$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: YgkNCRp80R0+dWKA1W+wn8v1GF60/YEzEYGz5Ow4EvI= Subject key identifier: 85:74:57:67:14:7C:5D:0C:00:F1:08:13:58:1C:9D:55:56:D8:55:ED Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: F3 Signing time: Tue 05 Aug 2025 05:44:07 +0000 Manifest this update: Tue 05 Aug 2025 05:44:07 +0000 Manifest next update: Tue 12 Aug 2025 05:44:07 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: Y6dnAgEEhQydUnEZhNzZWTyICVobYQZYGFtujgREQXE=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: kL+8sBegJ1XGnndePATDLqR1ij+F7xDhoLyLkaA0qyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: Aug 5 05:44:07 2025 GMT Not After : Aug 12 05:44:07 2025 GMT Subject: CN=68919a27-a693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:02:36:b7:27:92:f0:24:58:84:74:68:36:01: 35:cb:4b:76:f5:4c:dd:ab:90:36:d2:01:39:97:fc: d3:b0:e4:bf:2c:94:36:93:13:6d:77:88:46:1f:67: 05:6d:7d:dc:90:a0:e5:be:09:9b:97:67:20:d7:17: e5:a6:eb:83:d5:95:d5:bc:1e:43:de:3b:2d:dd:67: f1:c8:5e:07:f3:69:28:35:55:1e:bb:b0:9f:a9:db: 50:0d:c9:a3:46:5c:f4:ec:39:e1:ab:21:13:09:36: 4e:5c:e5:b1:2e:b7:6b:18:66:03:15:ba:1c:59:4b: 47:35:bb:a0:5e:ad:cc:3d:65:a7:15:d1:c4:99:85: f1:c2:33:7a:bd:1e:09:0d:54:71:0b:6d:64:2c:ee: b3:88:ff:69:68:58:fb:9b:be:2a:b6:ac:d4:f3:0a: 11:a9:ed:45:77:9d:f0:c4:56:3b:eb:18:ef:cd:d4: 49:d3:72:e2:7e:af:d1:4f:4d:d1:95:67:70:03:ee: 0d:9d:62:7a:19:9d:be:42:f5:36:16:af:1b:2c:a0: c9:32:ba:01:02:f6:e7:4b:4d:3d:9b:f3:ad:5a:f7: 66:5d:f3:56:a4:f1:b5:6f:81:27:7e:65:e0:01:ef: ed:f8:36:74:5f:27:48:86:64:f6:d5:3c:6c:12:ed: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:74:57:67:14:7C:5D:0C:00:F1:08:13:58:1C:9D:55:56:D8:55:ED X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:50:d4:2d:ae:6e:9a:e4:1e:6f:5a:33:ae:41:d2:c1:bb:e6: fe:14:9f:14:10:50:e2:67:7b:83:42:e4:33:3a:4a:ea:3a:98: 9e:0a:af:e2:1a:50:df:42:f6:cd:75:9f:ee:25:95:5f:c6:66: e0:be:7d:3c:3a:4c:5b:76:c6:b5:81:ab:b6:69:55:51:26:80: 18:d4:0f:37:ba:a7:af:ed:f5:af:a9:2e:0f:7d:9e:2e:a1:8d: 14:42:f2:56:62:a3:86:f5:53:b2:10:6f:b0:32:28:1d:58:a3: db:f1:47:41:17:df:41:a7:13:d1:2c:dd:a9:65:70:cf:be:df: 8c:22:ce:b6:96:66:85:ce:7c:5d:38:02:23:ba:8d:76:7d:1f: 7b:d5:c7:0f:64:67:59:f4:e2:3e:fe:d1:1f:2f:a8:19:48:b2: d5:69:97:6b:35:7c:60:ec:ec:73:3f:48:32:18:33:d7:e5:8d: e4:0e:07:54:d9:22:af:73:c5:65:66:33:87:92:5a:9c:9c:4d: bc:40:82:36:94:c7:5b:a3:b0:8d:32:2b:62:4c:23:0c:53:38: 83:ee:b3:d6:c2:d9:48:14:25:ae:d8:95:53:f2:46:eb:48:e4: 79:76:6a:ee:4e:1c:64:ef:35:16:1c:62:dd:17:7c:ed:ed:e5: 23:85:37:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBNDgxMTAvBgNVBAUTKDE5Nzk0RjNDQUEzNzU1MjdCQTBGRDMzNDQ4MEM3RTAz MzhFNzlFMkEwHhcNMjUwODA1MDU0NDA3WhcNMjUwODEyMDU0NDA3WjAYMRYwFAYD VQQDEw02ODkxOWEyNy1hNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QI2tyeS8CRYhHRoNgE1y0t29Uzdq5A20gE5l/zTsOS/LJQ2kxNtd4hGH2cF bX3ckKDlvgmbl2cg1xflpuuD1ZXVvB5D3jst3WfxyF4H82koNVUeu7CfqdtQDcmj Rlz07DnhqyETCTZOXOWxLrdrGGYDFbocWUtHNbugXq3MPWWnFdHEmYXxwjN6vR4J DVRxC21kLO6ziP9paFj7m74qtqzU8woRqe1Fd53wxFY76xjvzdRJ03Lifq/RT03R lWdwA+4NnWJ6GZ2+QvU2Fq8bLKDJMroBAvbnS009m/OtWvdmXfNWpPG1b4EnfmXg Ae/t+DZ0XydIhmT21TxsEu3mLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIV0V2cU fF0MAPEIE1gcnVVW2FXtMB8GA1UdIwQYMBaAFBl5TzyqN1Unug/TNEgMfgM4554q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkE0OC9COUUyQUNBMEZF NTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZTZTZEOU0wU0F4LUF6am5u aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZT ZTZEOU0wU0F4LUF6am5uaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhUNQtrm6a5B5vWjOuQdLBu+b+FJ8UEFDiZ3uDQuQzOkrqOpieCq/i GlDfQvbNdZ/uJZVfxmbgvn08Okxbdsa1gau2aVVRJoAY1A83uqev7fWvqS4PfZ4u oY0UQvJWYqOG9VOyEG+wMigdWKPb8UdBF99BpxPRLN2pZXDPvt+MIs62lmaFznxd OAIjuo12fR971ccPZGdZ9OI+/tEfL6gZSLLVaZdrNXxg7OxzP0gyGDPX5Y3kDgdU 2SKvc8VlZjOHklqcnE28QII2lMdbo7CNMitiTCMMUziD7rPWwtlIFCWu2JVT8kbr SOR5dmruThxk7zUWHGLdF3zt7eUjhTfd -----END CERTIFICATE-----Generated at Wed Aug 6 09:29:57 2025 by rpki-client