$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: WUUOY1ARXKJH/mPHS2hpGdGl1jvrTXYXE0Zwd+l8ge8= Subject key identifier: 25:F9:0A:81:D5:F8:71:54:78:DF:50:0D:3C:D5:31:04:EA:63:28:EB Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 01C7 Signing time: Wed 17 Sep 2025 03:26:22 +0000 Manifest this update: Wed 17 Sep 2025 03:26:21 +0000 Manifest next update: Wed 24 Sep 2025 03:26:21 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: uGddsGmSQPXcpD0x4ekUUyH/FWpi2XJSz4DWFDrZHa8=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: txIJm5SN5mj5ufLae9sOD2bwnfe8kYJIqTNAvBL7Uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Sep 17 03:26:21 2025 GMT Not After : Sep 24 03:26:21 2025 GMT Subject: CN=68ca2a5e-5191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8b:a6:d1:41:e6:81:b3:87:7d:88:64:96:29: 29:b9:34:df:8f:8e:c0:37:c9:76:05:17:c0:e3:74: 68:cc:39:e9:ad:76:ea:cd:d9:39:f4:5b:30:dd:b3: bc:94:b5:e0:a6:39:05:e5:d2:e0:65:42:b3:36:32: 9a:4b:1d:c3:0e:c7:21:b9:58:1d:b5:da:72:86:59: f6:d6:09:58:27:94:e0:fb:b2:87:ba:a3:00:d0:ad: 67:ac:19:fc:95:39:ca:7f:f1:20:40:f9:e2:e7:b6: 3f:5e:ef:1e:87:05:1a:18:7a:f6:2d:94:52:46:01: 0a:78:cd:b1:74:d4:a4:b6:3f:9e:5a:71:bf:14:65: ae:a0:bd:53:74:9d:bc:0e:fc:a9:f1:0f:81:9e:2a: 4a:16:8d:cf:26:f7:e9:29:11:1b:9b:b6:2d:e7:4c: c4:00:75:08:23:05:91:a4:9b:5c:cc:32:d1:cf:4d: 1a:72:2d:32:b4:f5:4a:3d:b5:48:01:41:8b:5c:bc: 3d:ba:4f:28:16:39:ec:e4:b3:5f:da:98:49:16:5e: 54:37:40:fb:70:d7:04:06:c9:95:9e:91:6c:d9:de: 49:9f:b6:d8:00:8f:c9:3e:ea:fe:a3:fa:40:c0:24: f4:2d:f6:ee:ae:a6:4c:b6:61:c8:63:f7:55:7d:eb: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F9:0A:81:D5:F8:71:54:78:DF:50:0D:3C:D5:31:04:EA:63:28:EB X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c2:7b:37:1b:9a:82:4e:63:f9:02:71:9b:09:df:ae:fe:8f: d4:56:35:da:ab:08:40:47:59:22:2a:56:b5:c9:17:08:8e:cc: 4b:35:b9:5c:f5:3b:8e:c5:e0:55:93:3c:af:78:d4:64:e4:50: c1:39:91:2e:a9:ed:8f:81:a0:59:a9:8d:a1:7c:fc:c9:e0:85: 66:ea:af:90:cf:a0:66:64:a1:a1:8a:4f:6b:a9:d4:27:23:09: 17:8f:2b:5a:44:7c:f6:bb:df:9a:24:19:9d:3a:b2:c7:f5:ce: ad:c3:ae:13:80:14:0f:df:e4:25:5e:c8:c0:65:19:c6:45:3d: 90:a7:7d:5f:42:2a:1a:30:c2:f7:4b:84:1f:53:fd:ce:a0:f8: 6c:81:9c:ae:26:f0:de:f3:4f:1d:a6:67:a8:81:f6:a5:80:3c: be:d8:1e:84:4e:17:ca:34:71:9c:c7:d8:61:06:3a:e0:4e:e6: 85:45:ed:fe:3e:84:6c:2c:17:20:45:38:bb:8f:34:76:32:7f: 35:e6:ff:5e:e2:6b:73:4e:dd:5f:c5:1e:0c:1b:84:20:73:08: b2:1d:3e:22:7c:18:f4:c0:8f:f9:55:de:c4:c0:a2:39:58:4b: f0:6c:25:57:50:fe:db:77:76:9e:f8:45:45:63:8f:7e:b7:2d: 8a:22:5c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUwOTE3MDMyNjIxWhcNMjUwOTI0MDMyNjIxWjAYMRYwFAYD VQQDEw02OGNhMmE1ZS01MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Ium0UHmgbOHfYhklikpuTTfj47AN8l2BRfA43RozDnprXbqzdk59Fsw3bO8 lLXgpjkF5dLgZUKzNjKaSx3DDschuVgdtdpyhln21glYJ5Tg+7KHuqMA0K1nrBn8 lTnKf/EgQPni57Y/Xu8ehwUaGHr2LZRSRgEKeM2xdNSktj+eWnG/FGWuoL1TdJ28 Dvyp8Q+BnipKFo3PJvfpKREbm7Yt50zEAHUIIwWRpJtczDLRz00aci0ytPVKPbVI AUGLXLw9uk8oFjns5LNf2phJFl5UN0D7cNcEBsmVnpFs2d5Jn7bYAI/JPur+o/pA wCT0LfburqZMtmHIY/dVfeugrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX5CoHV +HFUeN9QDTzVMQTqYyjrMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfwns3G5qCTmP5AnGbCd+u/o/UVjXaqwhAR1kiKla1yRcIjsxLNblc 9TuOxeBVkzyveNRk5FDBOZEuqe2PgaBZqY2hfPzJ4IVm6q+Qz6BmZKGhik9rqdQn IwkXjytaRHz2u9+aJBmdOrLH9c6tw64TgBQP3+QlXsjAZRnGRT2Qp31fQioaMML3 S4QfU/3OoPhsgZyuJvDe808dpmeogfalgDy+2B6EThfKNHGcx9hhBjrgTuaFRe3+ PoRsLBcgRTi7jzR2Mn815v9e4mtzTt1fxR4MG4QgcwiyHT4ifBj0wI/5Vd7EwKI5 WEvwbCVXUP7bd3ae+EVFY49+ty2KIlw4 -----END CERTIFICATE-----Generated at Fri Sep 19 01:39:45 2025 by rpki-client