$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft File: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json) Hash identifier: 1dLOdauJGH6UTP0U4/VPItNi55G15uGjqCMTK/MVi7A= Subject key identifier: 2D:40:B8:77:0D:0E:30:99:E9:60:B3:08:5F:4F:23:91:29:D3:35:29 Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 Certificate issuer: /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft Manifest number: 04DD Signing time: Sun 10 Aug 2025 23:52:56 +0000 Manifest this update: Sun 10 Aug 2025 23:52:55 +0000 Manifest next update: Sun 17 Aug 2025 23:52:55 +0000 Files and hashes: 1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: wMbb4MO65nRWqbLgQ32NVkTmrHxW4pOphYvf5j1ayhg=) 2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: a+Y61sonWEkeUKpiRdmPcvnEh5eS40fnFCOIgfk3fv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Validity Not Before: Aug 10 23:52:55 2025 GMT Not After : Aug 17 23:52:55 2025 GMT Subject: CN=689930d7-00bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:da:9e:27:6b:88:35:71:4d:b9:a8:d4:b6:24: 32:9a:dc:27:96:29:2a:c5:ee:ac:8b:f7:1e:a1:c6: b5:2a:d4:0d:be:bf:01:0c:46:0d:68:b7:c5:f6:83: be:1c:ce:2f:60:0e:96:58:72:ca:70:a3:7e:09:f9: 64:eb:50:50:2e:f2:36:78:b3:4c:d6:cf:cb:98:2a: f1:18:97:5f:0c:e9:ad:3d:97:80:fb:3b:c8:3a:4d: c0:d1:d1:14:05:7c:7d:57:c0:e3:cc:4e:1e:e6:45: c9:0d:fd:73:fa:21:86:3e:a0:23:94:7d:3c:f1:c7: 51:ce:29:fe:e8:3b:f6:26:d4:0e:3a:ed:87:32:ed: b3:b6:f4:20:77:92:3b:b1:7c:1f:de:86:f4:34:93: 88:b6:50:d7:60:90:a5:a1:37:be:41:2e:c5:f0:bb: 1a:e7:1c:5b:b9:fd:eb:f4:ee:96:01:7c:bd:9e:81: 1e:56:57:65:ac:28:73:c4:fe:e7:61:64:4d:58:58: 1e:88:5c:af:c4:d0:75:9a:ed:5a:c1:7d:2a:6d:e8: 7a:99:db:2e:b8:6a:f4:09:b4:43:1f:0c:65:c0:70: cb:3c:ca:1e:d8:b0:94:a0:91:b9:e4:03:92:75:72: 0f:3d:70:24:f5:54:f0:d3:dd:6e:14:4b:a8:cf:ee: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:40:B8:77:0D:0E:30:99:E9:60:B3:08:5F:4F:23:91:29:D3:35:29 X509v3 Authority Key Identifier: keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:17:70:cf:11:97:ae:c6:06:c3:ce:30:1b:b7:ad:e8:6e:e0: 33:67:61:81:fd:c3:b0:f7:39:e9:03:25:b7:81:52:38:7c:dd: 92:15:03:95:e4:40:78:3b:10:45:be:39:70:7d:c3:17:37:6d: 10:7a:80:b4:72:f1:ac:57:e5:01:95:70:6a:5a:4b:27:53:37: 22:e3:6d:b2:20:54:6b:ca:63:79:74:a4:8a:ee:e0:1e:96:4e: 51:ae:ac:67:9b:b6:5a:86:0f:15:53:34:11:3a:b5:3d:74:7a: bc:0e:3d:86:90:1f:82:7c:2f:34:71:6d:1f:80:f3:cc:d4:46: e8:d6:9b:c9:26:22:38:60:ef:c6:b1:32:53:b6:18:55:d1:11: 85:ad:85:40:b9:92:f5:b8:75:14:c3:3c:56:2e:ec:e0:61:23: 75:d1:e9:77:6b:6c:fd:92:28:ec:81:b1:87:a5:ee:a1:24:29: 11:ad:a1:15:39:d0:b9:e9:e8:e0:fd:86:b7:58:b0:6c:d6:58: 13:69:f2:86:9b:9b:1b:92:f7:0f:19:da:0b:a6:01:b2:5a:ec: e0:24:75:99:ed:9f:59:28:31:d9:b6:3f:6a:2a:99:35:9b:70: 38:6c:33:9c:a1:f0:2b:1c:cd:dd:8b:1c:9d:e6:66:44:f3:ec: 58:9c:30:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5MUMxMTAvBgNVBAUTKDFBNjEyMzA3NTY5NEI4MjIxOEFBMkZDNzZGNjE1QjQw MjU1OTYxNTYwHhcNMjUwODEwMjM1MjU1WhcNMjUwODE3MjM1MjU1WjAYMRYwFAYD VQQDEw02ODk5MzBkNy0wMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NqeJ2uINXFNuajUtiQymtwnlikqxe6si/ceoca1KtQNvr8BDEYNaLfF9oO+ HM4vYA6WWHLKcKN+Cflk61BQLvI2eLNM1s/LmCrxGJdfDOmtPZeA+zvIOk3A0dEU BXx9V8DjzE4e5kXJDf1z+iGGPqAjlH088cdRzin+6Dv2JtQOOu2HMu2ztvQgd5I7 sXwf3ob0NJOItlDXYJCloTe+QS7F8Lsa5xxbuf3r9O6WAXy9noEeVldlrChzxP7n YWRNWFgeiFyvxNB1mu1awX0qbeh6mdsuuGr0CbRDHwxlwHDLPMoe2LCUoJG55AOS dXIPPXAk9VTw091uFEuoz+6ZKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1AuHcN DjCZ6WCzCF9PI5Ep0zUpMB8GA1UdIwQYMBaAFBphIwdWlLgiGKovx29hW0AlWWFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkxQy9CQzI2M0E4RTJC RDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVDSVlxaV9IYjJGYlFDVlpZ VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtRWpCMWFVdUNJWXFpX0hiMkZiUUNWWllWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTkxQy9CQzI2M0E4RTJCRDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVD SVlxaV9IYjJGYlFDVlpZVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANF3DPEZeuxgbDzjAbt63obuAzZ2GB/cOw9znpAyW3gVI4fN2SFQOV 5EB4OxBFvjlwfcMXN20QeoC0cvGsV+UBlXBqWksnUzci422yIFRrymN5dKSK7uAe lk5Rrqxnm7Zahg8VUzQROrU9dHq8Dj2GkB+CfC80cW0fgPPM1Ebo1pvJJiI4YO/G sTJTthhV0RGFrYVAuZL1uHUUwzxWLuzgYSN10el3a2z9kijsgbGHpe6hJCkRraEV OdC56ejg/Ya3WLBs1lgTafKGm5sbkvcPGdoLpgGyWuzgJHWZ7Z9ZKDHZtj9qKpk1 m3A4bDOcofArHM3dixyd5mZE8+xYnDA4 -----END CERTIFICATE-----Generated at Wed Aug 13 00:29:31 2025 by rpki-client