$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json) Hash identifier: ALsP5t6vSHfCZiScflkySB2zG6n4kvnM2jNkdpaptJU= Subject key identifier: 7D:37:16:6F:99:F5:6C:B4:CF:01:A0:31:D3:A6:C5:24:7A:F2:AD:75 Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft Manifest number: 12 Signing time: Sat 09 Aug 2025 08:33:12 +0000 Manifest this update: Sat 09 Aug 2025 08:33:11 +0000 Manifest next update: Sat 16 Aug 2025 08:33:11 +0000 Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: ZaWieeab3XqJkJ9DQ4O/dceGSZSFwb3kRD7RH2ATnSg=) 2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: 92wZUBl6JW7t9Lz6VY8NqyCC30dn+5kR/99dMirbOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Validity Not Before: Aug 9 08:33:11 2025 GMT Not After : Aug 16 08:33:11 2025 GMT Subject: CN=689707c7-e650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:f6:42:12:23:8c:2a:a6:fa:7f:2b:26:ef: f0:de:51:0c:21:34:1b:2d:99:a1:f2:b6:18:16:27: 84:8e:ef:04:81:14:75:61:23:db:a7:de:4b:36:d6: 64:83:77:3c:3d:47:dd:07:b3:0e:13:a5:bf:9b:da: 3c:26:1b:96:71:65:5b:44:c9:3a:3c:46:50:bd:35: 17:3d:3e:9f:14:f3:1d:e3:72:f0:de:a0:87:43:64: cd:fe:e6:50:bf:66:b2:e4:d4:9e:3b:c3:2c:9f:3d: dd:b6:92:f9:68:ec:3a:65:05:59:1f:98:91:93:a8: e4:27:44:bb:3c:7b:c3:7f:9d:8d:46:f1:66:44:90: f5:7a:4e:aa:e3:b4:6d:bf:7d:67:6a:d5:07:65:8a: 54:78:7e:1b:01:6a:bd:a0:4d:9a:2d:28:e1:91:84: f1:ff:c5:5e:ed:8b:9f:e2:b7:42:c8:f2:9a:3b:09: 3b:59:9f:59:11:1d:46:58:5b:99:f3:88:7f:b4:70: 13:de:57:b5:f3:08:31:8a:b1:2a:f3:4e:41:e3:74: 1b:df:b3:0e:fc:3e:53:ec:88:49:32:27:7f:0c:75: 00:26:4a:24:04:97:18:5a:56:19:a9:83:4e:72:92: 06:cc:25:da:ab:d8:6a:82:9e:89:63:3c:3c:6f:88: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:16:6F:99:F5:6C:B4:CF:01:A0:31:D3:A6:C5:24:7A:F2:AD:75 X509v3 Authority Key Identifier: keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:05:fb:97:18:ed:0c:27:38:fb:e0:15:b8:a3:8e:2b:a5:77: c3:e2:7f:d5:25:f7:bd:b2:fb:02:5c:e1:96:0a:c5:8a:22:65: 41:07:f1:6a:97:fb:19:d7:49:88:c8:52:0a:d0:b7:b3:db:28: 33:62:39:41:4b:a3:ef:9b:66:32:ab:16:2a:01:1e:36:c3:c4: 50:a8:cd:dc:5e:d8:72:c2:59:23:7f:e4:68:12:22:d3:d7:e0: 46:ab:0f:a5:cb:c3:52:94:5e:f6:fb:81:af:f3:d5:3b:be:e2: a3:d8:ed:06:4f:5c:8e:7f:40:35:a2:40:29:51:81:5d:2f:58: 34:cd:28:7f:50:a7:44:04:db:29:3b:2f:0c:a2:cd:9c:f7:d7: 8e:cc:67:dd:c5:d6:73:50:25:42:de:d6:cf:89:63:fe:f6:20: 79:51:61:93:28:db:d1:0a:69:fd:d2:58:8b:b6:5b:5c:30:80: c9:9b:62:05:95:23:d5:e2:77:d6:78:24:77:a0:36:99:b5:1f: e4:2b:da:40:49:f8:cb:4b:67:60:25:d7:71:a8:04:34:07:ed: bb:7e:9c:dd:44:95:62:e1:d9:0b:6a:85:7a:25:9a:d5:bf:65: 85:ac:69:cd:7f:0d:44:b0:1d:37:85:9a:f9:4f:e1:29:7f:bf: 1b:bb:9d:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoMUExNkEzOTFEMzI1MTcwQjdCODVDNEJGQzc4NTVBMTc3 RDM0N0I2RTAeFw0yNTA4MDkwODMzMTFaFw0yNTA4MTYwODMzMTFaMBgxFjAUBgNV BAMTDTY4OTcwN2M3LWU2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn+vZCEiOMKqb6fysm7/DeUQwhNBstmaHythgWJ4SO7wSBFHVhI9un3ks21mSD dzw9R90Hsw4Tpb+b2jwmG5ZxZVtEyTo8RlC9NRc9Pp8U8x3jcvDeoIdDZM3+5lC/ ZrLk1J47wyyfPd22kvlo7DplBVkfmJGTqOQnRLs8e8N/nY1G8WZEkPV6TqrjtG2/ fWdq1QdlilR4fhsBar2gTZotKOGRhPH/xV7ti5/it0LI8po7CTtZn1kRHUZYW5nz iH+0cBPeV7XzCDGKsSrzTkHjdBvfsw78PlPsiEkyJ38MdQAmSiQElxhaVhmpg05y kgbMJdqr2GqCnoljPDxviM2nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfTcWb5n1 bLTPAaAx06bFJHryrXUwHwYDVR0jBBgwFoAUGhajkdMlFwt7hcS/x4VaF300e24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzE4ODJEMEU2NUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0N2hjU194NFZhRjMwMGUy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2hhamtkTWxGd3Q3aGNTX3g0VmFGMzAwZTI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzE4ODJEMEU2NUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0 N2hjU194NFZhRjMwMGUyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALAF+5cY7QwnOPvgFbijjiuld8Pif9Ul972y+wJc4ZYKxYoiZUEH8WqX +xnXSYjIUgrQt7PbKDNiOUFLo++bZjKrFioBHjbDxFCozdxe2HLCWSN/5GgSItPX 4EarD6XLw1KUXvb7ga/z1Tu+4qPY7QZPXI5/QDWiQClRgV0vWDTNKH9Qp0QE2yk7 LwyizZz3147MZ93F1nNQJULe1s+JY/72IHlRYZMo29EKaf3SWIu2W1wwgMmbYgWV I9Xid9Z4JHegNpm1H+Qr2kBJ+MtLZ2Al13GoBDQH7bt+nN1ElWLh2QtqhXolmtW/ ZYWsac1/DUSwHTeFmvlP4Sl/vxu7ncU= -----END CERTIFICATE-----Generated at Sun Aug 10 18:54:29 2025 by rpki-client