcNMjUwODMxMTcyNDM3WjAYMRYwFAYD VQQDEw02OGFiNGFkNi1hN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp2KdS3mluSDVG42RYZTSqormr/kxKGI64jdtI0Fsl6XX0sbP+GdQRB4XScS qLDhrZU/3OPhZDK7yUHhsZ8iapmodfqNo05Ewwj/jaxqjXz8i6yD7NTBasn1S+7u KUK3pZvM7W/PQ+E2jV4aY0mWcPNGJuEOLsRn4Rln1aSMlBIk4MNmpr9pSP7du0Dw nd6mBa0MnBN5vm4lnXfH7S/JiSvF1IlZq0FYKtbjG5wowW2qJwnePKEm0/c6X3Bi jS+AXP4ulBAgQAtjKLuHPcrbTS3ERrTP0Y96tARnAhKxhsPqw3ZOvNYqZ6oQh/+k 2rdo2s36cVGaWYi//p/0mXEj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXZXOU6 qvuO37I8vZN2fPOwTrHsMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VB bGtQUTZOMktRalZ3UFU5MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2M0F/b+9foAQAZhBcJPzbTb0UyCBBk+BdAn+1+UjgQ9XQAR6pFU3l r82jtvS/DLXmQeUrZNcEdPa+K2aWzqnxid5JtxH6prONCaqserg8ST0MHlGFUQCw qr+ShpIL+VwcItmvrnaEW++ZjAWUPSaWJYYPggd4MBPM0Yul9k7wHAqylud3ar3Y 2+oo6BZebp8OZqzr3qts+t80O+7GDaxYtDV4OugVT1LyE3DZ16WaJy4WQXSOQ7fs P6ORwoQbVdbrJxp8ML29XlWRmZboz4Q8UlDGYb6B4Tuwf8qgkjAm58pMak/TXjEE e2L1YDWXuVyWzT3VtLrXTxqbpdUlzGpx -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:52 2025 by rpki-client