$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: HPPDzMCWwSBLKU4oJ8Bn8ncboStPhdkWe3GNGVoB/lI= Subject key identifier: 4C:59:8E:E8:E3:3E:97:E6:9F:D4:2C:11:03:57:75:5C:2A:14:74:A7 Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 01B0 Signing time: Mon 25 Aug 2025 03:28:16 +0000 Manifest this update: Mon 25 Aug 2025 03:28:16 +0000 Manifest next update: Mon 01 Sep 2025 03:28:16 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: MZs7Fq+3iqzN41tfOV2pS15qrbb1Jd7pcO19vaiS4oM=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: 9PDqSioWn5hBKEyF3Xh2bcZ5nBkq113KFDA0GhUPDK8=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: TYXUwM1es+viCTvOIJkrXn99Lf7hGCjK/asxpXmwfB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 03:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Aug 25 03:28:16 2025 GMT Not After : Sep 1 03:28:16 2025 GMT Subject: CN=68abd850-491c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a8:aa:5a:35:61:2b:3a:cd:5d:14:77:db:41: bc:16:35:d5:ff:98:85:20:c4:bc:ce:e7:3f:95:51: 30:f8:91:aa:a0:40:2e:5a:a3:26:52:57:8e:bd:9b: 9c:ab:5e:0c:6d:77:d5:0f:2a:e7:24:50:e9:1d:95: 5a:c1:1c:25:49:c4:87:29:0b:40:6c:80:12:be:0b: d5:88:70:d2:a8:a0:e6:91:92:37:ae:19:40:45:9f: c9:41:04:b7:1a:31:b6:ea:5f:b6:8b:56:42:f5:96: 66:9f:90:24:7a:41:87:f2:0e:e6:95:96:e6:77:30: 0d:74:99:ee:cc:cf:2a:28:bb:75:2d:dc:0e:85:fb: bb:65:ba:9b:30:bc:20:22:96:f5:a7:ed:fc:a7:cb: 12:c5:9a:c8:2b:11:f9:c3:0f:8d:ab:42:af:ef:01: 64:97:c1:bc:8c:13:c2:93:48:38:b6:3b:f9:30:7e: af:92:01:a3:b5:aa:92:cf:85:7d:4a:5d:c9:4a:db: 0b:4e:16:e7:a4:ab:eb:ba:91:67:53:2c:f0:4e:1e: 12:e0:b8:18:f5:8b:4e:5e:17:ce:58:5f:56:10:9c: 33:b7:d5:01:2f:60:1d:4e:d5:5a:3b:79:60:2d:e8: 9e:1d:84:18:b8:16:56:1d:b3:67:f3:79:9e:39:26: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:59:8E:E8:E3:3E:97:E6:9F:D4:2C:11:03:57:75:5C:2A:14:74:A7 X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:73:12:b6:a3:5b:e4:d0:55:17:d0:4e:44:9b:98:47:7c:9d: 49:b5:30:e7:28:54:de:30:6d:39:ab:c5:a0:0e:c2:1d:8c:d3: 11:98:0c:e1:d2:75:21:f1:6c:be:1c:95:6d:7f:95:b8:c8:2c: 50:46:22:38:37:c2:bd:a2:2c:89:e6:0c:27:33:cd:28:cf:b4: bc:ee:35:14:15:7c:19:1c:26:a9:a5:e5:40:56:ec:3a:34:e6: 14:f3:06:9e:7c:46:31:e1:ef:c3:f9:a9:23:7c:df:08:84:a3: 07:30:66:31:19:ad:65:6d:18:d6:23:b7:17:45:62:9c:48:dd: 2d:ef:36:b4:94:ac:dc:c0:7a:42:92:de:65:9b:8b:66:a8:80: 68:19:af:73:4f:4c:97:eb:07:8c:90:a7:bd:ca:13:98:49:08: 74:df:fc:59:f5:db:9a:77:1c:8d:93:95:f5:63:5e:a0:ba:e9: 7a:6f:88:40:02:0f:97:8a:54:0b:64:96:92:db:d3:63:58:92: a0:45:34:5e:4a:7e:55:78:b0:fc:bb:8f:98:7f:4c:34:69:66: 3f:1d:68:14:bd:b6:9f:b4:41:60:b2:92:6b:ce:c8:f4:ef:13: 63:24:9a:a8:5c:78:2f:c5:92:d5:d7:0a:91:09:8a:23:e4:22: 75:19:2b:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUwODI1MDMyODE2WhcNMjUwOTAxMDMyODE2WjAYMRYwFAYD VQQDEw02OGFiZDg1MC00OTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86iqWjVhKzrNXRR320G8FjXV/5iFIMS8zuc/lVEw+JGqoEAuWqMmUleOvZuc q14MbXfVDyrnJFDpHZVawRwlScSHKQtAbIASvgvViHDSqKDmkZI3rhlARZ/JQQS3 GjG26l+2i1ZC9ZZmn5AkekGH8g7mlZbmdzANdJnuzM8qKLt1LdwOhfu7ZbqbMLwg Ipb1p+38p8sSxZrIKxH5ww+Nq0Kv7wFkl8G8jBPCk0g4tjv5MH6vkgGjtaqSz4V9 Sl3JStsLThbnpKvrupFnUyzwTh4S4LgY9YtOXhfOWF9WEJwzt9UBL2AdTtVaO3lg LeieHYQYuBZWHbNn83meOSZgKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExZjujj Ppfmn9QsEQNXdVwqFHSnMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6cxK2o1vk0FUX0E5Em5hHfJ1JtTDnKFTeMG05q8WgDsIdjNMRmAzh 0nUh8Wy+HJVtf5W4yCxQRiI4N8K9oiyJ5gwnM80oz7S87jUUFXwZHCappeVAVuw6 NOYU8waefEYx4e/D+akjfN8IhKMHMGYxGa1lbRjWI7cXRWKcSN0t7za0lKzcwHpC kt5lm4tmqIBoGa9zT0yX6weMkKe9yhOYSQh03/xZ9duadxyNk5X1Y16guul6b4hA Ag+XilQLZJaS29NjWJKgRTReSn5VeLD8u4+Yf0w0aWY/HWgUvbaftEFgspJrzsj0 7xNjJJqoXHgvxZLV1wqRCYoj5CJ1GStK -----END CERTIFICATE-----Generated at Mon Aug 25 23:39:32 2025 by rpki-client