$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft File: Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json) Hash identifier: BkwC1vRsdHrjwiZAR5uWzcy39J5BC2vIhLB29NE/6aM= Subject key identifier: CC:EB:DC:2C:F7:DB:9B:EB:1D:3A:1C:C2:5B:69:B0:FB:A7:8B:6F:16 Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD Certificate issuer: /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft Manifest number: 0BE9 Signing time: Mon 04 Aug 2025 19:04:30 +0000 Manifest this update: Mon 04 Aug 2025 19:04:29 +0000 Manifest next update: Mon 11 Aug 2025 19:04:29 +0000 Files and hashes: 1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: y81sshnqId3cr78lx8KgylZ+/Jkcc9bGMt6KACZI2GI=) 2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: 4J/p4/at9N0h24OffWZyBK2PKe4zkvNfclH1N1tyx/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Validity Not Before: Aug 4 19:04:29 2025 GMT Not After : Aug 11 19:04:29 2025 GMT Subject: CN=6891043d-1914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bf:c2:e6:2f:2a:24:19:78:26:af:23:e0:a1: 32:e2:be:68:20:76:89:3f:50:3a:b4:01:54:9f:2f: 5d:e6:f0:3b:b5:59:26:eb:61:11:5d:70:df:e3:c3: 82:c2:e6:16:b0:e9:ae:97:e5:55:d3:97:66:40:32: 3b:2c:1e:b1:af:e7:64:03:a4:47:62:30:9b:66:43: 5f:97:47:11:7d:da:7a:d3:a3:0b:de:df:e4:d5:b2: f7:61:ef:e4:c5:c1:33:72:b5:a5:ca:97:3f:df:e7: 35:1d:f1:a6:18:e4:d2:04:ce:a0:c8:9c:cb:ff:79: d6:f4:37:df:f6:e3:8a:3d:5f:ac:74:6d:08:71:24: 2c:5c:39:77:bc:91:ba:77:a5:38:3f:bd:d3:83:7f: fd:da:ee:e5:a9:52:e1:a3:90:8f:b3:85:e0:65:21: 1c:99:98:16:3c:51:19:17:b9:a8:f2:f4:6d:d4:f9: ce:22:9b:50:0b:13:a1:81:8d:b5:d2:6a:37:c3:88: 7e:e3:a4:96:d8:94:04:5c:5b:91:e6:7f:80:6b:f3: ba:f8:68:8d:90:ae:f1:39:1c:24:2e:6c:2e:63:7f: 46:48:9f:47:0c:60:b5:95:a8:ae:91:05:d2:19:21: f9:6b:cc:d1:1d:02:57:68:ed:33:93:59:27:78:dc: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EB:DC:2C:F7:DB:9B:EB:1D:3A:1C:C2:5B:69:B0:FB:A7:8B:6F:16 X509v3 Authority Key Identifier: keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4e:ed:62:18:61:20:f6:4e:c4:0f:54:6b:85:aa:79:48:68: a1:c8:fb:8a:25:c2:39:f3:1f:09:54:2d:01:4b:47:aa:b0:4b: 6d:dd:1a:d4:67:1e:95:12:53:a0:33:56:66:41:c4:d2:39:59: 2d:03:4f:f5:19:a8:2a:56:a8:03:04:72:42:5b:a7:4f:a2:58: c2:43:4c:48:f8:65:90:3a:f3:8c:25:b2:92:e1:c8:f1:ce:70: 73:be:c9:30:ea:d4:6c:90:70:f0:33:be:6a:6a:62:ab:93:bc: 1a:b9:17:58:84:23:41:ab:5a:6b:6b:66:8e:77:39:5f:e9:6e: 59:92:ac:9b:eb:29:74:98:8d:ff:31:28:18:93:fe:d2:20:bc: 1c:c9:84:8a:e7:12:5b:f0:86:1e:08:81:e4:56:b2:ac:79:b7: 33:e6:61:03:a5:1f:bc:e2:85:2c:10:75:94:e5:c7:97:09:e8: e2:a4:d8:5b:a2:a9:68:bf:f6:9e:da:cf:6a:31:ee:b3:1f:8e: 85:eb:34:09:ec:51:3b:71:b1:e3:9b:1a:7f:4d:f1:7c:71:8c: d4:14:3e:b3:8e:b0:56:a1:da:fe:3d:aa:d2:66:0f:30:03:84: 2a:9e:77:f3:74:f6:b2:e1:f0:9c:24:83:97:de:f6:80:2f:f0: ad:76:76:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwM0ExMTAvBgNVBAUTKDFBN0U0Q0E0QUExQzIyNzIyNTc3Mjk2QUIwNTc4M0Q3 NTVCMTE2QkQwHhcNMjUwODA0MTkwNDI5WhcNMjUwODExMTkwNDI5WjAYMRYwFAYD VQQDEw02ODkxMDQzZC0xOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5b/C5i8qJBl4Jq8j4KEy4r5oIHaJP1A6tAFUny9d5vA7tVkm62ERXXDf48OC wuYWsOmul+VV05dmQDI7LB6xr+dkA6RHYjCbZkNfl0cRfdp606ML3t/k1bL3Ye/k xcEzcrWlypc/3+c1HfGmGOTSBM6gyJzL/3nW9Dff9uOKPV+sdG0IcSQsXDl3vJG6 d6U4P73Tg3/92u7lqVLho5CPs4XgZSEcmZgWPFEZF7mo8vRt1PnOIptQCxOhgY21 0mo3w4h+46SW2JQEXFuR5n+Aa/O6+GiNkK7xORwkLmwuY39GSJ9HDGC1laiukQXS GSH5a8zRHQJXaO0zk1kneNweOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzr3Cz3 25vrHTocwltpsPuni28WMB8GA1UdIwQYMBaAFBp+TKSqHCJyJXcparBXg9dVsRa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAzQS84Q0JEOTc4NjFF NTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0luSWxkeWxxc0ZlRDExV3hG cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0duNU1wS29jSW5JbGR5bHFzRmVEMTFXeEZyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAzQS84Q0JEOTc4NjFFNTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0lu SWxkeWxxc0ZlRDExV3hGcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMTu1iGGEg9k7ED1Rrhap5SGihyPuKJcI58x8JVC0BS0eqsEtt3RrU Zx6VElOgM1ZmQcTSOVktA0/1GagqVqgDBHJCW6dPoljCQ0xI+GWQOvOMJbKS4cjx znBzvskw6tRskHDwM75qamKrk7wauRdYhCNBq1pra2aOdzlf6W5Zkqyb6yl0mI3/ MSgYk/7SILwcyYSK5xJb8IYeCIHkVrKsebcz5mEDpR+84oUsEHWU5ceXCejipNhb oqlov/ae2s9qMe6zH46F6zQJ7FE7cbHjmxp/TfF8cYzUFD6zjrBWodr+ParSZg8w A4QqnnfzdPay4fCcJIOX3vaAL/CtdnYc -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:43 2025 by rpki-client