$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: cY8ZGAL2ySYt6AlhbKiEKfeKPevz5Qtu2O2p+KIXl6Y= Subject key identifier: 94:02:8D:2C:03:D0:78:BD:08:50:5A:6E:7D:F5:2F:0E:D0:C5:4C:BA Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 051F Signing time: Fri 22 Aug 2025 23:47:20 +0000 Manifest this update: Fri 22 Aug 2025 23:47:20 +0000 Manifest next update: Fri 29 Aug 2025 23:47:20 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: fqEXjd5vb1/zE220XzRKRDDstFzxjemJTnJ4s/hcDMY=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Aug 22 23:47:20 2025 GMT Not After : Aug 29 23:47:20 2025 GMT Subject: CN=68a90188-4deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:06:0b:b8:ee:39:21:20:06:63:6a:cf:6c: 7f:ab:b0:ea:f8:32:5c:ab:4c:39:d0:0e:cc:bb:96: 9e:f5:96:c1:7d:26:05:11:f1:d6:1f:82:40:cf:aa: 2f:b6:a5:d8:8e:c7:61:a8:29:f8:6d:63:ca:ef:6e: b1:4b:fe:71:64:3f:77:e1:84:5f:74:26:3b:5b:f9: 51:c3:21:b6:6a:a4:25:65:e3:72:c3:83:f1:7c:e0: 72:9c:72:6a:a5:25:59:ac:8a:29:00:28:d9:0d:31: 4a:f3:65:83:12:8a:7c:30:8a:87:a5:cb:57:0d:cf: ce:42:b0:15:38:a3:a7:c0:55:61:9c:27:36:cd:6c: 0d:61:f5:df:85:a4:3a:dc:84:2d:57:91:67:9e:7e: b7:1b:27:36:6a:94:50:21:3f:7a:ee:3a:22:46:e2: 75:23:61:a5:39:1f:d7:c3:b5:ef:05:64:e9:0d:f1: 9b:d6:48:3f:b6:4c:a9:b7:70:a7:06:67:d2:80:6d: f4:d4:9f:a8:08:74:34:b3:45:64:11:fb:11:e2:57: ef:7b:02:47:7c:09:c8:3d:fb:3c:04:5c:76:2f:42: 02:48:bc:bf:93:f9:7b:cb:20:72:91:3c:37:23:fc: e6:69:0d:e6:1a:55:b0:8e:66:01:ab:64:90:1a:7a: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:02:8D:2C:03:D0:78:BD:08:50:5A:6E:7D:F5:2F:0E:D0:C5:4C:BA X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ed:04:fd:36:1e:c7:9d:d8:93:97:98:d5:03:cb:9b:1c:da: 4f:59:e2:ec:7a:cc:9d:11:bb:49:e0:a6:c4:11:1c:e3:a6:36: 43:d9:97:7b:26:88:55:de:2f:7f:ee:1d:f5:f7:9c:bf:b7:0a: ea:ba:a3:1a:b5:83:6d:22:79:56:38:09:df:51:b8:94:f9:8b: f6:ce:d3:c1:92:47:5c:4e:b9:d4:bf:b9:09:89:46:8f:1d:f1: 41:27:db:9d:a6:e3:a8:fa:b8:5e:e9:0d:ea:7f:a6:d1:d2:48: 18:fc:4b:9e:2d:6b:c8:13:52:e2:95:64:da:9c:58:59:73:10: 6f:e7:b2:67:d8:f5:85:a8:f4:8d:cb:de:ff:e5:01:6f:5f:ae: b7:0b:6c:4e:60:73:f2:43:7a:5c:08:2c:2f:64:29:5f:0c:dc: a8:db:c7:5c:d7:d3:76:16:13:f4:15:f2:8a:df:77:0d:36:5c: 93:61:b1:d2:ce:c0:e3:5d:7d:16:8e:98:8e:e7:d6:93:c2:92: ef:95:ce:1e:96:f7:23:c6:f8:83:49:55:ec:7e:b1:20:4d:e4: 12:24:d6:09:dd:f5:f5:df:5e:27:50:21:ff:c6:79:3f:cc:0f: c8:a7:1e:88:ef:24:e9:c0:d0:03:9e:ca:6e:cc:cd:59:f6:e4: 4b:b3:71:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUwODIyMjM0NzIwWhcNMjUwODI5MjM0NzIwWjAYMRYwFAYD VQQDEw02OGE5MDE4OC00ZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIcGC7juOSEgBmNqz2x/q7Dq+DJcq0w50A7Mu5ae9ZbBfSYFEfHWH4JAz6ov tqXYjsdhqCn4bWPK726xS/5xZD934YRfdCY7W/lRwyG2aqQlZeNyw4PxfOBynHJq pSVZrIopACjZDTFK82WDEop8MIqHpctXDc/OQrAVOKOnwFVhnCc2zWwNYfXfhaQ6 3IQtV5Fnnn63Gyc2apRQIT967joiRuJ1I2GlOR/Xw7XvBWTpDfGb1kg/tkypt3Cn BmfSgG301J+oCHQ0s0VkEfsR4lfvewJHfAnIPfs8BFx2L0ICSLy/k/l7yyBykTw3 I/zmaQ3mGlWwjmYBq2SQGnplqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQCjSwD 0Hi9CFBabn31Lw7QxUy6MB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB97QT9Nh7HndiTl5jVA8ubHNpPWeLsesydEbtJ4KbEERzjpjZD2Zd7 JohV3i9/7h3195y/twrquqMatYNtInlWOAnfUbiU+Yv2ztPBkkdcTrnUv7kJiUaP HfFBJ9udpuOo+rhe6Q3qf6bR0kgY/EueLWvIE1LilWTanFhZcxBv57Jn2PWFqPSN y97/5QFvX663C2xOYHPyQ3pcCCwvZClfDNyo28dc19N2FhP0FfKK33cNNlyTYbHS zsDjXX0WjpiO59aTwpLvlc4elvcjxviDSVXsfrEgTeQSJNYJ3fX1314nUCH/xnk/ zA/Ipx6I7yTpwNADnspuzM1Z9uRLs3Fd -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:18 2025 by rpki-client