$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: bjHrytOKPW1zArg0MbJbnGAfm4M6pXoRPDqU+OAaUvA= Subject key identifier: 74:4F:01:C2:1D:D7:02:4C:6C:BF:C4:B4:D8:D9:7F:ED:CE:88:D5:D1 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 5E Signing time: Sat 09 Aug 2025 07:35:53 +0000 Manifest this update: Sat 09 Aug 2025 07:35:52 +0000 Manifest next update: Sat 16 Aug 2025 07:35:52 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: PvwXNT2n6YJSS22eTwnQ8HJM7YR5iOlLSNltqE7tjL4=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Aug 9 07:35:52 2025 GMT Not After : Aug 16 07:35:52 2025 GMT Subject: CN=6896fa58-9542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:36:e7:a1:5f:82:38:d1:5d:ce:96:65:49: f4:40:1e:37:2c:70:f4:c9:41:e8:40:f2:e6:eb:fa: 08:2a:90:cf:4c:a9:9c:58:6c:e6:70:0a:c9:b1:55: ec:27:8d:df:8f:7b:11:76:2d:3c:0c:29:07:ef:be: 81:b9:3f:67:4c:ca:9d:f1:22:d9:18:de:a6:a1:49: 19:be:2c:15:4e:36:60:86:d7:a2:8a:f5:24:1f:2a: ba:cd:b2:61:99:8e:d3:6e:18:ec:ac:04:2c:0e:b8: f2:c1:1a:b4:00:fe:e3:c9:55:06:41:a2:d5:a6:c8: 87:ef:af:a5:c8:05:06:22:1a:47:e6:9d:33:9a:5c: 8a:df:3e:51:98:d2:3b:93:1b:e8:58:46:1e:c7:0c: 0f:fc:77:16:54:75:af:62:c3:8b:e2:34:02:46:7d: 73:ba:4f:c9:f9:97:8a:c9:8e:c2:5d:47:dc:7e:58: 9b:04:62:c4:48:26:30:db:d2:e7:b4:24:4f:57:41: ff:39:ca:6c:19:72:ea:87:c5:de:e0:ea:6d:c2:9f: 68:39:e1:ba:90:d3:fb:c1:05:e6:c4:c2:f1:0b:3e: b8:0a:d6:04:87:03:68:2e:87:f9:5f:d0:a8:88:0d: 91:9b:c8:80:0d:59:45:b7:3d:aa:1e:44:00:a1:a1: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4F:01:C2:1D:D7:02:4C:6C:BF:C4:B4:D8:D9:7F:ED:CE:88:D5:D1 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f0:f7:44:11:04:43:fe:ff:e5:0a:a0:7b:e9:c2:06:6c:32: 19:64:e3:33:1d:5d:57:4a:72:61:aa:9a:06:1a:64:4b:15:1d: 0f:9a:55:cd:c6:c7:41:f9:b7:d1:59:be:1b:7a:b0:67:48:7a: ab:06:8a:a0:aa:33:68:69:7f:d9:e8:de:e0:c6:da:47:7a:36: 7e:52:8d:f3:74:7a:f0:6a:ed:40:32:42:6b:9d:90:0f:39:a4: 66:75:c2:50:f7:ec:94:4f:9d:d6:f2:9b:9c:7f:fa:7c:5a:68: 05:77:c0:eb:31:22:ca:c4:e1:22:23:5e:33:7b:85:23:73:86: 58:34:32:8c:8c:5e:83:24:ed:71:4b:ab:18:d3:eb:7a:23:ca: 5f:3e:16:73:c5:12:66:04:c5:42:1b:47:7b:a6:67:dd:c8:0a: 3b:b9:2e:63:6b:2f:17:14:04:a4:01:dc:c7:60:08:d4:92:97: 83:e4:1d:5e:07:cb:6d:14:a0:61:5b:79:68:39:12:a0:fc:f0: 10:6f:d7:0f:4a:68:0a:c3:99:f8:93:c3:f8:55:b2:05:99:9a: aa:e5:02:48:81:e6:7c:3a:fd:bd:4b:6f:79:2f:58:f4:69:63: a5:77:6c:3c:b5:9a:82:09:3e:b6:bc:b8:7b:98:73:4a:e5:0b: 43:75:31:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA4MDkwNzM1NTJaFw0yNTA4MTYwNzM1NTJaMBgxFjAUBgNV BAMTDTY4OTZmYTU4LTk1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAGjbnoV+CONFdzpZlSfRAHjcscPTJQehA8ubr+ggqkM9MqZxYbOZwCsmxVewn jd+PexF2LTwMKQfvvoG5P2dMyp3xItkY3qahSRm+LBVONmCG16KK9SQfKrrNsmGZ jtNuGOysBCwOuPLBGrQA/uPJVQZBotWmyIfvr6XIBQYiGkfmnTOaXIrfPlGY0juT G+hYRh7HDA/8dxZUda9iw4viNAJGfXO6T8n5l4rJjsJdR9x+WJsEYsRIJjDb0ue0 JE9XQf85ymwZcuqHxd7g6m3Cn2g54bqQ0/vBBebEwvELPrgK1gSHA2guh/lf0KiI DZGbyIANWUW3PaoeRAChoawPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdE8Bwh3X Akxsv8S02Nl/7c6I1dEwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEDw90QRBEP+/+UKoHvpwgZsMhlk4zMdXVdKcmGqmgYaZEsVHQ+aVc3G x0H5t9FZvht6sGdIeqsGiqCqM2hpf9no3uDG2kd6Nn5SjfN0evBq7UAyQmudkA85 pGZ1wlD37JRPndbym5x/+nxaaAV3wOsxIsrE4SIjXjN7hSNzhlg0MoyMXoMk7XFL qxjT63ojyl8+FnPFEmYExUIbR3umZ93ICju5LmNrLxcUBKQB3MdgCNSSl4PkHV4H y20UoGFbeWg5EqD88BBv1w9KaArDmfiTw/hVsgWZmqrlAkiB5nw6/b1Lb3kvWPRp Y6V3bDy1moIJPra8uHuYc0rlC0N1MRo= -----END CERTIFICATE-----Generated at Mon Aug 11 06:03:03 2025 by rpki-client