$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: 9uoQ3lW9N31aPhLks4PMc405/tzlqLcI7Nt1zzP4dOs= Subject key identifier: F8:5E:CA:68:A7:C9:EB:1F:99:66:AE:D5:5F:83:58:79:2E:DC:55:77 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 12F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 12DE Signing time: Sun 24 Aug 2025 17:01:16 +0000 Manifest this update: Sun 24 Aug 2025 17:01:15 +0000 Manifest next update: Sun 31 Aug 2025 17:01:15 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: BpW+dSbOY8QAS3CpnldHUsbHPY1wmp32jP1qJaN7OPo=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4852 (0x12f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Aug 24 17:01:15 2025 GMT Not After : Aug 31 17:01:15 2025 GMT Subject: CN=68ab455c-fbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:9e:95:d9:57:f6:d6:db:e4:9a:53:b7:17: 2d:99:0e:9c:ec:37:37:19:81:3b:75:d9:19:81:f7: 0d:af:76:75:c4:f2:68:bd:20:7f:e3:28:8d:9b:31: c5:03:27:b4:64:75:1e:07:d8:15:4e:0a:85:cf:c0: 3a:a8:a0:3f:4a:9b:35:e1:50:26:f9:5e:5d:78:15: f6:84:35:42:90:a5:0c:ca:da:9d:2a:2e:ca:20:5c: a1:d7:0d:51:5e:fd:4e:a4:62:ac:c1:fe:91:e5:b5: f1:b1:86:8f:9d:ba:1f:18:0a:52:1d:ed:56:fc:3b: 92:30:9e:fd:8f:64:6a:45:55:9d:0a:84:b5:94:1e: 15:ea:06:78:b6:b8:1c:4c:3c:7b:9c:8d:4b:5c:aa: 94:e2:fa:4a:bb:be:18:5b:77:9e:e8:41:01:e4:21: e1:fd:3d:db:36:7d:ed:94:43:fc:2d:0b:8d:a5:da: f6:91:11:7b:3e:66:85:b8:8b:c6:d1:7b:3c:74:5d: c9:28:49:8c:a4:f6:32:de:1b:91:74:cc:83:90:2c: 31:0d:85:7c:75:6f:c4:81:70:f5:7e:da:f6:77:60: e4:28:34:6e:b7:8d:dc:3d:56:cb:f7:dd:27:c0:15: 58:a5:6a:0f:d5:2b:8c:65:33:77:e2:a7:40:ec:ed: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5E:CA:68:A7:C9:EB:1F:99:66:AE:D5:5F:83:58:79:2E:DC:55:77 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:47:3f:f6:4f:96:56:d0:f4:ee:e2:fd:3c:d2:e5:7c:52:0f: 0b:ca:63:b0:d1:50:92:db:cc:e8:7a:4e:8d:5d:c9:48:b9:2b: 1c:bd:fe:7f:92:c6:db:ab:f2:a9:91:79:54:8c:83:33:49:7c: 96:fd:d3:a1:75:49:9e:19:a4:e8:56:bc:0e:f7:62:06:b2:77: 09:85:3b:58:28:cd:06:10:d0:52:0b:08:fd:46:16:ea:52:de: 5a:c0:3c:9c:22:b6:41:03:36:02:0c:9f:1f:56:e5:14:d2:ff: c0:cb:49:22:1b:20:64:56:98:3a:8d:69:32:8e:18:52:2b:6b: d0:56:f0:bb:82:f9:a3:88:7f:5a:19:f1:3f:47:b7:24:20:7b: c9:1b:41:6e:8b:a2:4a:b4:5f:7d:3a:13:b3:6f:9b:af:5b:fc: 07:d5:0a:8f:77:d4:cf:0b:8c:54:23:28:71:d1:28:35:99:f5: ad:3a:5c:cc:cc:b9:e7:ee:6e:c7:0b:41:c7:eb:1d:77:0c:2d: 91:29:80:1d:e8:63:a6:2a:b9:e6:d3:b2:99:ed:f0:47:74:c7: c2:99:f6:ff:ec:a5:40:54:50:d4:cb:4e:13:b8:39:fe:21:8f: 5c:20:48:99:34:57:8c:69:e5:6b:36:2b:07:64:0b:42:6d:5f: 4c:3c:da:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUwODI0MTcwMTE1WhcNMjUwODMxMTcwMTE1WjAYMRYwFAYD VQQDEw02OGFiNDU1Yy1mYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyeeldlX9tbb5JpTtxctmQ6c7Dc3GYE7ddkZgfcNr3Z1xPJovSB/4yiNmzHF Aye0ZHUeB9gVTgqFz8A6qKA/Sps14VAm+V5deBX2hDVCkKUMytqdKi7KIFyh1w1R Xv1OpGKswf6R5bXxsYaPnbofGApSHe1W/DuSMJ79j2RqRVWdCoS1lB4V6gZ4trgc TDx7nI1LXKqU4vpKu74YW3ee6EEB5CHh/T3bNn3tlEP8LQuNpdr2kRF7PmaFuIvG 0Xs8dF3JKEmMpPYy3huRdMyDkCwxDYV8dW/EgXD1ftr2d2DkKDRut43cPVbL990n wBVYpWoP1SuMZTN34qdA7O0eXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPheymin yesfmWau1V+DWHku3FV3MB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoRz/2T5ZW0PTu4v080uV8Ug8LymOw0VCS28zoek6NXclIuSscvf5/ ksbbq/KpkXlUjIMzSXyW/dOhdUmeGaToVrwO92IGsncJhTtYKM0GENBSCwj9Rhbq Ut5awDycIrZBAzYCDJ8fVuUU0v/Ay0kiGyBkVpg6jWkyjhhSK2vQVvC7gvmjiH9a GfE/R7ckIHvJG0Fui6JKtF99OhOzb5uvW/wH1QqPd9TPC4xUIyhx0Sg1mfWtOlzM zLnn7m7HC0HH6x13DC2RKYAd6GOmKrnm07KZ7fBHdMfCmfb/7KVAVFDUy04TuDn+ IY9cIEiZNFeMaeVrNisHZAtCbV9MPNon -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:57 2025 by rpki-client