$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: k8B4VPrUatPdM6j6WPuz0wTrgYceR3BqWBYDjvTh/08= Subject key identifier: B9:05:63:F3:35:E6:7C:AB:1E:8E:71:BE:C7:DB:CC:13:D2:98:67:27 Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 11B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 11AA Signing time: Fri 08 Aug 2025 17:23:36 +0000 Manifest this update: Fri 08 Aug 2025 17:23:36 +0000 Manifest next update: Fri 15 Aug 2025 17:23:36 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: vBqnn2QGUpL7pJ34FxZ0Zqgj4eeTw0lajaWnIEnDpsU=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4533 (0x11b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Aug 8 17:23:36 2025 GMT Not After : Aug 15 17:23:36 2025 GMT Subject: CN=68963298-d628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:98:e7:d5:9d:f8:e2:fe:f7:b3:a8:1b:99: e4:aa:c4:2a:21:25:3c:90:d0:39:37:96:f3:90:5e: 3f:3d:0d:e8:6a:ad:a4:2e:5f:5f:87:57:a2:26:d5: 42:c1:34:ac:ff:e0:19:31:0c:61:85:f2:6c:0a:06: 0f:1d:eb:78:50:d6:65:7c:af:3e:bb:27:1d:61:22: 51:9a:ac:b6:d0:0b:c7:77:9c:af:e3:ac:69:f6:0d: 9d:ef:95:7a:08:f6:72:6b:db:2d:60:e3:b2:d8:5e: 1a:5f:4e:24:4b:62:aa:bb:e7:df:4a:6f:0a:d0:a5: 9a:f2:23:b7:2e:15:e4:5c:3a:ee:35:67:98:da:81: 74:c5:c9:bb:f3:0c:84:66:92:5e:2e:8d:09:aa:d6: 9d:d2:a6:d9:10:65:64:12:95:c8:40:14:19:f3:c3: 35:a6:f6:75:fa:08:46:0e:15:ae:91:21:2b:34:c2: de:da:a7:5c:1a:fa:6a:73:8b:dd:ab:37:47:f3:d2: 8a:ce:fe:cc:7a:2f:7c:ad:76:8a:8d:90:d3:29:4d: 24:0b:79:d5:9e:a6:de:76:ab:fa:dd:12:7c:cb:8e: 7c:67:a6:27:56:58:0b:a6:7c:cf:8a:0b:cc:72:b9: 47:ab:66:ed:f3:2b:5b:68:22:85:f0:ba:35:0e:3f: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:05:63:F3:35:E6:7C:AB:1E:8E:71:BE:C7:DB:CC:13:D2:98:67:27 X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:55:55:49:a8:e5:82:c3:79:85:23:20:4e:1f:fa:5a:6b:3e: 58:33:0e:07:6d:be:a3:68:24:7e:36:ed:58:b5:b5:f6:7b:90: 78:31:d1:cb:bb:7f:a3:35:58:1c:3c:7a:7e:4f:25:66:aa:18: 55:a9:8e:7c:c6:4b:b7:34:63:b1:04:1a:f8:36:0e:d2:2d:74: ff:eb:81:4d:db:87:07:d5:19:13:24:90:8e:c5:34:4b:6c:29: 3d:db:61:58:73:2f:8b:cb:9e:be:c7:dd:55:b9:a5:98:51:38: 59:88:72:dc:d2:1a:3d:e6:e0:b2:a2:67:ce:08:03:f9:6b:4c: 3a:d0:e0:d9:9c:d9:48:3a:95:fd:f6:00:74:49:75:a6:44:b7: 81:00:81:7d:a6:5f:0a:c8:83:1e:6f:d3:90:b7:b6:49:47:4b: 79:a8:00:1e:5e:46:64:d7:16:03:96:2e:c1:ab:1a:db:50:c4: 67:9b:ac:cc:0b:81:8f:36:07:92:4a:5e:a3:a5:3a:85:6e:4c: c1:8d:44:42:07:db:6f:a4:63:cb:7d:a9:a2:7c:f6:5c:c6:5f: 17:6f:18:a4:c5:4b:da:d2:df:d6:b7:6e:0a:15:e8:2b:a8:bf: c5:b7:5a:10:4e:4a:f7:96:77:ec:2c:8b:12:0b:42:b1:56:f6: b6:11:2c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUwODA4MTcyMzM2WhcNMjUwODE1MTcyMzM2WjAYMRYwFAYD VQQDEw02ODk2MzI5OC1kNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VuY59Wd+OL+97OoG5nkqsQqISU8kNA5N5bzkF4/PQ3oaq2kLl9fh1eiJtVC wTSs/+AZMQxhhfJsCgYPHet4UNZlfK8+uycdYSJRmqy20AvHd5yv46xp9g2d75V6 CPZya9stYOOy2F4aX04kS2Kqu+ffSm8K0KWa8iO3LhXkXDruNWeY2oF0xcm78wyE ZpJeLo0Jqtad0qbZEGVkEpXIQBQZ88M1pvZ1+ghGDhWukSErNMLe2qdcGvpqc4vd qzdH89KKzv7Mei98rXaKjZDTKU0kC3nVnqbedqv63RJ8y458Z6YnVlgLpnzPigvM crlHq2bt8ytbaCKF8Lo1Dj88twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkFY/M1 5nyrHo5xvsfbzBPSmGcnMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLVVVJqOWCw3mFIyBOH/paaz5YMw4Hbb6jaCR+Nu1YtbX2e5B4MdHL u3+jNVgcPHp+TyVmqhhVqY58xku3NGOxBBr4Ng7SLXT/64FN24cH1RkTJJCOxTRL bCk922FYcy+Ly56+x91VuaWYUThZiHLc0ho95uCyomfOCAP5a0w60ODZnNlIOpX9 9gB0SXWmRLeBAIF9pl8KyIMeb9OQt7ZJR0t5qAAeXkZk1xYDli7BqxrbUMRnm6zM C4GPNgeSSl6jpTqFbkzBjURCB9tvpGPLfamifPZcxl8XbxikxUva0t/Wt24KFegr qL/Ft1oQTkr3lnfsLIsSC0KxVva2ESwn -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:36 2025 by rpki-client