$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft File: _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json) Hash identifier: 4le4ZkjN5eiKYf9oegm7IQH1AGCHuSxoCArJ6Diyb3E= Subject key identifier: 4F:17:5A:97:F6:53:5B:5B:2A:13:0F:CE:F7:E7:F5:B3:95:53:C6:55 Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 Certificate issuer: /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Certificate serial: 2716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft Manifest number: 2707 Signing time: Sun 24 Aug 2025 15:37:49 +0000 Manifest this update: Sun 24 Aug 2025 15:37:48 +0000 Manifest next update: Sun 31 Aug 2025 15:37:48 +0000 Files and hashes: 1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: VWehzMh4wuIn3nYbBa6AmIKHmba+30/VYGP3dLUuuAU=) 2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: AGdYmprG1+spdhAmRDse9H6yLxE5LG56xPYvpdtuuFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10006 (0x2716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Validity Not Before: Aug 24 15:37:48 2025 GMT Not After : Aug 31 15:37:48 2025 GMT Subject: CN=68ab31cc-4f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:00:e8:7a:ce:c3:da:3f:60:c2:6c:be:29: ea:a0:9e:cd:5d:09:18:60:9e:58:ac:34:8e:ea:60: f9:ab:66:1d:f8:95:ce:62:8d:48:9d:d6:0a:25:36: 10:85:e0:82:fa:49:c8:d2:c1:cd:f9:ec:9f:e3:ed: 37:bb:83:89:d0:f2:9e:4e:91:6b:b7:95:6e:1c:57: d5:57:29:0e:b0:7a:44:75:18:50:40:81:04:60:c6: 01:e5:d5:3c:7a:c9:4d:a3:a8:11:fc:ed:9b:f9:0b: ea:3e:d3:4f:00:1b:ec:f2:60:b0:71:e9:4b:01:5b: db:b4:5d:6b:d6:f1:ed:c5:c8:46:33:2f:0a:2d:9c: 44:fe:a3:e8:df:8a:53:ee:d0:a0:44:17:ae:d4:13: 7a:8b:b8:b2:d9:a5:0d:8f:eb:90:e6:ea:bf:f1:57: 84:26:df:52:38:62:98:dc:84:30:f7:b6:76:0b:b5: b2:c9:9d:05:3e:1c:cd:c3:a4:f3:76:e7:b3:29:66: a0:fc:67:16:06:a2:f1:5a:49:20:41:29:03:fc:09: 4e:b0:bd:43:8d:6e:66:c6:8f:89:bd:f7:59:37:f5: 85:5f:4c:8e:36:b2:77:f3:b5:a5:24:a3:7e:16:cb: 5c:e1:9a:7e:62:be:ad:69:a3:d6:9d:0d:ab:74:a0: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:17:5A:97:F6:53:5B:5B:2A:13:0F:CE:F7:E7:F5:B3:95:53:C6:55 X509v3 Authority Key Identifier: keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:22:c8:92:4d:a9:ae:e6:19:81:64:26:26:7d:f3:fb:46:8e: e1:6b:d8:eb:6f:8d:dc:b7:a8:c8:dd:8b:35:41:4b:d0:57:ba: 39:43:a2:bf:9f:a3:f6:fd:94:0e:c8:89:71:78:84:b2:e3:7f: ca:55:11:ae:a1:1f:ce:5c:72:ef:20:81:6f:f6:dd:8c:f5:1b: ec:63:f7:ef:9c:95:f4:fc:0b:d1:69:36:7e:c5:c0:8a:b9:ce: 9d:e7:7a:4b:e9:af:82:c3:29:2a:9f:58:b5:ee:7d:98:dc:05: 4b:70:43:97:a9:6b:2c:80:89:dc:76:c3:09:90:fc:7f:9f:1a: 07:24:20:2e:c6:5f:8d:2b:e6:ff:a4:e4:43:6e:2a:21:59:b2: 72:f6:1e:b5:5f:09:6b:34:cf:5e:bd:7f:d9:de:44:63:73:03: 6e:b7:23:b1:50:e1:fb:79:a9:29:98:c8:4d:b8:e1:3d:12:13: 0d:e3:6e:37:00:ca:c5:ba:1e:95:89:a2:d6:9a:84:21:3c:0f: 2d:e5:60:66:71:0c:7c:58:54:b2:8f:22:37:25:89:4d:db:48: 61:0c:e4:66:14:7b:e7:79:21:af:fa:6f:9a:91:c4:1b:24:87: fe:b4:03:62:75:b3:30:24:7c:dd:c1:98:58:1e:74:a2:b0:d5: 8f:12:97:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFDOUQxMTAvBgNVBAUTKEZDNjU1QTIxNTQzRUNGNTdCRkEzRUJERjc5NDZBOTk1 NjFFQzUyRjUwHhcNMjUwODI0MTUzNzQ4WhcNMjUwODMxMTUzNzQ4WjAYMRYwFAYD VQQDEw02OGFiMzFjYy00ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr34A6HrOw9o/YMJsvinqoJ7NXQkYYJ5YrDSO6mD5q2Yd+JXOYo1IndYKJTYQ heCC+knI0sHN+eyf4+03u4OJ0PKeTpFrt5VuHFfVVykOsHpEdRhQQIEEYMYB5dU8 eslNo6gR/O2b+QvqPtNPABvs8mCwcelLAVvbtF1r1vHtxchGMy8KLZxE/qPo34pT 7tCgRBeu1BN6i7iy2aUNj+uQ5uq/8VeEJt9SOGKY3IQw97Z2C7WyyZ0FPhzNw6Tz duezKWag/GcWBqLxWkkgQSkD/AlOsL1DjW5mxo+JvfdZN/WFX0yONrJ387WlJKN+ Fstc4Zp+Yr6taaPWnQ2rdKAVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8XWpf2 U1tbKhMPzvfn9bOVU8ZVMB8GA1UdIwQYMBaAFPxlWiFUPs9Xv6Pr33lGqZVh7FL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUM5RC83M0FDQTVFNENG NDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXoxZV9vLXZmZVVhcGxXSHNV dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVmFJVlEtejFlX28tdmZlVWFwbFdIc1V2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUM5RC83M0FDQTVFNENGNDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXox ZV9vLXZmZVVhcGxXSHNVdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyIsiSTamu5hmBZCYmffP7Ro7ha9jrb43ct6jI3Ys1QUvQV7o5Q6K/ n6P2/ZQOyIlxeISy43/KVRGuoR/OXHLvIIFv9t2M9RvsY/fvnJX0/AvRaTZ+xcCK uc6d53pL6a+Cwykqn1i17n2Y3AVLcEOXqWssgIncdsMJkPx/nxoHJCAuxl+NK+b/ pORDbiohWbJy9h61XwlrNM9evX/Z3kRjcwNutyOxUOH7eakpmMhNuOE9EhMN4243 AMrFuh6ViaLWmoQhPA8t5WBmcQx8WFSyjyI3JYlN20hhDORmFHvneSGv+m+akcQb JIf+tANidbMwJHzdwZhYHnSisNWPEpfo -----END CERTIFICATE-----Generated at Sun Aug 24 21:58:27 2025 by rpki-client