$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: Y3Mtt7VOgAryhVSkaH5yqoCbVqL/CEnRQXuLBUAJ/6s= Subject key identifier: 4C:86:35:93:F3:30:B1:10:E9:48:99:8E:A5:86:9B:E0:97:78:B3:84 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 44 Signing time: Thu 19 Jun 2025 06:47:54 +0000 Manifest this update: Thu 19 Jun 2025 06:47:54 +0000 Manifest next update: Thu 26 Jun 2025 06:47:54 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: ehPsgOB3OaiOnlCxNPhrBNQqHFs4yuBJZgNi1JPyeDk=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Jun 19 06:47:54 2025 GMT Not After : Jun 26 06:47:54 2025 GMT Subject: CN=6853b29a-a8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:f6:18:02:a1:30:24:79:0e:28:c1:65:69: a6:82:ca:e3:b7:d1:9d:d0:85:38:70:f8:78:98:da: c0:8d:93:e4:44:3d:f9:51:3f:18:62:2d:82:f4:d7: 88:62:8b:dd:f1:52:87:01:80:ed:ac:76:09:67:90: 87:71:72:76:1e:fa:6f:34:5a:a0:b2:26:39:f5:81: 85:54:9f:c6:31:db:ca:99:ff:d9:5a:48:c0:da:d1: d9:c9:fc:56:0b:dd:31:9f:8c:22:55:bc:fb:e1:d0: ea:d3:d0:94:fb:1a:3f:07:44:ca:69:a4:57:71:21: 7b:0b:cd:b2:e4:4f:15:e4:b1:09:8a:22:18:ba:3f: ae:d6:28:c4:e3:71:b4:78:81:e0:d3:27:a8:0f:96: 61:99:07:39:3d:50:df:43:fb:bb:e8:87:0b:b7:14: 82:c6:aa:df:d1:b8:aa:a7:36:b0:46:5f:74:6a:b1: 0b:be:99:cf:cb:4c:6e:22:ec:a9:98:cf:86:e6:14: 2f:7a:01:b9:e0:19:33:4f:eb:4d:d2:ab:17:47:2f: 13:c0:09:b5:55:25:0e:06:15:bd:4d:e4:75:e4:c0: 83:c2:6f:2c:18:18:a6:b0:1a:75:5b:16:77:95:c5: 0b:ce:39:a2:c9:4d:7d:c5:71:08:d5:da:e5:42:40: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:35:93:F3:30:B1:10:E9:48:99:8E:A5:86:9B:E0:97:78:B3:84 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:e0:65:76:c4:cf:a5:7a:d0:d3:c2:ff:55:51:44:ed:39:76: d7:ba:da:85:c4:cd:ba:fc:41:5e:f0:c7:a8:31:2d:4f:9f:e0: 4b:21:9c:ca:d2:bf:df:2f:49:23:1b:c8:00:98:94:31:fd:ae: cf:b3:b1:c6:50:fb:d6:c7:da:a3:9d:d6:80:e0:55:ea:ed:01: 61:43:18:ad:94:5d:da:af:a3:0b:40:2f:05:69:d4:65:b5:ac: 5e:1f:49:0f:a3:12:cc:9e:b1:60:3b:10:b6:1a:59:53:a1:63: 1b:13:fb:f0:69:bb:c4:08:98:1c:4d:1b:4d:96:13:40:93:a4: e2:83:d6:d8:27:33:8a:90:f4:01:c7:fd:98:f4:b0:fb:e4:e2: b1:7e:6c:9d:49:02:51:81:ca:0e:c5:7b:ed:0d:94:fb:be:a8: e2:5a:26:64:a5:ee:d7:ce:48:5d:98:93:81:05:52:f7:de:9a: b0:60:ae:fe:73:31:80:7c:78:c1:67:ad:1b:9c:75:91:9d:98: 79:f7:13:8e:b5:40:ca:d5:6f:9f:66:ce:d8:5a:fd:cd:4e:2e: dd:2b:bf:57:67:c1:a2:25:45:f1:5b:f2:03:fe:80:36:80:c9: 96:5b:b1:bf:0c:ba:99:4c:8a:cd:1f:ac:81:b7:fe:c9:d3:a8: a2:e9:3c:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA2MTkwNjQ3NTRaFw0yNTA2MjYwNjQ3NTRaMBgxFjAUBgNV BAMTDTY4NTNiMjlhLWE4YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYA/YYAqEwJHkOKMFlaaaCyuO30Z3QhThw+HiY2sCNk+REPflRPxhiLYL014hi i93xUocBgO2sdglnkIdxcnYe+m80WqCyJjn1gYVUn8Yx28qZ/9laSMDa0dnJ/FYL 3TGfjCJVvPvh0OrT0JT7Gj8HRMpppFdxIXsLzbLkTxXksQmKIhi6P67WKMTjcbR4 geDTJ6gPlmGZBzk9UN9D+7vohwu3FILGqt/RuKqnNrBGX3RqsQu+mc/LTG4i7KmY z4bmFC96AbngGTNP603SqxdHLxPACbVVJQ4GFb1N5HXkwIPCbywYGKawGnVbFneV xQvOOaLJTX3FcQjV2uVCQCIfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTIY1k/Mw sRDpSJmOpYab4Jd4s4QwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADPgZXbEz6V60NPC/1VRRO05dte62oXEzbr8QV7wx6gxLU+f4EshnMrS v98vSSMbyACYlDH9rs+zscZQ+9bH2qOd1oDgVertAWFDGK2UXdqvowtALwVp1GW1 rF4fSQ+jEsyesWA7ELYaWVOhYxsT+/Bpu8QImBxNG02WE0CTpOKD1tgnM4qQ9AHH /Zj0sPvk4rF+bJ1JAlGByg7Fe+0NlPu+qOJaJmSl7tfOSF2Yk4EFUvfemrBgrv5z MYB8eMFnrRucdZGdmHn3E461QMrVb59mztha/c1OLt0rv1dnwaIlRfFb8gP+gDaA yZZbsb8MuplMis0frIG3/snTqKLpPDI= -----END CERTIFICATE-----Generated at Fri Jun 20 17:52:15 2025 by rpki-client