$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: ZtiyLWJX88os+RKivsIqHotULP/EdpAaaC3rMSCNhZY= Subject key identifier: EA:1E:04:D4:AB:96:D4:BE:72:EE:4A:27:89:86:CE:DA:7C:02:06:1C Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 01A8 Signing time: Sat 09 Aug 2025 03:39:21 +0000 Manifest this update: Sat 09 Aug 2025 03:39:21 +0000 Manifest next update: Sat 16 Aug 2025 03:39:21 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: v8/mqWn9UBXYjGAn3urzx8rW0NC5bQZSi9F2LUnt9gg=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: 9PDqSioWn5hBKEyF3Xh2bcZ5nBkq113KFDA0GhUPDK8=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: TYXUwM1es+viCTvOIJkrXn99Lf7hGCjK/asxpXmwfB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Aug 9 03:39:21 2025 GMT Not After : Aug 16 03:39:21 2025 GMT Subject: CN=6896c2e9-8b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:68:3e:d2:03:65:45:d7:87:0b:60:3e:6a: 11:2e:9b:92:a3:f6:19:db:36:d7:07:cf:90:21:81: c1:13:14:e4:3e:1b:38:26:9a:25:0c:3a:db:13:95: f2:76:5c:0b:ff:d7:37:2c:7f:ee:d9:e5:4c:c1:6e: 10:8e:57:4e:78:06:74:80:4b:aa:71:f9:7b:78:c5: 92:b3:d1:c1:28:26:67:a0:88:4a:e4:50:3f:b1:7f: 4a:46:f0:90:79:a0:c6:0e:e9:23:91:05:bf:4e:28: 45:30:09:08:dd:a8:1b:08:03:c7:a3:81:fd:6f:32: 24:5b:28:af:3d:8a:c3:b8:8a:da:a6:37:fd:74:e8: 82:1b:db:5f:e7:6b:85:50:fb:91:32:1d:83:1a:c8: f7:4d:75:4c:63:82:4c:88:a6:cf:c9:fb:c4:dd:98: dd:98:7b:33:c5:d7:ea:b1:12:eb:5d:1c:b4:42:f0: e2:ec:9c:1a:a9:d3:a1:89:50:d8:da:e9:8d:56:03: 89:90:93:86:e7:56:98:26:8d:3c:53:bd:e8:34:8b: 85:fa:2b:89:f4:f0:3b:c4:79:1f:87:4a:9e:0d:57: 40:28:cc:37:c3:45:4e:d1:36:1e:7f:d2:a0:33:8e: c2:dd:49:f0:93:db:a9:b4:c5:e0:f2:40:ea:1b:fc: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1E:04:D4:AB:96:D4:BE:72:EE:4A:27:89:86:CE:DA:7C:02:06:1C X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:dd:9d:4b:69:be:09:85:27:80:a0:49:c8:97:f1:b9:c8:b9: 22:a5:0a:ed:97:62:38:63:28:f2:1a:84:e7:79:53:e4:b4:95: 86:c6:09:ff:6a:07:98:e3:ab:15:f6:76:eb:c0:72:5e:88:fa: 15:7a:81:d3:37:52:a0:70:13:92:ea:b3:6c:e7:4d:d0:44:f5: f5:e6:a6:e8:d0:05:78:32:14:b2:e3:39:93:ae:ce:b5:f8:f9: d5:2c:b5:f3:76:77:dd:72:b2:74:b2:9e:7b:0a:4d:15:18:8c: 30:10:e5:8a:47:73:27:6e:60:42:a3:d1:58:d2:a2:40:fd:7e: f3:0b:28:30:79:4f:09:24:7a:17:c3:4d:c3:45:da:04:47:92: d9:b1:40:8e:10:e5:6b:48:83:28:d7:87:46:5d:60:cd:0b:c1: 61:7d:80:c4:81:5f:16:09:06:33:e7:3e:ea:17:61:c9:1b:01: 0d:1f:e0:56:4a:46:3a:47:c8:e5:c2:ba:28:ff:2e:7e:41:33: c9:74:ad:24:02:bf:0e:9f:31:b0:6c:47:e1:30:62:1c:9a:3f: 1e:76:46:5d:63:64:43:1d:d2:2e:f1:f3:03:a1:eb:c6:49:b7: 64:b0:ae:d4:1f:02:62:1b:a4:dc:0e:a4:d7:ef:d9:60:52:24: 71:23:bf:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUwODA5MDMzOTIxWhcNMjUwODE2MDMzOTIxWjAYMRYwFAYD VQQDEw02ODk2YzJlOS04Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJBoPtIDZUXXhwtgPmoRLpuSo/YZ2zbXB8+QIYHBExTkPhs4JpolDDrbE5Xy dlwL/9c3LH/u2eVMwW4QjldOeAZ0gEuqcfl7eMWSs9HBKCZnoIhK5FA/sX9KRvCQ eaDGDukjkQW/TihFMAkI3agbCAPHo4H9bzIkWyivPYrDuIrapjf9dOiCG9tf52uF UPuRMh2DGsj3TXVMY4JMiKbPyfvE3ZjdmHszxdfqsRLrXRy0QvDi7JwaqdOhiVDY 2umNVgOJkJOG51aYJo08U73oNIuF+iuJ9PA7xHkfh0qeDVdAKMw3w0VO0TYef9Kg M47C3Unwk9uptMXg8kDqG/xBPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoeBNSr ltS+cu5KJ4mGztp8AgYcMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu3Z1Lab4JhSeAoEnIl/G5yLkipQrtl2I4YyjyGoTneVPktJWGxgn/ ageY46sV9nbrwHJeiPoVeoHTN1KgcBOS6rNs503QRPX15qbo0AV4MhSy4zmTrs61 +PnVLLXzdnfdcrJ0sp57Ck0VGIwwEOWKR3MnbmBCo9FY0qJA/X7zCygweU8JJHoX w03DRdoER5LZsUCOEOVrSIMo14dGXWDNC8FhfYDEgV8WCQYz5z7qF2HJGwENH+BW SkY6R8jlwroo/y5+QTPJdK0kAr8OnzGwbEfhMGIcmj8edkZdY2RDHdIu8fMDoevG SbdksK7UHwJiG6TcDqTX79lgUiRxI7+/ -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:37 2025 by rpki-client