$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json) Hash identifier: nXkjhtgCjQ0dnJgCjuc1qU/8YZhDmUnao3sLjJXfM04= Subject key identifier: 5C:C6:A8:9C:98:D1:66:1C:17:47:C8:71:44:36:28:68:6D:92:CF:65 Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft Manifest number: 0642 Signing time: Sun 14 Sep 2025 22:46:58 +0000 Manifest this update: Sun 14 Sep 2025 22:46:57 +0000 Manifest next update: Sun 21 Sep 2025 22:46:57 +0000 Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: /CrsDnHa8qG2LY+YfZNTL3b8jaenfZm//72n54NUyAc=) 2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Validity Not Before: Sep 14 22:46:57 2025 GMT Not After : Sep 21 22:46:57 2025 GMT Subject: CN=68c745e1-4994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:8f:ff:38:f6:f3:6c:40:9a:03:16:e2:f0: d9:3b:b5:03:8f:dd:2c:a5:d9:29:d4:87:d3:14:80: 24:14:bc:bd:96:f1:f3:c7:76:c0:d2:d4:3d:8b:3d: 0a:b5:1a:03:17:7b:2b:f1:eb:c4:57:be:5d:aa:9c: 5b:cf:8b:ab:79:f1:d0:7b:99:1e:fb:9a:39:f5:87: 73:75:e3:5f:86:98:53:fb:d5:5e:6e:ea:4e:a5:0e: 34:d1:88:4e:e5:34:78:6d:5f:aa:31:2f:fc:d8:92: 5c:13:8c:f3:d3:ed:a5:66:53:5c:04:97:44:8f:6b: a2:bc:93:01:b1:1a:17:86:9f:2f:06:4d:92:55:0f: 4f:9b:20:73:81:c3:42:45:6f:b4:d8:84:d5:53:a1: e5:88:67:0f:1a:02:38:0c:9d:0e:63:0e:f9:48:19: 92:3b:be:80:35:88:26:17:cf:93:46:a0:ab:57:3e: fe:d5:59:95:02:d6:f8:c0:f2:d3:e0:a4:db:5c:da: f0:d8:cc:eb:6d:d2:bd:6c:d1:22:88:39:77:a5:30: dc:bf:89:12:c3:ba:72:15:c2:7c:20:f6:e4:fe:22: a4:e1:8b:3f:ea:ae:99:c2:b0:5f:9b:a5:37:13:52: 57:52:28:8a:0f:29:42:bb:55:95:f2:3c:b4:b6:fd: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:A8:9C:98:D1:66:1C:17:47:C8:71:44:36:28:68:6D:92:CF:65 X509v3 Authority Key Identifier: keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:01:1d:62:a7:1e:4f:ef:80:bb:20:c1:20:cd:68:dd:2c: bc:cd:e4:1b:09:e2:b9:d6:92:72:67:82:8f:96:17:a5:f4:4d: d9:9a:e6:ad:8d:3c:99:bb:bc:5a:15:62:0a:fc:82:8d:f3:59: dd:e6:62:30:fc:29:32:13:f7:e7:2c:80:56:a6:af:15:ff:1e: 38:e8:03:10:08:21:41:ad:18:5b:4b:3b:e5:f2:dc:9c:b6:c4: e0:79:da:2f:66:f2:6c:b3:f8:ec:8d:44:2a:f3:6d:86:39:d7: f7:40:14:e1:4c:66:2e:d6:1a:15:5e:5d:78:39:8d:6f:8b:05: 68:72:92:38:11:79:d0:21:ba:48:6c:8c:ea:60:b4:df:8a:21: bd:7a:8a:62:c4:32:01:53:a9:ff:76:f1:3c:87:44:3b:86:b2: 7e:a8:a1:f8:79:7b:0b:2e:8d:12:4e:97:8d:da:ea:cf:22:68: bc:14:f1:8f:07:ac:7d:29:b3:ee:ac:43:6d:0a:9f:27:c9:be: 8c:13:e0:c8:e3:08:96:50:fa:b3:d8:85:10:f1:35:1d:0c:c2: fb:af:e8:ce:c1:74:5e:6c:2e:f6:f0:96:b8:ca:93:46:43:10: 70:1f:a7:2e:49:aa:ca:b5:af:34:9f:f8:16:85:9f:68:05:5b: 52:28:a6:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz OTJDRTQ3MUMwHhcNMjUwOTE0MjI0NjU3WhcNMjUwOTIxMjI0NjU3WjAYMRYwFAYD VQQDEw02OGM3NDVlMS00OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsSP/zj282xAmgMW4vDZO7UDj90spdkp1IfTFIAkFLy9lvHzx3bA0tQ9iz0K tRoDF3sr8evEV75dqpxbz4urefHQe5ke+5o59YdzdeNfhphT+9VebupOpQ400YhO 5TR4bV+qMS/82JJcE4zz0+2lZlNcBJdEj2uivJMBsRoXhp8vBk2SVQ9PmyBzgcNC RW+02ITVU6HliGcPGgI4DJ0OYw75SBmSO76ANYgmF8+TRqCrVz7+1VmVAtb4wPLT 4KTbXNrw2MzrbdK9bNEiiDl3pTDcv4kSw7pyFcJ8IPbk/iKk4Ys/6q6ZwrBfm6U3 E1JXUiiKDylCu1WV8jy0tv3NuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzGqJyY 0WYcF0fIcUQ2KGhtks9lMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2 NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6lQEdYqceT++AuyDBIM1o3Sy8zeQbCeK51pJyZ4KPlhel9E3Zmuat jTyZu7xaFWIK/IKN81nd5mIw/CkyE/fnLIBWpq8V/x446AMQCCFBrRhbSzvl8tyc tsTgedovZvJss/jsjUQq822GOdf3QBThTGYu1hoVXl14OY1viwVocpI4EXnQIbpI bIzqYLTfiiG9eopixDIBU6n/dvE8h0Q7hrJ+qKH4eXsLLo0STpeN2urPImi8FPGP B6x9KbPurENtCp8nyb6ME+DI4wiWUPqz2IUQ8TUdDML7r+jOwXRebC728Ja4ypNG QxBwH6cuSarKta80n/gWhZ9oBVtSKKYc -----END CERTIFICATE-----Generated at Tue Sep 16 07:52:15 2025 by rpki-client