$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json) Hash identifier: NTGZoNSZ2Oudni07+RNHKum8Ku3Ut59Z46kGkCz2L3w= Subject key identifier: 8C:EF:09:27:F5:1D:58:EA:46:DC:63:D8:EE:37:E1:D1:56:DF:1B:15 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft Manifest number: 1E34 Signing time: Sun 24 Aug 2025 16:03:22 +0000 Manifest this update: Sun 24 Aug 2025 16:03:21 +0000 Manifest next update: Sun 31 Aug 2025 16:03:21 +0000 Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: 29jOW2KpRipdxx3HzGkw+IG9tTFH740C7kFYydqoxdA=) 2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: SuDRS4jGJE9zSZ58w86iX8uePQ9m/GiWmqEd/5+TkEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7745 (0x1e41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: Aug 24 16:03:21 2025 GMT Not After : Aug 31 16:03:21 2025 GMT Subject: CN=68ab37ca-fbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:f1:17:6a:d0:9b:4b:f6:ec:9d:0a:53:35: f4:72:de:23:0f:a2:91:fa:8f:55:b9:4c:02:9e:92: 6a:3f:5a:2c:51:66:16:e7:3e:81:96:00:d2:fd:19: c0:34:20:1e:76:65:0d:28:6f:b2:87:ea:d5:b9:fb: ca:37:44:a9:31:fd:fd:b7:11:53:26:06:a0:dc:5c: 97:f3:a9:09:13:28:86:c0:b3:0a:ef:44:e9:b3:b0: 65:04:79:ab:12:1c:70:73:e7:16:01:3b:f9:57:9d: e1:de:a7:e1:a3:08:5e:4b:a1:3e:72:e7:09:0b:81: bc:fb:12:11:d0:c5:07:36:60:64:32:a4:d2:c4:06: 64:8b:a4:ca:23:16:76:07:ca:7a:65:7f:25:dc:8f: c4:6f:62:a3:29:82:80:af:3d:71:73:c0:ce:7a:23: 5f:05:83:40:a9:55:59:58:c7:f5:eb:ac:e5:b1:04: d4:07:7d:24:54:b0:5e:69:4c:82:1e:5c:ec:c2:f8: a6:51:59:cd:ce:ac:80:23:63:c8:3e:98:38:06:ff: 92:cf:8b:a1:b4:4e:92:28:d9:2b:25:48:e7:45:1d: 47:3c:3d:68:59:07:f7:f3:a0:25:bd:d8:c2:4a:17: f7:0b:14:37:59:6e:3d:ba:1e:56:77:29:be:cf:47: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:09:27:F5:1D:58:EA:46:DC:63:D8:EE:37:E1:D1:56:DF:1B:15 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a4:e5:fe:a0:ce:53:78:f4:46:0f:f2:8d:ec:2c:f6:b1:9c: 87:25:20:bd:b6:54:2a:f3:c6:b0:3b:9e:c7:09:f4:e8:64:3c: 25:4b:48:15:28:b2:ab:20:f5:c8:7c:f7:e1:c7:82:70:25:a9: c2:f2:88:4c:49:12:e8:00:cf:6d:4f:ea:0a:21:5c:46:4a:c9: c2:20:cf:80:20:1b:4e:00:0d:08:86:3e:59:e8:ad:ff:be:75: 81:7e:cf:3e:61:97:10:df:48:b6:dd:0e:0e:82:ea:52:c8:30: 64:69:c5:83:eb:15:58:53:64:73:63:8c:47:d2:99:fa:11:cb: 2f:8c:9d:46:90:76:72:2a:fc:02:44:12:47:6f:f8:1e:24:9d: 96:43:1e:fb:1a:41:19:d8:af:39:93:4a:c6:45:34:47:e3:47: 6d:90:4c:14:42:b5:14:6a:31:0f:1a:e5:fb:f2:aa:c9:90:f2: be:72:f9:fe:a3:fb:e9:4b:22:11:32:5e:3d:ee:60:46:8d:c6: c8:9c:f1:ea:78:9e:66:db:6a:5c:69:8e:34:64:d7:41:82:84: 1f:12:f9:18:10:81:58:fe:ff:30:a6:35:c0:69:e5:f1:1e:e6: 28:0e:70:e2:02:a2:f1:2e:e8:de:dc:fe:56:67:57:0b:49:98: da:ed:0e:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjUwODI0MTYwMzIxWhcNMjUwODMxMTYwMzIxWjAYMRYwFAYD VQQDEw02OGFiMzdjYS1mYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwnxF2rQm0v27J0KUzX0ct4jD6KR+o9VuUwCnpJqP1osUWYW5z6BlgDS/RnA NCAedmUNKG+yh+rVufvKN0SpMf39txFTJgag3FyX86kJEyiGwLMK70Tps7BlBHmr Ehxwc+cWATv5V53h3qfhowheS6E+cucJC4G8+xIR0MUHNmBkMqTSxAZki6TKIxZ2 B8p6ZX8l3I/Eb2KjKYKArz1xc8DOeiNfBYNAqVVZWMf166zlsQTUB30kVLBeaUyC HlzswvimUVnNzqyAI2PIPpg4Bv+Sz4uhtE6SKNkrJUjnRR1HPD1oWQf386AlvdjC Shf3CxQ3WW49uh5Wdym+z0cwNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzvCSf1 HVjqRtxj2O434dFW3xsVMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2 TFU0Y2thOVZnMGtMLTd3Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfpOX+oM5TePRGD/KN7Cz2sZyHJSC9tlQq88awO57HCfToZDwlS0gV KLKrIPXIfPfhx4JwJanC8ohMSRLoAM9tT+oKIVxGSsnCIM+AIBtOAA0Ihj5Z6K3/ vnWBfs8+YZcQ30i23Q4OgupSyDBkacWD6xVYU2RzY4xH0pn6EcsvjJ1GkHZyKvwC RBJHb/geJJ2WQx77GkEZ2K85k0rGRTRH40dtkEwUQrUUajEPGuX78qrJkPK+cvn+ o/vpSyIRMl497mBGjcbInPHqeJ5m22pcaY40ZNdBgoQfEvkYEIFY/v8wpjXAaeXx HuYoDnDiAqLxLuje3P5WZ1cLSZja7Q6T -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:25 2025 by rpki-client