$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json) Hash identifier: qyyfkzfyTu6wo3dX724noF1XbDMiHsFqwselmXkETNA= Subject key identifier: BB:3A:33:6A:80:52:27:26:D2:08:CE:E8:37:1C:56:52:CA:D2:00:4B Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft Manifest number: 0374 Signing time: Thu 07 Aug 2025 01:28:05 +0000 Manifest this update: Thu 07 Aug 2025 01:28:05 +0000 Manifest next update: Thu 14 Aug 2025 01:28:05 +0000 Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: 6X3uEXSO1/4hPldPO5smcZIAZ+HVbyRpfbZsrAlh5ng=) 2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: bwcKq1c0r2cXBrd25MLQlHFjWgMS2hGGf/FnvA7qj34=) 3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: M4NylbqODaGIV7jb3azGtcDcoPjVhzDh1zfYrf7L1aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Validity Not Before: Aug 7 01:28:05 2025 GMT Not After : Aug 14 01:28:05 2025 GMT Subject: CN=68940125-f3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:f6:50:60:46:fb:59:3d:c8:3a:c9:c1:1f: 1a:a3:bb:b6:45:12:9f:9e:2f:76:01:a0:25:d9:fc: b1:96:ef:f6:72:ba:94:7d:a7:36:0a:59:30:95:1e: a8:73:77:26:95:95:e7:bf:a6:4b:3a:46:08:0d:80: 6f:81:1c:c0:c0:c4:f7:5d:ab:1f:c2:62:24:b9:54: a6:59:d5:ea:2b:c5:dd:b8:02:af:6b:b0:d0:b7:da: 84:bc:2f:41:c7:e1:a9:c1:2f:bf:a7:60:5e:d3:54: df:0b:59:45:c8:e4:ac:2f:c5:ba:c3:fa:d3:ef:ac: 23:83:88:31:7c:82:1c:1a:eb:22:53:cf:1d:f0:e7: ee:6b:72:18:87:8f:74:01:3a:9c:4f:12:f3:3c:ac: 05:61:29:79:d1:0b:7e:1b:e6:a5:b6:9e:c0:4d:a8: e3:39:70:77:38:da:5e:85:5c:f0:e5:6f:27:05:a3: 10:7b:c2:86:5e:cf:1c:5b:15:14:cf:d2:8f:d0:a6: 89:06:1e:5a:df:db:21:84:fb:e9:0d:ba:2f:be:77: 46:08:de:5d:59:ae:da:ee:aa:2d:ff:94:2d:c1:35: aa:65:3c:13:51:9b:3c:2f:bf:85:fd:ad:15:9e:e4: 54:33:f7:1f:ac:47:7b:88:7c:ca:0e:7c:fb:81:2d: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3A:33:6A:80:52:27:26:D2:08:CE:E8:37:1C:56:52:CA:D2:00:4B X509v3 Authority Key Identifier: keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bd:9e:32:cc:3d:0b:bb:39:2b:a7:cd:e8:97:88:be:86:d3: 5b:36:89:3e:39:f7:82:99:23:ef:b6:4a:ba:c2:8e:2c:dd:d3: 61:38:1b:10:b3:6a:66:05:1a:c4:b2:46:2e:47:d7:07:be:9f: b3:be:42:f8:d0:e3:eb:a3:92:76:27:33:5b:48:c4:54:42:a8: ea:55:10:80:d6:73:23:4d:11:72:b9:eb:08:24:88:f5:e9:f2: 50:2e:f9:30:37:54:33:82:0d:e1:c5:82:97:2a:31:d0:c9:4c: 09:24:e0:50:e3:7b:90:e6:6f:d2:45:8d:e8:b1:74:ab:82:d5: 7f:f4:9f:90:dd:8b:53:48:41:cc:bd:7b:0b:ea:e7:83:96:ee: 52:a3:f9:d3:42:2c:0e:e9:8c:b0:b9:33:b0:b7:16:e0:29:fe: 60:d8:1b:d7:2d:41:16:48:8c:d5:2d:72:0e:c6:36:aa:38:e1: 6c:99:40:b8:19:cc:19:e1:d9:45:41:73:35:1b:77:df:56:8c: 5f:18:f3:a3:f0:99:d5:16:c5:bb:ae:7e:b6:f7:8b:ab:f0:7f: 75:a7:38:a7:69:b0:5c:d1:01:85:88:f5:39:e2:51:22:1b:b3: 43:1b:0d:df:ac:0a:d6:ac:be:0c:a5:b2:db:bb:3c:0c:19:c7: 6b:40:13:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx QUQzNzE0RUMwHhcNMjUwODA3MDEyODA1WhcNMjUwODE0MDEyODA1WjAYMRYwFAYD VQQDEw02ODk0MDEyNS1mM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26b2UGBG+1k9yDrJwR8ao7u2RRKfni92AaAl2fyxlu/2crqUfac2ClkwlR6o c3cmlZXnv6ZLOkYIDYBvgRzAwMT3XasfwmIkuVSmWdXqK8XduAKva7DQt9qEvC9B x+GpwS+/p2Be01TfC1lFyOSsL8W6w/rT76wjg4gxfIIcGusiU88d8Ofua3IYh490 ATqcTxLzPKwFYSl50Qt+G+altp7ATajjOXB3ONpehVzw5W8nBaMQe8KGXs8cWxUU z9KP0KaJBh5a39shhPvpDbovvndGCN5dWa7a7qot/5QtwTWqZTwTUZs8L7+F/a0V nuRUM/cfrEd7iHzKDnz7gS2OowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLs6M2qA Uicm0gjO6DccVlLK0gBLMB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3 QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU1RC80MEU0M0I4MEI3QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hm X0lBUGdQOHBhNnNhMDNGT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbvZ4yzD0Luzkrp83ol4i+htNbNok+OfeCmSPvtkq6wo4s3dNhOBsQ s2pmBRrEskYuR9cHvp+zvkL40OPro5J2JzNbSMRUQqjqVRCA1nMjTRFyuesIJIj1 6fJQLvkwN1Qzgg3hxYKXKjHQyUwJJOBQ43uQ5m/SRY3osXSrgtV/9J+Q3YtTSEHM vXsL6ueDlu5So/nTQiwO6YywuTOwtxbgKf5g2BvXLUEWSIzVLXIOxjaqOOFsmUC4 GcwZ4dlFQXM1G3ffVoxfGPOj8JnVFsW7rn6294ur8H91pzinabBc0QGFiPU54lEi G7NDGw3frArWrL4MpbLbuzwMGcdrQBNr -----END CERTIFICATE-----Generated at Fri Aug 8 20:58:38 2025 by rpki-client