$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json) Hash identifier: 6cu/e52hzHAjs/VP0GwEXpxlo4XI/jZsvjKXfF8/s54= Subject key identifier: 32:C4:E2:02:92:6F:0F:D0:9A:E7:99:46:4E:3A:02:B1:51:32:79:C9 Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Certificate serial: 22A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft Manifest number: 229E Signing time: Thu 18 Sep 2025 15:56:49 +0000 Manifest this update: Thu 18 Sep 2025 15:56:48 +0000 Manifest next update: Thu 25 Sep 2025 15:56:48 +0000 Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: MEf+WZ8tHghHD+gX8ZF1TpXnhr2UK2rgz8LnwVa/9Ss=) 2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=) 3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=) 4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8871 (0x22a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Validity Not Before: Sep 18 15:56:48 2025 GMT Not After : Sep 25 15:56:48 2025 GMT Subject: CN=68cc2bc1-c716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:81:42:f3:a2:bf:79:ba:d0:5f:27:63:2c:4b: 68:5e:3e:1f:10:5b:f3:99:aa:22:52:a9:1a:58:e6: 77:35:cf:59:a6:d7:40:c3:87:01:ed:5b:de:b4:38: e8:c8:b3:5c:b5:8f:a2:be:c7:8a:07:f6:7a:47:a7: af:d8:63:6b:18:b3:51:1e:5b:72:bf:38:a4:df:7d: 8c:00:6d:cc:47:a3:d3:66:c8:fd:a9:1a:f5:a2:9e: f2:10:4c:7c:12:8e:60:55:32:a9:b2:53:d8:88:84: f3:e7:8c:af:be:85:ee:32:ad:9b:cb:65:dc:a0:a7: 4d:4a:b4:99:a6:37:07:11:ab:f5:a6:3a:69:cc:a7: d8:79:27:b3:82:02:e1:b8:c7:ab:d6:e3:16:15:b9: 4b:8c:de:36:8a:97:a8:7e:a5:33:6c:e9:d3:a7:ac: 86:b9:09:58:aa:34:2c:61:6d:ab:c1:7f:be:d4:67: 7c:10:79:76:06:dd:d9:bf:0c:44:e9:48:d1:7f:c4: 42:cf:72:69:77:78:76:9b:2b:4c:03:28:cb:90:70: 4e:44:68:c3:f8:d5:4d:90:2f:01:49:41:9c:60:87: 71:4d:e2:09:ad:c8:e9:f4:30:c2:dd:81:29:16:04: 2d:69:97:f9:b0:28:87:42:5a:2d:ff:c5:85:fe:05: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:E2:02:92:6F:0F:D0:9A:E7:99:46:4E:3A:02:B1:51:32:79:C9 X509v3 Authority Key Identifier: keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:71:6b:8a:44:1d:a1:79:af:40:8f:f5:bd:26:c6:c9:02:63: a0:13:b4:43:d5:84:ae:bb:d6:77:9a:fb:ee:c9:e6:47:1c:f9: ed:4f:81:89:d4:38:b9:50:04:8d:f6:83:1f:34:e0:71:3a:7d: e0:88:b8:8f:21:3a:69:67:64:d3:09:36:46:27:b5:1d:5a:9e: 3c:32:24:3d:8e:bf:5f:3e:89:8a:9c:21:df:69:1c:d3:c5:61: 38:03:45:c1:58:9f:5b:f4:1b:a9:a1:3b:29:01:13:fc:53:e4: 79:c4:78:fe:07:5e:fd:6a:fa:02:78:3a:ee:9c:3f:17:8c:3e: e5:19:90:17:bd:9f:f6:a1:f0:a4:2d:63:81:93:b1:9b:d5:60: 5c:74:84:b3:6d:d8:6d:69:09:86:99:22:3d:a5:fb:a0:a0:19: 34:6e:41:9c:d4:ab:31:21:2e:5a:a9:33:45:a3:80:90:75:71: c7:8c:70:87:16:9b:29:0b:63:d0:4e:67:2a:a2:a8:8d:8e:66: 4b:92:cd:d1:4f:10:0c:4c:f9:fb:c1:b8:e7:8b:10:20:49:4e: 6f:0f:eb:6c:55:27:19:46:f9:0a:fd:a7:7c:7a:c4:2e:a2:41: cc:7d:16:a8:2d:44:cd:08:c5:55:ff:ec:57:1a:42:7a:1c:47: b8:c7:ac:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0 QTFGOUI1MUQwHhcNMjUwOTE4MTU1NjQ4WhcNMjUwOTI1MTU1NjQ4WjAYMRYwFAYD VQQDEw02OGNjMmJjMS1jNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oFC86K/ebrQXydjLEtoXj4fEFvzmaoiUqkaWOZ3Nc9ZptdAw4cB7VvetDjo yLNctY+ivseKB/Z6R6ev2GNrGLNRHltyvzik332MAG3MR6PTZsj9qRr1op7yEEx8 Eo5gVTKpslPYiITz54yvvoXuMq2by2XcoKdNSrSZpjcHEav1pjppzKfYeSezggLh uMer1uMWFblLjN42ipeofqUzbOnTp6yGuQlYqjQsYW2rwX++1Gd8EHl2Bt3ZvwxE 6UjRf8RCz3Jpd3h2mytMAyjLkHBORGjD+NVNkC8BSUGcYIdxTeIJrcjp9DDC3YEp FgQtaZf5sCiHQlot/8WF/gWGTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLE4gKS bw/QmueZRk46ArFRMnnJMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00 LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRcWuKRB2hea9Aj/W9JsbJAmOgE7RD1YSuu9Z3mvvuyeZHHPntT4GJ 1Di5UASN9oMfNOBxOn3giLiPITppZ2TTCTZGJ7UdWp48MiQ9jr9fPomKnCHfaRzT xWE4A0XBWJ9b9BupoTspARP8U+R5xHj+B179avoCeDrunD8XjD7lGZAXvZ/2ofCk LWOBk7Gb1WBcdISzbdhtaQmGmSI9pfugoBk0bkGc1KsxIS5aqTNFo4CQdXHHjHCH FpspC2PQTmcqoqiNjmZLks3RTxAMTPn7wbjnixAgSU5vD+tsVScZRvkK/ad8esQu okHMfRaoLUTNCMVV/+xXGkJ6HEe4x6wG -----END CERTIFICATE-----Generated at Fri Sep 19 09:23:10 2025 by rpki-client