$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: otJV1a3yUFUG7+rYJVs9ntyhB9gMTgQnqJbVDjj79+g= Subject key identifier: AE:BE:E3:7A:00:32:CA:0F:00:1A:F7:78:78:23:D9:B2:26:14:E0:25 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0518 Signing time: Sat 09 Aug 2025 00:04:42 +0000 Manifest this update: Sat 09 Aug 2025 00:04:41 +0000 Manifest next update: Sat 16 Aug 2025 00:04:41 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: r1tm35fnOV1KQ4rp6WdPtExu92jUGQ/4OyBtAXy4SZ8=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Aug 9 00:04:41 2025 GMT Not After : Aug 16 00:04:41 2025 GMT Subject: CN=6896909a-65ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:f5:c6:5b:45:e8:40:41:ba:31:d6:94:e2: 52:2c:81:0e:4e:bd:9b:f7:88:73:af:f0:75:15:72: 09:1a:f1:f9:b1:d4:19:0f:32:86:af:60:7e:1d:b2: 2f:fa:2c:02:c1:fa:75:d5:fe:30:7f:62:6c:5b:4f: d6:47:84:06:be:79:34:a4:89:2f:87:fe:f2:7a:87: 36:a5:54:75:1f:21:c3:f3:c5:ac:99:03:7f:17:34: 10:fa:95:e9:fc:6c:95:62:f0:a9:42:b7:d6:a6:dd: bb:52:96:3b:f4:d9:2d:8d:e2:25:93:19:d7:e3:67: 1f:4d:28:39:63:26:7b:1e:a9:77:de:62:0b:f8:a6: ce:ed:3f:fd:83:6b:29:ee:f1:47:01:d2:5a:8e:04: 9f:11:bf:be:df:a6:4e:80:cb:56:e6:58:d4:35:a3: 3e:dd:3f:d9:e1:71:b3:54:52:76:c6:09:c3:ed:13: 23:49:7f:d4:60:b6:4a:21:7b:06:91:82:de:2c:88: 96:60:30:ad:a0:3e:de:c0:a1:3a:7e:93:c0:bf:1b: 1a:a9:47:c9:b3:01:65:bf:f8:f4:21:de:b7:d8:8d: 5b:b8:1e:8c:9e:13:7f:54:23:8f:2c:99:1a:26:22: 0a:27:2c:9f:f2:b0:06:b2:7a:88:5e:b5:d2:c0:ef: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BE:E3:7A:00:32:CA:0F:00:1A:F7:78:78:23:D9:B2:26:14:E0:25 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:20:71:fa:21:9f:b3:a1:7a:4c:61:f8:d2:72:bb:1a:5a:f3: 38:5f:67:62:de:cc:f7:33:9b:13:d0:19:bf:3e:7f:83:c7:b2: b3:a8:d9:56:70:a9:bf:46:11:b7:74:c5:f4:c6:2e:b6:e9:92: b4:e8:ec:1c:10:01:f2:7e:2c:c7:65:41:41:6e:d9:bb:ff:fc: 21:a2:12:db:37:fb:4d:d4:0e:50:44:c4:f0:eb:cb:69:7e:a0: a2:36:d6:29:7d:88:b0:1c:7d:b3:c2:c4:3e:ab:a4:6a:a9:3f: 26:2a:d0:37:db:2b:4c:5c:90:89:09:9e:73:14:bb:b8:d6:65: b4:2e:5b:5f:57:c4:3f:8e:aa:f8:9f:7c:d3:e3:2b:69:3c:f1: 33:bd:53:ba:37:af:ff:aa:f2:4d:44:eb:6d:ee:75:57:0d:79: 82:1b:16:3b:44:e9:82:ef:99:7a:d0:b7:d6:f8:7c:a1:2e:7c: 83:5c:ab:0f:6a:de:6f:72:93:03:a5:c0:9c:71:54:c7:02:c9: 90:da:2e:b2:89:10:c9:a1:14:66:af:b2:d2:69:07:2f:ef:7f: 1e:85:a9:12:f9:3a:ab:b8:a7:dd:33:69:d0:a3:25:d3:34:6c: 62:c1:cd:a1:30:cb:69:6a:8a:8a:03:7c:74:af:86:3c:35:46: 0c:41:7a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUwODA5MDAwNDQxWhcNMjUwODE2MDAwNDQxWjAYMRYwFAYD VQQDEw02ODk2OTA5YS02NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA31xltF6EBBujHWlOJSLIEOTr2b94hzr/B1FXIJGvH5sdQZDzKGr2B+HbIv +iwCwfp11f4wf2JsW0/WR4QGvnk0pIkvh/7yeoc2pVR1HyHD88WsmQN/FzQQ+pXp /GyVYvCpQrfWpt27UpY79NktjeIlkxnX42cfTSg5YyZ7Hql33mIL+KbO7T/9g2sp 7vFHAdJajgSfEb++36ZOgMtW5ljUNaM+3T/Z4XGzVFJ2xgnD7RMjSX/UYLZKIXsG kYLeLIiWYDCtoD7ewKE6fpPAvxsaqUfJswFlv/j0Id632I1buB6MnhN/VCOPLJka JiIKJyyf8rAGsnqIXrXSwO/BjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6+43oA MsoPABr3eHgj2bImFOAlMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADIHH6IZ+zoXpMYfjScrsaWvM4X2di3sz3M5sT0Bm/Pn+Dx7KzqNlW cKm/RhG3dMX0xi626ZK06OwcEAHyfizHZUFBbtm7//whohLbN/tN1A5QRMTw68tp fqCiNtYpfYiwHH2zwsQ+q6RqqT8mKtA32ytMXJCJCZ5zFLu41mW0LltfV8Q/jqr4 n3zT4ytpPPEzvVO6N6//qvJNROtt7nVXDXmCGxY7ROmC75l60LfW+HyhLnyDXKsP at5vcpMDpcCccVTHAsmQ2i6yiRDJoRRmr7LSaQcv738ehakS+TqruKfdM2nQoyXT NGxiwc2hMMtpaoqKA3x0r4Y8NUYMQXoZ -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:38 2025 by rpki-client