$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft File: GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json) Hash identifier: pAOwPG57g89xoLqZk7HY4wNhttn1OrIV+k9wFB0J/eE= Subject key identifier: E4:33:E5:6F:D3:FE:86:66:AD:CC:C3:0A:A4:64:B6:F3:7F:EA:8B:10 Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft Manifest number: 07B5 Signing time: Fri 08 Aug 2025 21:36:52 +0000 Manifest this update: Fri 08 Aug 2025 21:36:52 +0000 Manifest next update: Fri 15 Aug 2025 21:36:52 +0000 Files and hashes: 1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: HNdoqYe/oOi9rVd0WiwIOy4T4zpWtiascb1ZRhmHEJw=) 2: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: BcBBZ1IV+bokAtTZ3iUNiKgQOrGhBIBLoYEFwdHdcHQ=) 3: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: hLP1YV65RYOfP9UTV36s4plQryfXd3KAYO5xxCl+fH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Validity Not Before: Aug 8 21:36:52 2025 GMT Not After : Aug 15 21:36:52 2025 GMT Subject: CN=68966df4-aa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:e7:85:1a:e9:f7:ab:35:41:9d:80:d3:c7: fd:39:2e:4e:73:1c:8f:d7:c7:87:32:dc:95:1b:58: 55:e2:6c:8c:a4:67:ae:4d:86:93:17:4a:5d:85:70: cf:0a:49:c2:1c:1f:67:2b:f4:8e:8f:3c:a4:0e:77: 3c:64:af:58:13:43:7e:77:9e:46:af:ff:77:a8:2a: 29:c9:d5:2b:ac:0a:a9:08:10:85:98:4c:96:85:69: 0d:72:ea:48:5b:d0:6b:ee:62:13:f5:24:9a:2c:ef: 76:91:aa:00:52:b2:77:4b:76:38:35:da:c5:3f:fd: 1b:2b:a7:cf:f8:58:69:f3:c8:5e:c8:ac:75:69:98: 88:7f:1f:93:16:2b:ad:d4:71:e9:ce:92:ff:c4:71: a5:cc:7e:9a:ef:63:64:5e:03:c2:5c:3a:60:f0:99: 9f:e9:92:47:55:93:42:ec:98:e4:9e:f0:42:32:ea: a1:f2:de:03:9c:ee:96:2d:5d:f0:bf:27:90:a1:27: 08:af:33:71:8e:30:ee:56:e9:34:94:0d:af:76:d0: d3:a0:e6:8e:81:06:e7:bf:45:f6:07:dc:4e:f1:1d: 3a:b5:58:40:af:95:7f:9d:00:66:d1:93:00:72:ee: 9f:8a:eb:2e:4a:88:9f:e6:18:37:01:7d:1e:a6:5e: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:E5:6F:D3:FE:86:66:AD:CC:C3:0A:A4:64:B6:F3:7F:EA:8B:10 X509v3 Authority Key Identifier: keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cf:ff:36:21:64:14:cc:4c:1d:08:7b:db:f7:2b:5c:06:41: 25:a3:31:ff:7d:3d:de:89:41:24:bb:4b:c1:42:56:ae:91:8f: 22:21:38:13:84:c9:61:33:fb:d4:43:94:ae:b1:e1:03:13:4c: a4:0b:8d:b9:8b:49:f7:a3:0f:6b:53:3f:c2:2d:8c:84:78:ed: a3:a7:06:e1:f2:72:9a:65:5a:25:0d:86:67:1b:23:85:e3:95: 2d:92:27:c1:24:60:51:69:8b:f1:b2:7f:da:f4:12:92:74:a7: 32:33:56:03:97:45:93:2b:87:04:5a:e3:d2:3a:09:22:e7:65: 38:a4:14:3e:90:01:59:f3:c6:96:09:f7:a6:f0:0a:03:ef:5d: 28:46:1f:cd:d2:b2:4a:32:fe:d3:27:13:19:c2:67:35:f2:cc: 1b:9f:b2:60:f1:a3:7f:f7:6f:0e:d7:cf:44:77:a7:1c:4a:28: 53:2e:65:01:78:4c:ab:a4:fd:a5:cc:4e:fe:4a:8b:29:ca:80: d6:d1:e5:dd:e9:e8:08:d6:2f:f7:4f:52:4c:b5:56:c6:17:ba: 85:a6:32:4f:2f:9c:31:cb:37:ab:1a:16:5e:bf:03:d0:02:b9: a8:c4:e3:a5:ae:ee:2c:bd:0a:56:a2:c8:5d:82:8c:d3:2c:58: fb:3e:29:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VBN0YxMTAvBgNVBAUTKDE4NDQyQTExNkMzMDEwMUJFQzhDODlGNDUwMTk3OEMw OTIwMzZCQjgwHhcNMjUwODA4MjEzNjUyWhcNMjUwODE1MjEzNjUyWjAYMRYwFAYD VQQDEw02ODk2NmRmNC1hYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEznhRrp96s1QZ2A08f9OS5OcxyP18eHMtyVG1hV4myMpGeuTYaTF0pdhXDP CknCHB9nK/SOjzykDnc8ZK9YE0N+d55Gr/93qCopydUrrAqpCBCFmEyWhWkNcupI W9Br7mIT9SSaLO92kaoAUrJ3S3Y4NdrFP/0bK6fP+Fhp88heyKx1aZiIfx+TFiut 1HHpzpL/xHGlzH6a72NkXgPCXDpg8Jmf6ZJHVZNC7JjknvBCMuqh8t4DnO6WLV3w vyeQoScIrzNxjjDuVuk0lA2vdtDToOaOgQbnv0X2B9xO8R06tVhAr5V/nQBm0ZMA cu6fiusuSoif5hg3AX0epl4YtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQz5W/T /oZmrczDCqRktvN/6osQMB8GA1UdIwQYMBaAFBhEKhFsMBAb7IyJ9FAZeMCSA2u4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUE3Ri9FOTY0QUY0QzBC NTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VCdnNqSW4wVUJsNHdKSURh N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dFUXFFV3d3RUJ2c2pJbjBVQmw0d0pJRGE3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUE3Ri9FOTY0QUY0QzBCNTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VC dnNqSW4wVUJsNHdKSURhN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9z/82IWQUzEwdCHvb9ytcBkElozH/fT3eiUEku0vBQlaukY8iITgT hMlhM/vUQ5SuseEDE0ykC425i0n3ow9rUz/CLYyEeO2jpwbh8nKaZVolDYZnGyOF 45UtkifBJGBRaYvxsn/a9BKSdKcyM1YDl0WTK4cEWuPSOgki52U4pBQ+kAFZ88aW Cfem8AoD710oRh/N0rJKMv7TJxMZwmc18swbn7Jg8aN/928O189Ed6ccSihTLmUB eEyrpP2lzE7+SospyoDW0eXd6egI1i/3T1JMtVbGF7qFpjJPL5wxyzerGhZevwPQ ArmoxOOlru4svQpWoshdgozTLFj7Pils -----END CERTIFICATE-----Generated at Sun Aug 10 13:51:56 2025 by rpki-client