$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft File: G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json) Hash identifier: 0fMFHtsrIfcM+8QYQnlAtwxb7xl9AVejcko2i3bLpjA= Subject key identifier: 6D:90:13:E1:7D:A7:F1:D6:0F:22:B9:C4:34:75:0A:D2:D4:A8:0A:48 Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft Manifest number: 0BEE Signing time: Fri 08 Aug 2025 19:04:55 +0000 Manifest this update: Fri 08 Aug 2025 19:04:54 +0000 Manifest next update: Fri 15 Aug 2025 19:04:54 +0000 Files and hashes: 1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: cXYbuYDsVNT+N48uNxYHCdubcGJpa2xfwptiMPgfUvc=) 2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: j4q/tAbU5GnUtv3RJxFUk0GDbMAP6oPzZx57GUeGw58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Aug 8 19:04:54 2025 GMT Not After : Aug 15 19:04:54 2025 GMT Subject: CN=68964a57-48db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:83:74:7c:25:33:73:a0:b1:9f:6c:8b:71:a0: 4f:4d:16:c8:09:f1:fc:c2:fc:68:e4:3c:0d:ca:0e: fe:97:45:c3:2f:27:f9:69:86:71:09:03:c4:64:f3: d4:59:22:84:46:47:62:d5:b5:5c:b1:f3:8a:80:76: ce:d7:46:46:9e:ff:be:c4:3b:e5:d8:b8:2f:5e:65: 4c:b7:12:85:6c:0d:4f:b3:0d:c4:09:2a:45:85:de: f3:4d:a8:0e:47:0b:64:e4:27:c5:77:3c:a7:6d:bf: 4b:b9:9f:c9:c0:c3:2e:11:de:b2:e3:c1:33:70:75: 1f:a4:db:54:27:a0:13:0b:fa:17:5d:a5:81:51:ce: 4e:0a:0c:a1:91:9c:e4:b1:14:af:11:a6:30:70:ee: d4:30:99:56:71:d8:9f:7e:82:46:92:ac:e5:33:51: c3:7e:a3:65:78:8e:4f:93:cf:1b:70:2e:f7:cc:1f: f7:77:7a:d2:ce:c2:fe:c2:cc:df:63:68:29:48:53: 38:2b:2d:4a:40:ac:2f:f1:ae:4d:1f:7c:23:bf:1e: 35:e8:3c:cc:a2:08:f6:75:53:dc:73:55:a6:0e:8e: 7e:e7:61:c4:00:e5:6a:23:6b:eb:3d:9d:86:5b:55: 32:31:54:a2:2c:75:d2:98:85:c0:c8:c7:98:98:4c: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:90:13:E1:7D:A7:F1:D6:0F:22:B9:C4:34:75:0A:D2:D4:A8:0A:48 X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ca:d2:d0:5e:c2:22:11:7b:d7:77:89:19:4c:bf:b6:f5:36: 7a:35:cc:12:31:2d:ec:bf:b6:bc:46:81:cb:ae:7a:a8:ff:3b: ac:4c:da:42:fc:cf:8b:4b:bd:f3:21:79:9b:ed:fe:f9:ab:01: 7a:ab:86:dd:56:3b:a5:85:9e:c0:93:b2:b1:2b:06:43:ef:5c: 7e:8a:c8:54:8b:95:21:50:23:42:c2:b6:56:42:d2:be:53:44: 81:b5:86:60:fe:8f:71:1e:61:a2:97:7e:33:4f:71:bb:12:68: 68:1c:33:d1:00:34:62:8f:a7:f7:cf:12:92:68:7c:6a:a9:af: 08:9f:3c:b9:8e:fa:7f:26:2b:f2:7f:4c:d4:7d:cc:dd:a9:d9: 84:85:63:15:78:de:01:a6:4a:b2:56:36:b8:e8:bb:89:5c:65: 0b:cf:b7:fa:38:f7:ca:9b:60:45:39:79:66:75:2b:28:ed:66: 1c:f0:fe:e1:c4:b3:bc:2d:46:5a:a7:77:c9:a8:42:d5:f1:5e: e4:07:44:bc:21:d6:d7:0e:98:5a:1e:ae:44:16:7d:b0:93:3d: 87:9d:f7:09:8f:db:ae:f6:4b:f8:65:51:3c:09:58:11:4d:93: 3c:6a:19:90:57:33:15:16:72:15:69:60:d8:77:ac:4c:57:9c: 1c:2a:9d:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjUwODA4MTkwNDU0WhcNMjUwODE1MTkwNDU0WjAYMRYwFAYD VQQDEw02ODk2NGE1Ny00OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4N0fCUzc6Cxn2yLcaBPTRbICfH8wvxo5DwNyg7+l0XDLyf5aYZxCQPEZPPU WSKERkdi1bVcsfOKgHbO10ZGnv++xDvl2LgvXmVMtxKFbA1Psw3ECSpFhd7zTagO Rwtk5CfFdzynbb9LuZ/JwMMuEd6y48EzcHUfpNtUJ6ATC/oXXaWBUc5OCgyhkZzk sRSvEaYwcO7UMJlWcdiffoJGkqzlM1HDfqNleI5Pk88bcC73zB/3d3rSzsL+wszf Y2gpSFM4Ky1KQKwv8a5NH3wjvx416DzMogj2dVPcc1WmDo5+52HEAOVqI2vrPZ2G W1UyMVSiLHXSmIXAyMeYmEwFyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2QE+F9 p/HWDyK5xDR1CtLUqApIMB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0ZBMy81OTMwNzMzNjFEOUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBE dDJIeG1lWGdXaTBRbU56VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWytLQXsIiEXvXd4kZTL+29TZ6NcwSMS3sv7a8RoHLrnqo/zusTNpC /M+LS73zIXmb7f75qwF6q4bdVjulhZ7Ak7KxKwZD71x+ishUi5UhUCNCwrZWQtK+ U0SBtYZg/o9xHmGil34zT3G7EmhoHDPRADRij6f3zxKSaHxqqa8Inzy5jvp/Jivy f0zUfczdqdmEhWMVeN4BpkqyVja46LuJXGULz7f6OPfKm2BFOXlmdSso7WYc8P7h xLO8LUZap3fJqELV8V7kB0S8IdbXDphaHq5EFn2wkz2HnfcJj9uu9kv4ZVE8CVgR TZM8ahmQVzMVFnIVaWDYd6xMV5wcKp3Q -----END CERTIFICATE-----Generated at Sun Aug 10 03:55:55 2025 by rpki-client