$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json) Hash identifier: NOn6XJ77Wygi8zQ1+SUGFUsxPfNL/G998VIeCOMOnzs= Subject key identifier: 73:5D:D2:48:91:8A:A3:92:14:8D:15:6E:4B:2C:7E:0F:06:5E:00:B5 Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft Manifest number: D4 Signing time: Sat 09 Aug 2025 05:59:56 +0000 Manifest this update: Sat 09 Aug 2025 05:59:56 +0000 Manifest next update: Sat 16 Aug 2025 05:59:56 +0000 Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: +axk7hA8BvKTJo0stfe7dsQfDRbFXNOIbN0KDcwuiRQ=) 2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: 6k5p/IoEaHlPBZxEG5I/1TmRBsboDJLoq3IRABT/4wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Aug 9 05:59:56 2025 GMT Not After : Aug 16 05:59:56 2025 GMT Subject: CN=6896e3dc-dc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:ae:8b:19:d0:0b:45:6f:e5:6a:69:c9:dd: bb:d4:c3:db:5d:5b:91:65:9d:9a:57:8b:53:cb:e6: 77:2d:02:16:5a:f2:30:59:96:60:78:f9:57:37:ed: b0:b5:4b:7a:ab:3a:dd:45:95:15:bd:79:e7:46:1e: 8f:f4:22:57:75:81:d2:d8:25:28:b4:a3:49:9d:91: 4d:f2:5c:16:25:07:39:08:d2:c3:66:da:5f:9a:f7: 02:61:cc:c2:06:e4:53:ae:ed:47:08:12:3b:37:47: e0:1e:c7:9b:7e:11:25:74:a2:bb:a2:11:73:74:65: dc:a9:41:ff:c5:fc:fa:ed:53:47:7c:27:dd:c8:32: 71:64:35:c1:3e:1b:57:be:0f:dc:71:a0:6c:da:b0: 83:c6:6d:2f:92:d5:ae:ba:f4:98:c3:ac:22:8b:d6: 7f:48:2a:c4:ca:5f:0f:a3:a1:15:ca:b1:2f:8c:c0: ae:64:9c:ba:27:1f:f4:2d:f4:fd:fb:a9:90:e4:a2: bc:83:92:06:23:fb:41:9d:68:87:58:ed:ac:d6:4b: c4:c3:24:f6:81:45:bc:5f:2d:5a:23:b2:99:ac:b5: dc:2b:aa:6d:54:b2:1d:61:60:d6:58:59:8a:29:f7: 95:6b:56:b5:dd:87:98:14:e3:5b:0f:29:57:4c:8d: 3a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5D:D2:48:91:8A:A3:92:14:8D:15:6E:4B:2C:7E:0F:06:5E:00:B5 X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:43:fc:e1:65:9b:97:86:18:da:56:b3:c4:44:fb:f0:62:ad: 8a:a2:5f:ac:de:a7:f5:89:34:34:0e:72:4f:83:ac:19:9e:39: 3d:81:3e:a1:a2:06:17:06:6b:20:08:f8:84:1e:74:60:0d:55: a7:bb:71:5e:ef:01:f7:78:3f:55:4f:de:8c:77:55:ce:cc:36: 7e:c6:e4:ca:44:21:af:b0:75:0b:33:a9:01:89:fb:c1:ae:c6: 16:a8:f5:42:f6:32:c7:7e:93:13:1b:8d:86:1e:2f:87:23:63: f2:4b:30:c2:59:56:84:bd:43:7d:bb:51:f4:81:ab:79:89:61: cf:34:62:f0:99:69:14:00:75:b8:fb:cf:0e:9a:d6:7e:c1:39: e7:df:9e:a5:95:5a:04:94:36:2c:0c:94:d1:7e:ff:d9:ba:c2: 9c:96:fd:29:37:71:10:86:04:00:c4:71:80:56:b5:d2:bf:13: de:4b:0e:06:8c:17:ad:08:e6:a4:10:3b:e0:06:05:30:2f:7b: 9b:93:d5:c8:6a:d4:bb:9e:7c:b2:0c:b0:f4:27:2d:c6:4a:a8: e0:d5:f5:a8:33:1f:a2:e4:ae:66:70:52:f6:8f:44:b4:13:3e: 36:a6:3c:44:91:28:e6:83:c1:1a:18:e1:76:9b:95:64:8e:85: ca:be:d6:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4 QThERDk0MDYwHhcNMjUwODA5MDU1OTU2WhcNMjUwODE2MDU1OTU2WjAYMRYwFAYD VQQDEw02ODk2ZTNkYy1kYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hSuixnQC0Vv5Wppyd271MPbXVuRZZ2aV4tTy+Z3LQIWWvIwWZZgePlXN+2w tUt6qzrdRZUVvXnnRh6P9CJXdYHS2CUotKNJnZFN8lwWJQc5CNLDZtpfmvcCYczC BuRTru1HCBI7N0fgHsebfhEldKK7ohFzdGXcqUH/xfz67VNHfCfdyDJxZDXBPhtX vg/ccaBs2rCDxm0vktWuuvSYw6wii9Z/SCrEyl8Po6EVyrEvjMCuZJy6Jx/0LfT9 +6mQ5KK8g5IGI/tBnWiHWO2s1kvEwyT2gUW8Xy1aI7KZrLXcK6ptVLIdYWDWWFmK KfeVa1a13YeYFONbDylXTI06WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNd0kiR iqOSFI0Vbkssfg8GXgC1MB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az MXNfVi1XcXJXaTZLamRsQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZQ/zhZZuXhhjaVrPERPvwYq2Kol+s3qf1iTQ0DnJPg6wZnjk9gT6h ogYXBmsgCPiEHnRgDVWnu3Fe7wH3eD9VT96Md1XOzDZ+xuTKRCGvsHULM6kBifvB rsYWqPVC9jLHfpMTG42GHi+HI2PySzDCWVaEvUN9u1H0gat5iWHPNGLwmWkUAHW4 +88OmtZ+wTnn356llVoElDYsDJTRfv/ZusKclv0pN3EQhgQAxHGAVrXSvxPeSw4G jBetCOakEDvgBgUwL3ubk9XIatS7nnyyDLD0Jy3GSqjg1fWoMx+i5K5mcFL2j0S0 Ez42pjxEkSjmg8EaGOF2m5VkjoXKvtbX -----END CERTIFICATE-----Generated at Sat Aug 9 23:09:37 2025 by rpki-client