$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: hpuhTLV6bNremMrYWHX9TrrITI4oNfaKHJ8iRyDgt7Y= Subject key identifier: 69:08:87:64:01:E7:5D:64:0D:9F:48:2A:41:23:A4:48:52:11:3A:66 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0B86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0B80 Signing time: Tue 12 Aug 2025 19:14:31 +0000 Manifest this update: Tue 12 Aug 2025 19:14:31 +0000 Manifest next update: Tue 19 Aug 2025 19:14:31 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: khQMfo90IeAZnXERz8b27sKQ6prQHIpSX4wM8LPKy7g=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2950 (0xb86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Aug 12 19:14:31 2025 GMT Not After : Aug 19 19:14:31 2025 GMT Subject: CN=689b9297-bd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:85:61:a6:3f:61:e4:fc:11:be:4a:0a:64: cd:a7:a3:46:11:c3:a1:c3:bd:2d:03:19:4f:27:bd: 5c:a0:17:4e:0b:a9:b7:21:11:c8:a4:59:98:48:8c: a7:7c:b6:9f:13:c6:52:bc:c0:16:fc:2d:8c:00:93: aa:6a:14:ba:86:6a:1f:ad:4a:4f:34:f9:ae:bb:f6: 2f:4b:47:bc:cd:4f:2e:67:10:8b:6d:29:0d:c3:77: 9e:ea:51:01:62:3d:75:66:52:7f:a7:94:e4:d6:d5: 8e:52:97:64:dd:be:3a:39:28:37:f1:c9:e8:b0:4f: e5:aa:60:a3:7b:32:bb:9e:32:c0:c3:00:3b:39:df: 3f:c5:34:eb:44:a9:23:25:cf:8d:79:86:f5:be:f9: 8b:58:38:e2:e5:a7:cf:da:20:07:c4:59:31:f7:1c: 8c:a1:19:db:a8:09:ae:d5:7b:ee:da:04:af:b8:00: 33:3a:11:47:33:b8:22:88:c6:28:52:12:25:46:75: 61:26:ff:fa:6c:01:63:b0:ca:bc:23:30:44:06:10: 4e:17:a5:e2:d2:d4:c8:8d:82:1c:16:77:eb:06:cf: 05:0f:45:0c:f6:73:d2:e4:b1:86:46:01:5c:5e:7d: 83:03:b3:f4:7f:2f:ad:fb:5a:31:9b:32:62:ef:b1: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:08:87:64:01:E7:5D:64:0D:9F:48:2A:41:23:A4:48:52:11:3A:66 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:82:dc:db:0b:75:bf:88:23:27:b0:a1:05:92:02:94:ea:ad: 47:96:2e:13:8d:4c:98:51:92:99:a1:3b:38:38:8b:f2:97:b1: 38:25:90:f4:45:6f:5d:59:07:0e:15:9d:e8:1d:f2:67:1d:90: 5c:92:3e:62:4b:d7:24:f0:44:ee:10:bd:77:d1:6c:48:40:c3: 34:80:e4:60:7c:9b:f7:59:12:e8:eb:7a:76:12:87:85:f1:59: 0e:12:98:6a:cb:52:36:aa:8b:50:ca:95:75:b9:d7:b1:e2:b2: 37:53:92:87:17:23:ce:9f:64:b0:2b:a5:40:1d:5b:ae:f1:44: 76:9a:f4:a4:b2:14:bd:a5:41:b7:0d:41:61:23:40:b1:e0:b8: 05:a9:6d:5a:24:fe:98:06:ac:9c:8f:be:d7:f9:64:0a:c0:6b: 41:62:a7:16:d7:cc:45:4b:73:4d:60:13:47:7f:a1:9c:7e:0a: f1:36:6e:e6:52:78:0c:35:6a:44:e0:37:bf:88:e6:3a:01:f6: 31:c4:b0:88:d5:f3:79:b9:cf:26:23:48:51:10:cd:9b:01:19: 60:20:6e:c9:6d:cc:a3:de:31:d4:31:c8:16:6d:81:a2:34:85: 93:e7:43:c1:0b:af:22:72:2a:97:be:59:b0:9a:fe:1e:7a:ef: 30:21:1d:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUwODEyMTkxNDMxWhcNMjUwODE5MTkxNDMxWjAYMRYwFAYD VQQDEw02ODliOTI5Ny1iZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39aFYaY/YeT8Eb5KCmTNp6NGEcOhw70tAxlPJ71coBdOC6m3IRHIpFmYSIyn fLafE8ZSvMAW/C2MAJOqahS6hmofrUpPNPmuu/YvS0e8zU8uZxCLbSkNw3ee6lEB Yj11ZlJ/p5Tk1tWOUpdk3b46OSg38cnosE/lqmCjezK7njLAwwA7Od8/xTTrRKkj Jc+NeYb1vvmLWDji5afP2iAHxFkx9xyMoRnbqAmu1Xvu2gSvuAAzOhFHM7giiMYo UhIlRnVhJv/6bAFjsMq8IzBEBhBOF6Xi0tTIjYIcFnfrBs8FD0UM9nPS5LGGRgFc Xn2DA7P0fy+t+1oxmzJi77EaiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkIh2QB 511kDZ9IKkEjpEhSETpmMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsgtzbC3W/iCMnsKEFkgKU6q1Hli4TjUyYUZKZoTs4OIvyl7E4JZD0 RW9dWQcOFZ3oHfJnHZBckj5iS9ck8ETuEL130WxIQMM0gORgfJv3WRLo63p2EoeF 8VkOEphqy1I2qotQypV1udex4rI3U5KHFyPOn2SwK6VAHVuu8UR2mvSkshS9pUG3 DUFhI0Cx4LgFqW1aJP6YBqycj77X+WQKwGtBYqcW18xFS3NNYBNHf6GcfgrxNm7m UngMNWpE4De/iOY6AfYxxLCI1fN5uc8mI0hREM2bARlgIG7Jbcyj3jHUMcgWbYGi NIWT50PBC68iciqXvlmwmv4eeu8wIR2R -----END CERTIFICATE-----Generated at Tue Aug 12 22:50:46 2025 by rpki-client