$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: G8v+rN3UdSMi+YHEPV0dd7ONdOyucETN+zFGHIZmcas= Subject key identifier: FD:B4:8F:39:7F:03:D5:B0:40:98:51:80:69:E2:E3:30:C9:9D:79:0E Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 0805 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 07FF Signing time: Fri 08 Aug 2025 20:48:11 +0000 Manifest this update: Fri 08 Aug 2025 20:48:11 +0000 Manifest next update: Fri 15 Aug 2025 20:48:11 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: WLD83w1KWOvFtoIqCFCj96+G7kTTcbFb8uAOK4naddo=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Aug 8 20:48:11 2025 GMT Not After : Aug 15 20:48:11 2025 GMT Subject: CN=6896628b-df6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:9b:ad:ca:07:24:8e:7c:ab:9f:c1:81:08: b0:57:db:fd:e7:5d:96:0b:1e:ab:dc:62:24:87:69: 26:f6:2a:97:c3:4d:47:d5:e8:d4:64:2c:77:f1:26: 6b:76:70:ee:29:bd:a1:78:b1:b3:e5:c1:60:b4:1f: 7e:7a:c2:07:82:b7:6b:5e:b0:b3:1f:29:7c:ef:0c: 6b:0a:1a:61:e7:83:1f:9e:4f:3a:a6:8e:89:bd:0a: fe:2f:59:6a:e9:f9:77:f9:cd:12:d0:78:9d:2b:39: 9e:72:d3:b3:1a:3e:b6:7f:c2:62:b7:19:de:72:55: de:ef:f5:b1:9a:39:c4:7e:1c:12:90:00:d2:08:96: b8:57:fe:eb:a2:2f:85:cd:5e:89:6a:6f:75:15:74: 74:f1:36:6c:5e:9e:87:ba:57:85:46:b8:ff:52:9f: 38:fa:35:5a:8f:12:1a:e2:28:5c:2a:60:0c:d7:ac: 31:97:c3:32:a9:67:e0:52:12:f0:90:29:3f:e5:a2: 26:19:5c:9c:1b:6e:ee:af:1f:c3:30:4a:28:64:25: d5:86:c0:c5:36:97:a1:dd:f5:60:57:79:47:25:49: ae:8d:b2:30:13:ff:5a:80:f9:25:b3:f8:16:14:4f: 4d:bc:c5:e3:90:3d:6d:f8:20:07:11:b8:01:15:ab: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:8F:39:7F:03:D5:B0:40:98:51:80:69:E2:E3:30:C9:9D:79:0E X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f1:09:64:fd:f3:96:0f:c3:61:e2:68:89:4e:08:13:27:ab: 8f:5f:4a:2b:e3:44:e8:30:06:a2:56:8b:5f:e6:9b:ad:de:88: 1a:0c:32:9e:4f:6c:3b:0b:11:3f:dd:0f:c9:aa:24:de:6a:06: 8c:9e:d1:a4:05:02:5b:80:8b:5c:75:83:d9:0a:73:f1:03:0d: 54:72:dd:3e:20:de:77:7f:35:d4:d0:c3:9b:69:00:b0:cb:83: 1e:85:cb:96:74:3e:3c:f0:74:0d:5a:d8:8f:ad:a7:54:db:0d: 5f:25:ef:cb:f4:64:3f:5a:ca:5a:31:9c:11:d8:46:7c:45:b5: e0:f7:75:bf:b8:69:08:0c:a6:17:c0:d9:31:42:e9:88:e2:b2: cb:13:2a:ce:02:df:ca:b4:87:b2:d1:47:cf:37:45:e3:22:33: b4:63:1f:bb:80:b1:a0:88:b0:99:30:44:a5:ab:d5:79:00:45: a2:6e:97:02:8c:12:2b:e8:ba:bd:aa:4a:63:de:fd:84:ae:ef: ed:d6:96:33:7a:72:33:21:6b:30:2c:63:f2:86:25:64:c7:f0: 35:b5:24:4f:72:e3:ec:44:ad:96:6a:8b:a0:7a:1c:84:bf:01: ee:b1:91:a9:f1:b7:0a:d3:e1:9c:47:e3:46:b7:23:ba:58:9f: c9:28:25:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUwODA4MjA0ODExWhcNMjUwODE1MjA0ODExWjAYMRYwFAYD VQQDEw02ODk2NjI4Yi1kZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsibrcoHJI58q5/BgQiwV9v9512WCx6r3GIkh2km9iqXw01H1ejUZCx38SZr dnDuKb2heLGz5cFgtB9+esIHgrdrXrCzHyl87wxrChph54Mfnk86po6JvQr+L1lq 6fl3+c0S0HidKzmectOzGj62f8JitxneclXe7/WxmjnEfhwSkADSCJa4V/7roi+F zV6Jam91FXR08TZsXp6HuleFRrj/Up84+jVajxIa4ihcKmAM16wxl8MyqWfgUhLw kCk/5aImGVycG27urx/DMEooZCXVhsDFNpeh3fVgV3lHJUmujbIwE/9agPkls/gW FE9NvMXjkD1t+CAHEbgBFasFbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP20jzl/ A9WwQJhRgGni4zDJnXkOMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC18Qlk/fOWD8Nh4miJTggTJ6uPX0or40ToMAaiVotf5put3ogaDDKe T2w7CxE/3Q/JqiTeagaMntGkBQJbgItcdYPZCnPxAw1Uct0+IN53fzXU0MObaQCw y4MehcuWdD488HQNWtiPradU2w1fJe/L9GQ/WspaMZwR2EZ8RbXg93W/uGkIDKYX wNkxQumI4rLLEyrOAt/KtIey0UfPN0XjIjO0Yx+7gLGgiLCZMESlq9V5AEWibpcC jBIr6Lq9qkpj3v2Eru/t1pYzenIzIWswLGPyhiVkx/A1tSRPcuPsRK2WaougehyE vwHusZGp8bcK0+GcR+NGtyO6WJ/JKCWP -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:26 2025 by rpki-client