$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json) Hash identifier: KjCOvjBnJWSnpsb5OgkjkCV5YKj0ZRglurL9gLmVqkg= Subject key identifier: 5B:91:03:D5:E1:84:D5:1A:81:B4:35:46:B8:D6:EF:25:D1:6E:DD:5B Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft Manifest number: 1948 Signing time: Sun 10 Aug 2025 17:27:12 +0000 Manifest this update: Sun 10 Aug 2025 17:27:12 +0000 Manifest next update: Sun 17 Aug 2025 17:27:12 +0000 Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: WtVp2Yyb1tSOqGvHXqC3NhXuoe+y7tsUjIS+rJvqtD8=) 2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: i9BL1rlX0oUvps1Va07G59cz+t1l/lyXzZ/KRVLbWW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Validity Not Before: Aug 10 17:27:12 2025 GMT Not After : Aug 17 17:27:12 2025 GMT Subject: CN=6898d670-8ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:4a:c6:d3:7f:29:c6:b3:76:97:1f:9f:7b: a7:a2:70:5b:6b:22:d6:50:1c:7b:11:ba:5c:e5:c8: d4:50:de:7e:73:60:e8:d4:72:c9:37:df:08:14:77: bf:2f:1b:9f:41:ac:18:3b:af:50:70:0b:0b:83:f4: 89:a4:43:13:c2:ec:4e:67:f7:84:9e:0b:19:79:7e: 57:73:77:8c:be:8b:5b:d5:09:1e:8c:a7:f3:d8:54: 55:2d:e8:ca:7a:5f:20:50:4e:f0:c6:d7:1c:7d:e8: 95:28:06:4d:cf:93:c2:11:04:de:8b:ad:ee:19:3a: da:04:79:b6:6e:23:8c:ea:9c:bf:54:f4:b7:94:5d: 8b:f3:61:60:d8:2c:6f:e4:66:77:bf:da:17:88:3d: 2d:ec:76:5f:5a:68:61:3f:ff:4f:a5:25:7c:2f:ac: ee:ce:0d:9f:8f:98:ea:0e:bb:e4:cf:a7:4d:74:7e: 44:db:da:17:85:2e:02:2d:3f:40:70:31:a6:7e:4c: 4c:13:e6:4a:36:8b:81:7f:92:d2:a4:7d:66:40:c1: 99:fa:e5:ea:e2:87:87:3d:2b:0d:0a:29:78:ee:a0: 84:00:29:62:bd:72:03:03:54:22:81:7b:96:7f:43: d3:dc:54:f6:81:d0:4f:0d:1e:50:23:3f:14:11:ee: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:91:03:D5:E1:84:D5:1A:81:B4:35:46:B8:D6:EF:25:D1:6E:DD:5B X509v3 Authority Key Identifier: keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:45:96:b7:7a:de:db:f7:53:0c:fe:ad:97:e7:0c:b3:83:70: 57:68:dc:b4:8e:46:23:5d:a5:5a:a0:64:b6:9a:0c:39:f2:49: 7a:2a:fe:57:d3:56:af:5c:ea:0e:9e:91:0f:00:1a:e5:00:a7: 60:38:63:fe:ce:61:b3:b7:af:56:49:87:3c:07:cd:7b:af:49: 13:f8:49:0f:a1:a9:b4:5a:eb:87:9c:d8:e1:dd:b0:cd:db:69: 0e:3a:80:32:af:88:09:ff:53:41:b7:cc:b5:c5:72:f2:2e:4b: e6:52:15:40:a0:09:80:bc:14:45:76:af:54:91:b6:8c:fc:6a: 79:82:30:97:0f:d2:d1:04:49:37:a9:c5:9e:65:4c:c1:e3:06: 48:4c:a0:4e:91:b1:8e:94:b1:38:a7:b1:05:f6:ad:9c:c2:88: 65:54:eb:65:21:04:0f:2b:e0:78:84:09:01:43:63:df:d4:b7: 16:60:26:ac:15:dd:51:28:de:71:ba:4d:6c:a2:31:d4:a2:b0: 7a:3f:74:d7:e3:fb:02:de:39:4c:ab:46:a9:f3:62:4d:31:b2: c9:ee:05:82:09:1c:16:47:99:22:ac:6e:89:b0:ce:37:fd:78: b5:a0:9a:53:60:44:2d:43:2e:95:84:1b:e4:09:eb:23:cf:98: 02:3c:3b:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3 MDNENEY3NDUwHhcNMjUwODEwMTcyNzEyWhcNMjUwODE3MTcyNzEyWjAYMRYwFAYD VQQDEw02ODk4ZDY3MC04ZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5NKxtN/Kcazdpcfn3unonBbayLWUBx7Ebpc5cjUUN5+c2Do1HLJN98IFHe/ LxufQawYO69QcAsLg/SJpEMTwuxOZ/eEngsZeX5Xc3eMvotb1QkejKfz2FRVLejK el8gUE7wxtccfeiVKAZNz5PCEQTei63uGTraBHm2biOM6py/VPS3lF2L82Fg2Cxv 5GZ3v9oXiD0t7HZfWmhhP/9PpSV8L6zuzg2fj5jqDrvkz6dNdH5E29oXhS4CLT9A cDGmfkxME+ZKNouBf5LSpH1mQMGZ+uXq4oeHPSsNCil47qCEAClivXIDA1QigXuW f0PT3FT2gdBPDR5QIz8UEe4VWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuRA9Xh hNUagbQ1RrjW7yXRbt1bMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VB bGtQUTZOMktRalZ3UFU5MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrRZa3et7b91MM/q2X5wyzg3BXaNy0jkYjXaVaoGS2mgw58kl6Kv5X 01avXOoOnpEPABrlAKdgOGP+zmGzt69WSYc8B817r0kT+EkPoam0WuuHnNjh3bDN 22kOOoAyr4gJ/1NBt8y1xXLyLkvmUhVAoAmAvBRFdq9UkbaM/Gp5gjCXD9LRBEk3 qcWeZUzB4wZITKBOkbGOlLE4p7EF9q2cwohlVOtlIQQPK+B4hAkBQ2Pf1LcWYCas Fd1RKN5xuk1sojHUorB6P3TX4/sC3jlMq0ap82JNMbLJ7gWCCRwWR5kirG6JsM43 /Xi1oJpTYEQtQy6VhBvkCesjz5gCPDsd -----END CERTIFICATE-----Generated at Mon Aug 11 04:25:24 2025 by rpki-client