$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: 7iE6Bav9ziFwg/knGVkioTekdmRnGssBmFv9CQ8LC9s= Subject key identifier: 36:01:D6:A6:3E:A5:17:32:68:7C:8E:DF:A2:29:50:75:AD:02:AE:DC Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0E66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0E5B Signing time: Sat 06 Sep 2025 17:52:54 +0000 Manifest this update: Sat 06 Sep 2025 17:52:54 +0000 Manifest next update: Sat 13 Sep 2025 17:52:54 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: /2WY8hy3HvpitCWItJIR6uO1M5BLujzy5uWBkZxYR4c=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: KLPJPe472S0O1L4BKJwaeNcAQbh5Hn42irMA5av03NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3686 (0xe66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Sep 6 17:52:54 2025 GMT Not After : Sep 13 17:52:54 2025 GMT Subject: CN=68bc74f6-b57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:51:95:0a:26:e7:c2:51:ec:14:61:c2:ea: 05:34:0a:52:76:98:9f:f9:8d:0d:7d:34:65:9b:9d: 06:9b:34:3e:5a:72:ef:0b:3d:25:27:c2:88:d1:e9: 54:3b:0a:3b:c8:1e:04:20:71:06:29:4b:08:fb:78: 2d:e9:05:bb:e7:d1:e0:fb:e4:91:69:37:62:8a:b3: 57:cc:63:b6:ba:b6:50:a8:ee:ae:c0:c6:aa:b0:3a: 31:93:bc:67:c7:a5:9a:9e:c7:83:5c:fd:13:bc:7c: 00:7c:ea:74:fe:e6:5f:4e:fd:9b:4c:4d:e0:67:4d: 50:e0:c2:40:e0:a8:7b:c9:c4:ed:73:db:aa:ec:34: 52:d6:81:8f:e5:ed:cb:4d:d5:d9:de:dc:4f:67:66: 44:ba:f5:dc:b8:b5:a6:d3:f4:39:11:32:2e:88:13: 56:fb:a4:44:17:c6:b5:56:66:92:cb:e9:ea:45:e1: 19:9e:d8:8a:6a:6e:61:87:2c:7b:6a:74:88:cf:4d: 12:63:15:78:9d:be:33:54:c0:6d:11:12:c6:5c:bf: 23:36:89:08:70:5c:d9:fe:11:16:ff:59:d8:87:7c: 7b:db:7f:95:57:74:2d:3f:22:33:54:a1:97:60:d4: ab:5e:fd:bf:c7:5f:9f:db:ad:63:64:51:5e:d6:c5: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:01:D6:A6:3E:A5:17:32:68:7C:8E:DF:A2:29:50:75:AD:02:AE:DC X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:92:17:39:39:dd:4b:32:50:56:c8:98:79:b0:62:35:43:af: f1:46:3f:66:ec:71:78:9d:5c:1f:3c:c3:4f:22:45:2a:12:92: f9:a6:8a:00:8b:81:0d:31:31:9d:dc:c2:b4:ac:99:43:17:72: f7:69:71:a7:f6:76:e5:d4:25:78:3c:e3:13:e0:03:23:78:32: b9:cd:36:7a:79:1b:70:06:05:5a:8e:dd:db:a6:56:15:10:7e: b5:01:d0:93:fa:a3:33:78:8e:8f:d2:e0:2f:a7:9b:ed:3b:85: ff:5c:36:5e:04:ee:27:dd:a8:56:fd:b5:d0:80:94:a2:73:80: b6:3f:4a:82:36:18:68:2e:32:b2:5e:1b:36:55:e4:d7:7a:6e: d8:80:7d:5e:28:71:37:8b:23:f4:2e:5d:b6:4d:7b:63:8c:1e: 48:2d:7b:d3:88:4b:9f:56:1b:97:1d:37:78:9c:0f:81:5e:99: d8:2b:a4:e6:61:cc:93:16:0d:72:96:ae:48:47:10:3c:ba:c7: 9c:e3:da:a2:78:9c:07:eb:fc:05:04:83:90:9b:95:13:01:60: 3c:f8:9d:2e:6d:01:3d:df:a3:5e:1b:12:90:46:ea:e6:c9:04: d3:b1:d1:d3:5a:9a:1d:73:69:76:9b:c6:be:b5:88:bf:e7:64: 29:d9:58:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjUwOTA2MTc1MjU0WhcNMjUwOTEzMTc1MjU0WjAYMRYwFAYD VQQDEw02OGJjNzRmNi1iNTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4StRlQom58JR7BRhwuoFNApSdpif+Y0NfTRlm50GmzQ+WnLvCz0lJ8KI0elU Owo7yB4EIHEGKUsI+3gt6QW759Hg++SRaTdiirNXzGO2urZQqO6uwMaqsDoxk7xn x6WanseDXP0TvHwAfOp0/uZfTv2bTE3gZ01Q4MJA4Kh7ycTtc9uq7DRS1oGP5e3L TdXZ3txPZ2ZEuvXcuLWm0/Q5ETIuiBNW+6REF8a1VmaSy+nqReEZntiKam5hhyx7 anSIz00SYxV4nb4zVMBtERLGXL8jNokIcFzZ/hEW/1nYh3x723+VV3QtPyIzVKGX YNSrXv2/x1+f261jZFFe1sVSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYB1qY+ pRcyaHyO36IpUHWtAq7cMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7khc5Od1LMlBWyJh5sGI1Q6/xRj9m7HF4nVwfPMNPIkUqEpL5pooA i4ENMTGd3MK0rJlDF3L3aXGn9nbl1CV4POMT4AMjeDK5zTZ6eRtwBgVajt3bplYV EH61AdCT+qMzeI6P0uAvp5vtO4X/XDZeBO4n3ahW/bXQgJSic4C2P0qCNhhoLjKy Xhs2VeTXem7YgH1eKHE3iyP0Ll22TXtjjB5ILXvTiEufVhuXHTd4nA+BXpnYK6Tm YcyTFg1ylq5IRxA8usec49qieJwH6/wFBIOQm5UTAWA8+J0ubQE936NeGxKQRurm yQTTsdHTWpodc2l2m8a+tYi/52Qp2Vgb -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:30 2025 by rpki-client