$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: sM1jTHVbtdYqiwwdfMHycB3vPs1+bvf9SG7hwCDZgKY= Subject key identifier: ED:00:31:68:9D:B6:2A:10:D1:D1:A6:E6:40:EE:2C:45:1B:89:41:D9 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 011C Signing time: Tue 09 Sep 2025 04:57:23 +0000 Manifest this update: Tue 09 Sep 2025 04:57:23 +0000 Manifest next update: Tue 16 Sep 2025 04:57:23 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: sZI6Ndg6pkDgoyjdYiJCtUxTzci8xd1WfLLOGQBf9aU=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Sep 9 04:57:23 2025 GMT Not After : Sep 16 04:57:23 2025 GMT Subject: CN=68bfb3b3-d9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:81:b4:98:61:2c:77:17:22:9e:54:03:ea: 0f:38:ca:95:7b:84:8a:8b:30:31:61:d5:a2:69:ba: d8:29:3b:3b:14:cb:c5:6a:2b:0f:f7:41:41:1e:93: d6:3a:08:59:47:07:12:40:20:bf:46:91:15:5c:9b: 79:3d:55:e4:9d:a9:c2:ec:9e:b2:1e:4e:ca:95:fa: 6d:35:38:aa:14:57:10:4a:48:9e:d1:b6:09:1a:03: 84:f2:b6:fb:17:34:3e:13:52:6c:4a:3c:ec:07:3e: fd:96:3a:76:4f:3c:88:6b:b3:a1:1c:d8:0b:c0:4e: 32:84:4b:9d:d4:84:f1:21:b1:13:23:b6:8f:bc:88: 6c:ea:a0:09:4d:2d:a8:c7:27:5e:90:39:19:f2:09: e7:b5:71:ee:82:92:1d:20:82:46:71:b4:48:66:be: de:bc:d3:43:f5:8d:88:65:c0:8e:4b:68:a9:fa:6e: b1:72:fd:ad:23:d0:26:a4:39:e5:dd:00:b2:15:aa: 70:bc:d8:64:fe:b1:75:77:42:89:9e:7b:97:01:95: 3a:d0:66:cb:d6:03:a7:ef:6f:c4:93:15:e6:ba:70: 1e:ed:97:b0:09:f4:c9:cd:1c:b6:68:ce:90:0f:03: 8a:e0:a7:27:63:af:80:50:ea:81:13:de:b0:d4:ae: ed:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:00:31:68:9D:B6:2A:10:D1:D1:A6:E6:40:EE:2C:45:1B:89:41:D9 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0f:1e:01:3b:52:87:98:50:fd:6c:b7:55:ab:b2:4c:ce:ed: 5a:f8:a2:15:b1:14:1d:bd:6f:c7:56:e6:5e:69:a2:bb:cf:c1: 93:9d:32:20:88:ea:53:1a:2e:57:77:d3:2f:fb:59:e8:b9:27: d8:fd:ca:02:c4:d4:cf:65:ac:5e:ff:52:95:1e:25:32:7d:1f: 03:0d:c4:10:37:4f:2b:b9:20:ea:67:dd:df:42:82:cd:9a:dc: 40:4f:91:cc:c8:e5:d4:d5:53:78:d7:c4:1f:87:9d:8c:99:dd: bc:54:6f:7a:69:b5:00:f0:f6:66:62:61:5a:b8:75:2d:2d:8d: b5:7d:ec:28:ab:8e:0d:14:85:5c:9a:d6:85:3e:4b:ae:a1:c6: 58:42:72:24:35:04:bf:e6:01:66:33:19:73:da:19:b2:53:92: 62:94:41:5f:61:ea:33:09:f6:dc:78:23:88:5c:ca:22:d8:21: ce:9c:ae:d5:d4:69:51:a6:42:30:8a:c2:8a:20:ed:10:7b:82: 4f:09:7f:c3:14:b1:32:5b:31:cd:0e:4b:23:51:15:4c:90:cf: 97:2d:5a:bd:61:c4:ac:2d:9e:8b:1e:be:94:90:d1:99:84:52: ae:cd:2c:9c:7e:c1:b5:ed:a9:1f:fb:ff:e8:2c:a3:73:c7:79: 76:39:bd:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwOTA5MDQ1NzIzWhcNMjUwOTE2MDQ1NzIzWjAYMRYwFAYD VQQDEw02OGJmYjNiMy1kOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A+BtJhhLHcXIp5UA+oPOMqVe4SKizAxYdWiabrYKTs7FMvFaisP90FBHpPW OghZRwcSQCC/RpEVXJt5PVXknanC7J6yHk7KlfptNTiqFFcQSkie0bYJGgOE8rb7 FzQ+E1JsSjzsBz79ljp2TzyIa7OhHNgLwE4yhEud1ITxIbETI7aPvIhs6qAJTS2o xydekDkZ8gnntXHugpIdIIJGcbRIZr7evNND9Y2IZcCOS2ip+m6xcv2tI9AmpDnl 3QCyFapwvNhk/rF1d0KJnnuXAZU60GbL1gOn72/EkxXmunAe7ZewCfTJzRy2aM6Q DwOK4KcnY6+AUOqBE96w1K7tbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0AMWid tioQ0dGm5kDuLEUbiUHZMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhDx4BO1KHmFD9bLdVq7JMzu1a+KIVsRQdvW/HVuZeaaK7z8GTnTIg iOpTGi5Xd9Mv+1nouSfY/coCxNTPZaxe/1KVHiUyfR8DDcQQN08ruSDqZ93fQoLN mtxAT5HMyOXU1VN418Qfh52Mmd28VG96abUA8PZmYmFauHUtLY21fewoq44NFIVc mtaFPkuuocZYQnIkNQS/5gFmMxlz2hmyU5JilEFfYeozCfbceCOIXMoi2CHOnK7V 1GlRpkIwisKKIO0Qe4JPCX/DFLEyWzHNDksjURVMkM+XLVq9YcSsLZ6LHr6UkNGZ hFKuzSycfsG17akf+//oLKNzx3l2Ob3w -----END CERTIFICATE-----Generated at Wed Sep 10 07:05:53 2025 by rpki-client