$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: VooOe4pjF9LGL89JCBTuCxwhkz659/nUHfUYvE8QmX0= Subject key identifier: 02:A9:81:4F:58:23:22:32:C4:E7:78:B2:83:06:E3:05:16:95:E2:89 Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 1199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 118E Signing time: Sat 14 Jun 2025 17:09:44 +0000 Manifest this update: Sat 14 Jun 2025 17:09:43 +0000 Manifest next update: Sat 21 Jun 2025 17:09:43 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: S8VZyGkHWej2A3CBU/WTUCHwce3JZRuSsjjxxE5S4lY=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4505 (0x1199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Jun 14 17:09:43 2025 GMT Not After : Jun 21 17:09:43 2025 GMT Subject: CN=684dacd8-f4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:c3:59:97:4e:69:76:ff:0a:ce:d6:58:3a: 33:29:6e:06:5b:80:70:76:4f:a8:ca:80:5a:f1:d8: 13:40:55:e9:6f:70:89:e0:f2:19:a5:02:3d:42:5b: e6:5f:64:15:a4:56:5c:05:8a:8f:68:a9:08:cf:0d: ca:c6:d2:74:ab:54:b1:ce:38:0e:dc:66:c8:c4:e0: e3:79:26:ab:96:6a:59:e5:36:63:74:a7:68:7a:7d: 48:a8:f0:54:81:1c:b8:87:2c:30:89:0e:c8:e5:62: 00:6a:e6:7e:7c:29:0d:ad:cd:34:46:7e:7d:59:ea: 2c:38:ac:30:72:8a:7c:3d:8e:82:55:4d:15:55:0a: 8b:65:7e:a3:a2:b8:33:9d:1a:34:54:2a:df:fd:83: 78:bf:33:fa:23:ad:ae:5a:9e:d8:4e:d1:9f:7b:dc: 04:b8:40:56:4a:cf:0c:0a:74:d7:93:23:f8:de:60: 52:4e:c9:61:9f:d6:c7:73:32:36:ba:64:f6:c8:0c: 7a:5c:42:a3:94:4c:d5:ff:e0:16:92:b5:71:67:b0: 70:1c:ca:80:a8:a1:33:03:da:5d:02:1c:5b:6b:42: ac:b8:37:ec:d6:b9:f6:71:94:9d:11:1b:dd:0e:a1: 30:3e:9b:ca:b3:84:64:7b:5c:27:5a:6b:7e:c8:a4: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:81:4F:58:23:22:32:C4:E7:78:B2:83:06:E3:05:16:95:E2:89 X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ed:56:18:f0:4e:2c:2d:f3:c6:c2:91:52:5c:41:b5:50:fc: 8d:7d:60:c9:41:3e:40:fc:b2:ef:20:8e:71:a1:5f:21:04:77: 86:71:ba:52:7c:92:9c:e8:6a:6e:f3:51:b5:2e:e3:14:f5:2a: be:79:6e:81:6a:fb:8f:b7:f8:dc:86:85:a6:76:28:0e:8c:00: 35:84:d4:a3:a6:d8:cd:f9:50:ef:a3:0b:15:d2:f4:b0:e4:45: 6d:d6:d6:5b:5f:cf:80:e2:d2:0b:93:45:fd:fc:0e:b8:21:57: f8:88:cb:af:7e:c5:e2:7c:7c:eb:88:4f:6f:fe:ef:5a:e1:15: b4:49:78:80:7e:8a:13:f4:64:9b:a1:09:0b:b7:28:01:a8:3e: 27:f5:9c:58:8d:38:8d:8b:23:d6:82:89:50:89:61:60:d9:b1: 7b:8c:48:8b:c3:da:cd:59:9f:e0:c4:e3:50:e0:de:19:fc:6e: 93:d7:88:28:cf:84:4b:02:a3:bd:f7:e9:a8:06:32:4e:90:2e: 56:54:b6:97:db:d2:00:99:0a:2b:25:2c:58:e8:ed:4e:c4:e3: be:f2:df:37:83:f4:de:64:54:1a:c6:b5:2f:c7:3e:bc:bc:40: 85:cf:c7:f0:a2:20:b1:d3:5d:31:78:d4:37:ca:e9:8c:c1:7b: 85:19:12:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUwNjE0MTcwOTQzWhcNMjUwNjIxMTcwOTQzWjAYMRYwFAYD VQQDEw02ODRkYWNkOC1mNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRTDWZdOaXb/Cs7WWDozKW4GW4Bwdk+oyoBa8dgTQFXpb3CJ4PIZpQI9Qlvm X2QVpFZcBYqPaKkIzw3KxtJ0q1SxzjgO3GbIxODjeSarlmpZ5TZjdKdoen1IqPBU gRy4hywwiQ7I5WIAauZ+fCkNrc00Rn59WeosOKwwcop8PY6CVU0VVQqLZX6jorgz nRo0VCrf/YN4vzP6I62uWp7YTtGfe9wEuEBWSs8MCnTXkyP43mBSTslhn9bHczI2 umT2yAx6XEKjlEzV/+AWkrVxZ7BwHMqAqKEzA9pdAhxba0KsuDfs1rn2cZSdERvd DqEwPpvKs4Rke1wnWmt+yKQE4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKpgU9Y IyIyxOd4soMG4wUWleKJMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg7VYY8E4sLfPGwpFSXEG1UPyNfWDJQT5A/LLvII5xoV8hBHeGcbpS fJKc6Gpu81G1LuMU9Sq+eW6BavuPt/jchoWmdigOjAA1hNSjptjN+VDvowsV0vSw 5EVt1tZbX8+A4tILk0X9/A64IVf4iMuvfsXifHzriE9v/u9a4RW0SXiAfooT9GSb oQkLtygBqD4n9ZxYjTiNiyPWgolQiWFg2bF7jEiLw9rNWZ/gxONQ4N4Z/G6T14go z4RLAqO99+moBjJOkC5WVLaX29IAmQorJSxY6O1OxOO+8t83g/TeZFQaxrUvxz68 vECFz8fwoiCx010xeNQ3yumMwXuFGRJO -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:21 2025 by rpki-client