$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json) Hash identifier: 8y0X03IVm+hVQyZ1ei75PQRIrPb6+l27DEi4P/WZxog= Subject key identifier: 14:AF:14:90:30:43:28:9D:34:04:6A:47:AB:1C:00:A3:90:F7:A8:9B Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Certificate serial: 2291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft Manifest number: 2288 Signing time: Wed 06 Aug 2025 15:56:01 +0000 Manifest this update: Wed 06 Aug 2025 15:56:00 +0000 Manifest next update: Wed 13 Aug 2025 15:56:00 +0000 Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: +l9DBvFe1h6XkDVmL1nU+sveLzScXy8RSD3O8IIBdK4=) 2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=) 3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=) 4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8849 (0x2291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Validity Not Before: Aug 6 15:56:00 2025 GMT Not After : Aug 13 15:56:00 2025 GMT Subject: CN=68937b10-8b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:4b:dc:8c:0f:30:c1:55:86:a7:07:56:ed: 75:50:53:5d:6c:3a:7a:d4:11:33:84:a9:20:08:cf: 5a:9b:f3:da:66:87:d3:37:f3:c8:96:57:b5:ca:4c: 27:d4:6a:4b:52:81:09:f6:11:53:0a:1d:ed:8c:b9: 27:4b:a1:39:df:23:8d:1f:3e:1e:78:5b:b2:36:0c: b3:e6:d1:21:f3:8f:3f:5d:36:17:39:f9:be:2f:1e: 5e:99:de:a5:dd:b0:14:a6:74:3f:38:eb:fd:41:9b: 98:ad:9e:21:f6:e6:37:99:8a:e9:9a:6b:9f:8e:43: 37:73:cb:e7:cd:31:42:44:96:1e:c2:bf:61:96:05: a8:00:0b:b7:57:aa:7e:e8:ff:88:fa:62:ce:45:2e: c7:78:bc:f8:0b:e4:c8:b2:d4:5e:b2:3e:84:0f:2b: 90:a8:60:c5:50:1f:cc:6c:b5:30:22:d1:67:21:16: 22:36:2b:00:28:a8:5b:0c:c4:5d:42:38:f3:f8:cb: 3c:20:8f:18:b9:66:c3:c0:f8:22:b8:8c:91:d4:da: 00:f7:a8:7f:46:4e:43:d8:ee:63:56:1d:dd:66:be: 46:d4:44:07:20:77:a7:c6:a6:e5:8d:89:78:6f:2c: 0c:a1:c2:08:0b:91:a4:90:62:3f:bc:f2:17:91:cf: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AF:14:90:30:43:28:9D:34:04:6A:47:AB:1C:00:A3:90:F7:A8:9B X509v3 Authority Key Identifier: keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0d:0f:f3:1f:b6:5a:82:49:0e:a6:4c:18:e6:8c:11:a5:83: 23:28:7c:6d:cb:28:0b:ee:3f:37:2e:24:65:0f:98:05:24:5d: f5:8f:de:99:9a:65:4a:68:00:ee:e2:03:36:42:71:50:10:ea: 90:b8:3e:b6:22:9a:0c:1b:71:8f:b7:4c:ab:bb:17:4d:fd:32: 10:a3:a5:aa:d4:d6:3f:b7:62:48:80:7d:4c:13:38:7a:b6:3b: f9:28:e4:14:e4:42:65:f6:29:6c:49:97:5a:20:ab:dc:58:ce: ca:ae:35:53:5d:31:ff:aa:5a:b3:8a:73:55:4f:ec:cb:29:84: f8:53:d4:15:4b:d0:b3:6f:16:1d:d2:38:4c:e1:40:b0:9b:2e: d5:87:98:23:01:88:86:f9:92:40:6e:c5:7e:5d:b6:e5:ff:08: f0:b7:df:85:a9:f5:36:c7:13:9a:e4:7c:b4:fb:5a:ab:b7:05: b1:f9:66:98:da:6d:5b:bc:19:d3:8b:88:80:96:69:ce:1c:ce: 4b:9d:a7:6b:72:d7:d9:91:94:f4:65:d2:73:98:af:22:aa:ad: 52:3e:3f:54:01:6d:1e:4f:01:bc:ae:72:ee:19:a1:49:d1:6b: f4:53:a3:c6:0f:3c:e3:a1:69:61:6e:e1:35:e2:22:84:2b:53: 8f:0d:14:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0 QTFGOUI1MUQwHhcNMjUwODA2MTU1NjAwWhcNMjUwODEzMTU1NjAwWjAYMRYwFAYD VQQDEw02ODkzN2IxMC04YjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7ZL3IwPMMFVhqcHVu11UFNdbDp61BEzhKkgCM9am/PaZofTN/PIlle1ykwn 1GpLUoEJ9hFTCh3tjLknS6E53yONHz4eeFuyNgyz5tEh848/XTYXOfm+Lx5emd6l 3bAUpnQ/OOv9QZuYrZ4h9uY3mYrpmmufjkM3c8vnzTFCRJYewr9hlgWoAAu3V6p+ 6P+I+mLORS7HeLz4C+TIstResj6EDyuQqGDFUB/MbLUwItFnIRYiNisAKKhbDMRd Qjjz+Ms8II8YuWbDwPgiuIyR1NoA96h/Rk5D2O5jVh3dZr5G1EQHIHenxqbljYl4 bywMocIIC5GkkGI/vPIXkc+8xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSvFJAw QyidNARqR6scAKOQ96ibMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00 LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfDQ/zH7ZagkkOpkwY5owRpYMjKHxtyygL7j83LiRlD5gFJF31j96Z mmVKaADu4gM2QnFQEOqQuD62IpoMG3GPt0yruxdN/TIQo6Wq1NY/t2JIgH1MEzh6 tjv5KOQU5EJl9ilsSZdaIKvcWM7KrjVTXTH/qlqzinNVT+zLKYT4U9QVS9CzbxYd 0jhM4UCwmy7Vh5gjAYiG+ZJAbsV+Xbbl/wjwt9+FqfU2xxOa5Hy0+1qrtwWx+WaY 2m1bvBnTi4iAlmnOHM5LnadrctfZkZT0ZdJzmK8iqq1SPj9UAW0eTwG8rnLuGaFJ 0Wv0U6PGDzzjoWlhbuE14iKEK1OPDRQV -----END CERTIFICATE-----Generated at Fri Aug 8 00:39:04 2025 by rpki-client