$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: 9EwFQrJQoL84bcRSPT+SSsInU/e1R19iQc0hDTv+nhk= Subject key identifier: 70:CF:B5:EF:41:30:00:5E:81:42:51:9D:44:35:7A:7D:73:86:9D:66 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 0859 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 0850 Signing time: Wed 06 Aug 2025 21:01:13 +0000 Manifest this update: Wed 06 Aug 2025 21:01:13 +0000 Manifest next update: Wed 13 Aug 2025 21:01:13 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: 9BbYeZy/Um6nZ9tcu158aEaWjmfSv95jaEDmn5WOwbg=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: UaoBno6EmWaBFcw5TBVRPYFiWGMBoSDzhu3pQGtDygg=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: 4fGi9gJaC/oEbDcGBoBEInsd7LIWjlkoV1ytai5f/QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2137 (0x859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Aug 6 21:01:13 2025 GMT Not After : Aug 13 21:01:13 2025 GMT Subject: CN=6893c299-414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:14:e0:45:f6:a9:3b:1f:38:de:59:46:ff: 67:ba:fa:de:f1:76:27:8c:5f:ad:c5:54:1c:f3:f3: c6:82:a6:fe:73:6e:ea:df:bb:73:a5:8b:14:9c:e7: 68:d4:2b:68:95:26:9c:54:d6:8a:bb:9f:12:41:d6: 91:97:c9:1b:34:b1:4c:aa:47:75:dd:ea:ff:6e:ed: 6f:d0:5d:43:7a:8b:77:43:d7:44:c5:2e:29:60:13: bb:d4:1c:cf:96:0a:c1:5e:33:8d:08:57:cc:61:8e: 50:1b:b4:33:35:78:f0:01:5a:2c:c2:7d:40:2f:18: 7d:09:62:4b:e0:ad:a5:63:2c:65:91:5f:50:21:6c: 13:5b:5e:7f:7c:25:99:38:54:38:fb:14:37:41:4e: 43:f4:57:f2:51:d3:94:80:87:a3:5a:1b:4a:bc:b4: d7:f7:9f:98:f4:6a:c8:d4:d4:7c:4d:d7:8c:b1:96: 07:48:5a:0c:cf:85:fd:1b:20:28:87:67:3f:09:c6: 78:60:a5:f3:a1:7d:6e:0f:b4:81:c9:2a:3d:da:13: bf:b0:06:05:f0:b5:b9:0f:56:31:55:09:07:08:de: ae:98:d6:bb:73:de:b1:21:69:2d:45:22:38:74:bf: c7:d9:53:e5:f5:7c:20:8d:9f:4a:d8:04:7f:c4:47: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:B5:EF:41:30:00:5E:81:42:51:9D:44:35:7A:7D:73:86:9D:66 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0a:63:c0:59:99:4c:63:29:ca:2c:50:d7:0a:e3:11:3a:ed: c5:1c:a4:52:92:fd:bc:4f:39:8b:a6:f1:37:76:3a:8b:66:19: ee:b9:60:81:25:bb:e3:7f:c6:1c:b7:f7:d1:a3:3b:a0:c4:79: a3:48:b2:6e:73:98:d9:a7:96:ea:49:c1:03:97:2c:0d:f7:66: 36:d3:52:67:66:c4:b5:be:03:97:9b:9b:58:19:3d:f7:2c:8e: ad:a6:71:b7:47:36:14:c6:eb:a7:b4:49:e0:bc:fe:81:6f:18: c1:e2:c6:4f:ba:46:df:19:84:78:3d:cc:46:2a:d3:17:f9:ed: b7:ff:11:46:ee:c0:9b:cf:41:8e:fe:d5:a4:c8:1f:14:1e:af: 47:2e:75:2b:26:8b:39:6f:af:c5:f2:ae:8e:d5:2c:5f:e2:29: cf:ff:37:63:8a:55:1a:0c:de:cd:e9:f0:5b:68:8c:2d:97:33: 09:e0:bc:0d:44:34:f0:97:a4:de:1b:72:10:ef:fb:18:81:e7: 43:51:a7:46:47:9e:33:e4:09:6b:77:0a:e1:96:3c:87:29:8e: dc:fd:de:11:a5:5b:35:2e:24:08:7e:1b:a4:9f:c4:2e:2a:20: 6f:e9:db:69:a4:8b:e0:c7:11:67:43:0e:fa:c8:96:84:5f:f3: 7d:a0:b4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwODA2MjEwMTEzWhcNMjUwODEzMjEwMTEzWjAYMRYwFAYD VQQDEw02ODkzYzI5OS00MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYUU4EX2qTsfON5ZRv9nuvre8XYnjF+txVQc8/PGgqb+c27q37tzpYsUnOdo 1CtolSacVNaKu58SQdaRl8kbNLFMqkd13er/bu1v0F1Deot3Q9dExS4pYBO71BzP lgrBXjONCFfMYY5QG7QzNXjwAVoswn1ALxh9CWJL4K2lYyxlkV9QIWwTW15/fCWZ OFQ4+xQ3QU5D9FfyUdOUgIejWhtKvLTX95+Y9GrI1NR8TdeMsZYHSFoMz4X9GyAo h2c/CcZ4YKXzoX1uD7SBySo92hO/sAYF8LW5D1YxVQkHCN6umNa7c96xIWktRSI4 dL/H2VPl9XwgjZ9K2AR/xEc9BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDPte9B MABegUJRnUQ1en1zhp1mMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSCmPAWZlMYynKLFDXCuMROu3FHKRSkv28TzmLpvE3djqLZhnuuWCB Jbvjf8Yct/fRozugxHmjSLJuc5jZp5bqScEDlywN92Y201JnZsS1vgOXm5tYGT33 LI6tpnG3RzYUxuuntEngvP6BbxjB4sZPukbfGYR4PcxGKtMX+e23/xFG7sCbz0GO /tWkyB8UHq9HLnUrJos5b6/F8q6O1Sxf4inP/zdjilUaDN7N6fBbaIwtlzMJ4LwN RDTwl6TeG3IQ7/sYgedDUadGR54z5AlrdwrhljyHKY7c/d4RpVs1LiQIfhukn8Qu KiBv6dtppIvgxxFnQw76yJaEX/N9oLSq -----END CERTIFICATE-----Generated at Fri Aug 8 13:04:13 2025 by rpki-client