$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: UOFZRehHGCOMD/95Se3ODo5EbeIX/1Bg0XNUBrf4+as= Subject key identifier: 04:70:8D:A0:9E:63:15:3B:96:7B:6D:74:67:8D:AF:96:EA:48:D2:AB Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 01B4 Signing time: Mon 11 Aug 2025 03:14:13 +0000 Manifest this update: Mon 11 Aug 2025 03:14:12 +0000 Manifest next update: Mon 18 Aug 2025 03:14:12 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: o9VlmKhXSbyOLI7ajYhU9g8Mia3bxYqmsTAw8G3VDXA=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: txIJm5SN5mj5ufLae9sOD2bwnfe8kYJIqTNAvBL7Uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Aug 11 03:14:12 2025 GMT Not After : Aug 18 03:14:12 2025 GMT Subject: CN=68996005-1f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:09:a2:3d:8b:5d:3b:f5:e8:3c:25:fe:0a: 0b:51:5e:e9:ef:3f:37:02:76:d9:73:22:76:5c:ab: a9:61:35:82:40:ee:e4:d0:d9:f0:1a:ff:07:94:e2: 89:39:6a:1c:a8:11:c7:6b:9b:70:d0:19:20:80:88: 32:d0:a9:6b:d7:d0:37:07:ed:e7:da:6e:39:6d:04: 73:b1:ff:e9:f5:d2:72:b3:be:5b:36:c2:20:9a:b2: b4:9f:7d:d7:58:e6:6c:82:8e:70:aa:8e:50:18:16: f1:96:ca:7e:74:f4:ad:95:05:6d:a9:f2:be:20:cd: 91:c1:98:43:01:da:86:4d:81:60:4a:82:3e:0e:35: 97:36:26:8d:f0:45:82:30:77:10:00:0a:63:7a:34: ae:09:55:04:b8:99:2b:8c:bd:ae:6c:23:f0:e5:d8: 17:56:8c:ce:31:a1:90:30:ae:9c:fc:fa:0e:06:09: da:37:73:44:44:79:41:10:56:ef:f3:d3:7e:ec:4b: bb:38:7c:fe:a3:7f:c4:03:cf:90:5e:cb:de:30:06: f8:d1:16:86:37:0f:a7:df:63:28:1f:f6:8f:bb:e2: 52:69:34:89:88:82:d2:28:f1:c9:36:75:70:66:a9: 0e:48:2a:e0:4d:a8:f9:b1:a6:0a:ad:d4:6a:f2:9d: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:70:8D:A0:9E:63:15:3B:96:7B:6D:74:67:8D:AF:96:EA:48:D2:AB X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c8:eb:1e:64:9a:76:47:1c:08:39:e1:6f:85:ed:d4:fb:48: 90:a0:70:a3:cf:03:51:b0:28:34:20:3f:6c:76:61:2e:dc:2d: 22:e7:96:47:37:33:fd:1d:de:73:c0:41:fe:73:eb:63:cf:a5: 5a:9b:e4:68:d7:f7:ea:38:41:e8:c7:80:fe:4e:79:f4:38:09: 92:92:90:78:2d:8a:57:50:82:ab:e9:64:73:76:30:05:72:d2: 0d:40:f2:45:f4:3b:bb:09:dd:22:82:19:bf:e5:5f:59:1f:e8: 26:86:f2:40:9f:91:77:92:da:50:fa:0e:83:f6:10:57:e2:5a: 35:03:4d:d2:d1:bc:29:97:ab:1c:a6:63:e4:ab:6a:ce:90:d4: 7c:3c:6c:b4:cf:41:ad:d4:24:85:1d:37:b2:28:1a:7c:41:d7: a9:73:a5:1c:30:cf:ae:ed:58:e6:6c:8f:28:97:47:80:ed:b5: e1:b1:65:77:a1:44:58:46:79:43:63:f0:b9:c6:5a:e6:00:c1: 03:2a:49:6f:a8:6f:ae:d3:47:48:d1:2d:ab:6a:14:06:5f:f7: 44:01:6d:4e:7a:b6:87:f0:3f:71:4c:24:90:0b:42:68:db:46: 2a:d5:87:8e:c3:b2:4f:44:b4:59:67:e4:e4:48:a6:c5:53:c0: 2b:70:e9:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUwODExMDMxNDEyWhcNMjUwODE4MDMxNDEyWjAYMRYwFAYD VQQDEw02ODk5NjAwNS0xZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoMJoj2LXTv16Dwl/goLUV7p7z83AnbZcyJ2XKupYTWCQO7k0NnwGv8HlOKJ OWocqBHHa5tw0BkggIgy0Klr19A3B+3n2m45bQRzsf/p9dJys75bNsIgmrK0n33X WOZsgo5wqo5QGBbxlsp+dPStlQVtqfK+IM2RwZhDAdqGTYFgSoI+DjWXNiaN8EWC MHcQAApjejSuCVUEuJkrjL2ubCPw5dgXVozOMaGQMK6c/PoOBgnaN3NERHlBEFbv 89N+7Eu7OHz+o3/EA8+QXsveMAb40RaGNw+n32MoH/aPu+JSaTSJiILSKPHJNnVw ZqkOSCrgTaj5saYKrdRq8p2z/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARwjaCe YxU7lnttdGeNr5bqSNKrMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgyOseZJp2RxwIOeFvhe3U+0iQoHCjzwNRsCg0ID9sdmEu3C0i55ZH NzP9Hd5zwEH+c+tjz6Vam+Ro1/fqOEHox4D+Tnn0OAmSkpB4LYpXUIKr6WRzdjAF ctINQPJF9Du7Cd0ighm/5V9ZH+gmhvJAn5F3ktpQ+g6D9hBX4lo1A03S0bwpl6sc pmPkq2rOkNR8PGy0z0Gt1CSFHTeyKBp8Qdepc6UcMM+u7VjmbI8ol0eA7bXhsWV3 oURYRnlDY/C5xlrmAMEDKklvqG+u00dI0S2rahQGX/dEAW1OeraH8D9xTCSQC0Jo 20Yq1YeOw7JPRLRZZ+TkSKbFU8ArcOlh -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:40 2025 by rpki-client