$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: 4guHJwZtnj9vjqfrqx5T5En4hwhXyCkxxU+G0+flXn8= Subject key identifier: 84:27:6E:8D:47:F5:74:94:36:56:76:B5:4A:B7:B4:54:1C:1E:C2:12 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 106E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1059 Signing time: Sun 24 Aug 2025 17:22:45 +0000 Manifest this update: Sun 24 Aug 2025 17:22:45 +0000 Manifest next update: Sun 31 Aug 2025 17:22:45 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: FuhZPMZHGNfrYUhqVnLRWiPUcYzDHunDOZLoHMeWHqk=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: lt8gmY8g1SyOkxFazii9tDuABaAafi0NX+TiAw/IKTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4206 (0x106e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Aug 24 17:22:45 2025 GMT Not After : Aug 31 17:22:45 2025 GMT Subject: CN=68ab4a65-4bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:b8:8d:50:ab:8f:49:6f:86:62:e0:25:31: 79:21:de:23:6f:e9:35:0d:8f:07:26:ff:48:3d:3d: b1:9b:94:a7:59:a6:43:81:2c:8c:9e:3c:0f:7e:c6: be:49:78:d0:e9:34:53:0f:04:31:25:53:86:ad:e0: cb:42:a8:a4:8a:03:09:d3:54:90:49:20:2d:ff:66: 6c:d9:3f:86:91:9e:d8:ba:c6:d9:08:f9:64:81:fd: 8c:f8:d1:9c:d8:80:37:38:cd:e7:04:10:91:0f:0a: 9c:98:f8:9d:a3:60:02:15:15:47:b4:ee:bd:49:97: 93:1b:c0:1d:7e:df:7d:37:42:76:58:65:0a:08:81: d9:26:a9:66:8b:ac:b4:5f:6e:9c:ee:85:75:53:c9: 68:15:79:f9:9c:a8:f2:13:bf:a4:83:04:9b:e9:e6: 8c:28:eb:ec:69:86:c1:da:9a:5e:7b:a5:f6:8c:21: d4:cc:41:e6:d2:38:81:93:70:86:08:b0:fc:18:a2: 8f:ef:41:8d:54:bc:8f:6e:f8:10:21:30:fd:94:74: 17:b1:e9:22:db:d8:ff:a3:40:7e:aa:ee:fa:f8:7f: d0:b4:1b:23:0d:43:5b:d3:b9:7b:af:af:ea:68:6a: 56:18:fe:0e:4d:d8:4f:de:1f:37:29:81:14:69:fe: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:27:6E:8D:47:F5:74:94:36:56:76:B5:4A:B7:B4:54:1C:1E:C2:12 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:dc:f0:53:9e:82:55:44:39:1c:64:85:0f:95:81:10:e8:3f: 64:1d:07:05:f8:26:e6:53:2d:cc:6b:dd:80:8d:5f:d6:4e:0d: 60:76:db:55:15:66:45:c6:9f:5d:46:cc:92:b2:44:52:01:38: d4:b3:18:c4:e2:89:8c:ee:7f:19:f9:00:ab:e2:7b:1a:f7:7b: 36:23:da:7f:2f:c4:10:29:7c:7f:90:04:3d:97:06:f8:0f:d9: 68:aa:e0:fa:65:39:34:a3:10:37:bb:d0:f6:b0:7a:2f:9c:02: 07:7f:c2:33:95:99:17:4e:5f:db:f3:20:c0:7c:29:5f:d5:5b: b0:bd:ad:2a:d8:61:e2:81:41:de:fb:92:25:dd:b0:fd:89:fa: 63:c7:58:1d:b6:75:d6:dc:71:78:5c:34:aa:1e:89:cf:a1:a9: 74:e1:f0:24:c3:d6:fa:5a:8c:24:77:7a:0b:ec:1b:c5:18:30: f9:6f:e5:f7:f2:25:40:63:16:43:30:28:ca:01:9a:29:17:9f: 95:21:a5:f8:83:dd:96:01:5b:4c:b7:23:c1:4a:32:47:a1:6c: 37:cb:3c:38:8b:18:e5:68:08:05:ba:d7:48:ce:c4:ab:d9:fb: 19:df:1f:57:60:8a:9b:5c:a2:cd:26:29:85:70:a9:df:f4:3e: d8:f7:ec:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwODI0MTcyMjQ1WhcNMjUwODMxMTcyMjQ1WjAYMRYwFAYD VQQDEw02OGFiNGE2NS00YmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslK4jVCrj0lvhmLgJTF5Id4jb+k1DY8HJv9IPT2xm5SnWaZDgSyMnjwPfsa+ SXjQ6TRTDwQxJVOGreDLQqikigMJ01SQSSAt/2Zs2T+GkZ7YusbZCPlkgf2M+NGc 2IA3OM3nBBCRDwqcmPido2ACFRVHtO69SZeTG8Adft99N0J2WGUKCIHZJqlmi6y0 X26c7oV1U8loFXn5nKjyE7+kgwSb6eaMKOvsaYbB2ppee6X2jCHUzEHm0jiBk3CG CLD8GKKP70GNVLyPbvgQITD9lHQXseki29j/o0B+qu76+H/QtBsjDUNb07l7r6/q aGpWGP4OTdhP3h83KYEUaf4xBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQnbo1H 9XSUNlZ2tUq3tFQcHsISMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG3PBTnoJVRDkcZIUPlYEQ6D9kHQcF+CbmUy3Ma92AjV/WTg1gdttV FWZFxp9dRsySskRSATjUsxjE4omM7n8Z+QCr4nsa93s2I9p/L8QQKXx/kAQ9lwb4 D9loquD6ZTk0oxA3u9D2sHovnAIHf8IzlZkXTl/b8yDAfClf1Vuwva0q2GHigUHe +5Il3bD9ifpjx1gdtnXW3HF4XDSqHonPoal04fAkw9b6Wowkd3oL7BvFGDD5b+X3 8iVAYxZDMCjKAZopF5+VIaX4g92WAVtMtyPBSjJHoWw3yzw4ixjlaAgFutdIzsSr 2fsZ3x9XYIqbXKLNJimFcKnf9D7Y9+yN -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:26 2025 by rpki-client