$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: xJCBf+6yc+bm9FVWx2HDqdp9S8tTPR+brXaEbNOmkX4= Subject key identifier: AA:EC:B0:03:78:64:D9:87:76:96:3A:09:BF:FF:38:E1:8D:EB:AB:1B Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 0202 Signing time: Sun 07 Sep 2025 02:41:16 +0000 Manifest this update: Sun 07 Sep 2025 02:41:15 +0000 Manifest next update: Sun 14 Sep 2025 02:41:15 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: svtADk/xjiOwerh8we/v733M9MXHEbe0hOVsiHNW21c=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Sep 7 02:41:15 2025 GMT Not After : Sep 14 02:41:15 2025 GMT Subject: CN=68bcf0cc-e152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:4a:d7:f4:c7:27:2a:56:82:72:33:db:3d: 84:86:af:84:73:c6:75:2e:63:9a:74:12:0b:db:de: 61:3f:6d:a8:f6:00:07:96:03:b4:3b:91:4e:c4:03: 73:de:6d:02:8e:05:20:95:1a:6d:85:e6:58:57:15: 3a:80:4a:0d:f3:02:05:06:3d:0d:eb:bd:3f:46:dc: 1a:55:90:46:cc:39:b0:02:d0:28:0c:51:20:50:92: 2b:54:a1:85:57:db:4a:f4:e0:86:ba:b4:59:a3:38: cf:9c:0f:34:b0:60:77:8c:4b:e3:2f:1b:1d:0a:c2: 03:59:e3:32:55:be:82:84:45:ba:44:3e:87:72:07: 28:bd:74:b7:05:51:cc:3b:d6:58:6c:87:65:93:3e: 69:00:b0:d1:b3:78:1b:ec:41:ac:f3:2e:01:02:1f: d3:12:fc:b3:7b:d9:8d:d3:11:4e:15:64:80:d1:33: 0c:6c:c4:dd:af:40:03:1f:e5:f8:0f:2e:2c:12:51: 5f:74:82:ae:f2:76:20:7f:c4:30:87:f1:55:de:c0: ef:14:e8:79:79:b9:c1:57:84:18:50:bd:a5:e8:c4: dd:63:c5:32:ac:3e:6b:77:0c:d8:f6:42:3e:56:e2: a2:b2:a7:8a:f9:e8:71:d9:62:f9:09:7d:3f:a8:55: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EC:B0:03:78:64:D9:87:76:96:3A:09:BF:FF:38:E1:8D:EB:AB:1B X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9c:24:87:3e:7b:94:b1:14:93:ac:4d:cb:f4:95:57:53:6f: 6e:42:75:27:e7:af:f2:19:84:b7:37:0c:77:8d:ab:e9:97:83: 9b:bb:9f:b9:06:b2:56:dd:c0:33:13:7b:07:ab:03:be:9c:4e: 7b:d3:d6:d4:49:83:94:68:38:11:11:9b:41:5f:34:6c:62:50: cb:b4:cc:7e:5d:ba:24:b5:48:75:d3:32:e6:07:6a:12:a0:0a: 22:94:3c:69:e0:0d:ae:8e:54:08:c9:4e:e1:83:96:e5:95:19: ee:d5:d9:b2:51:d0:a8:2e:55:2b:c3:8f:0a:1d:bc:c3:94:1e: 4f:b0:06:1a:05:fb:9f:5a:85:b7:59:99:3e:cb:fe:d7:a8:d3: 77:1e:57:f0:66:6a:fd:27:7b:18:ba:2a:09:40:3f:50:23:ff: 1c:7f:a9:77:78:5d:4e:a2:e6:79:7d:f8:cd:d2:76:ce:0b:ad: 85:fc:77:3e:46:d8:c5:40:e0:17:26:36:19:1a:92:65:95:a0: 54:81:96:74:78:da:1b:cd:2f:d0:8b:ed:5d:75:b6:5c:2d:2e: 6b:a0:3e:4f:30:91:71:32:cf:f2:15:15:8c:e6:75:f9:5f:96: c2:fe:69:fd:54:90:69:8a:df:ee:e9:39:f6:2a:aa:8c:73:2c: 08:75:dd:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUwOTA3MDI0MTE1WhcNMjUwOTE0MDI0MTE1WjAYMRYwFAYD VQQDEw02OGJjZjBjYy1lMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwohK1/THJypWgnIz2z2Ehq+Ec8Z1LmOadBIL295hP22o9gAHlgO0O5FOxANz 3m0CjgUglRptheZYVxU6gEoN8wIFBj0N670/RtwaVZBGzDmwAtAoDFEgUJIrVKGF V9tK9OCGurRZozjPnA80sGB3jEvjLxsdCsIDWeMyVb6ChEW6RD6HcgcovXS3BVHM O9ZYbIdlkz5pALDRs3gb7EGs8y4BAh/TEvyze9mN0xFOFWSA0TMMbMTdr0ADH+X4 Dy4sElFfdIKu8nYgf8Qwh/FV3sDvFOh5ebnBV4QYUL2l6MTdY8UyrD5rdwzY9kI+ VuKisqeK+ehx2WL5CX0/qFUMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrssAN4 ZNmHdpY6Cb//OOGN66sbMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOnCSHPnuUsRSTrE3L9JVXU29uQnUn56/yGYS3Nwx3javpl4Obu5+5 BrJW3cAzE3sHqwO+nE5709bUSYOUaDgREZtBXzRsYlDLtMx+XboktUh10zLmB2oS oAoilDxp4A2ujlQIyU7hg5bllRnu1dmyUdCoLlUrw48KHbzDlB5PsAYaBfufWoW3 WZk+y/7XqNN3HlfwZmr9J3sYuioJQD9QI/8cf6l3eF1OouZ5ffjN0nbOC62F/Hc+ RtjFQOAXJjYZGpJllaBUgZZ0eNobzS/Qi+1ddbZcLS5roD5PMJFxMs/yFRWM5nX5 X5bC/mn9VJBpit/u6Tn2KqqMcywIdd16 -----END CERTIFICATE-----Generated at Mon Sep 8 10:08:02 2025 by rpki-client