$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json) Hash identifier: uyQaz9seSCr/gjBE7vrJBmxQw3HPfxWb6w+1XUOP4nU= Subject key identifier: CE:81:35:FB:99:C6:38:8F:9C:04:30:32:83:90:65:D4:91:9B:CD:B0 Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1F38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft Manifest number: 1F24 Signing time: Wed 06 Aug 2025 16:06:25 +0000 Manifest this update: Wed 06 Aug 2025 16:06:24 +0000 Manifest next update: Wed 13 Aug 2025 16:06:24 +0000 Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: j+7edW/YzKVajFh7pehQOKKYBpalPA/ZJ1TJJLVvO5A=) 2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: N8CiTad7+YCKPe2opBHwCiq7VtSImphL9JYd7EN47KQ=) 3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: Sa6ldNBoTeND2ToHXPhf3nbtng663wb8wohGeUYEVNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7992 (0x1f38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Validity Not Before: Aug 6 16:06:24 2025 GMT Not After : Aug 13 16:06:24 2025 GMT Subject: CN=68937d81-3f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:3e:bb:d8:38:55:08:5b:ec:7a:6f:58:2b: 1e:c7:da:bc:4e:62:7f:00:90:0a:01:b6:c6:78:c4: 40:b0:08:3c:19:db:73:0f:03:79:25:0f:69:49:33: 8c:ea:45:d4:5c:bb:fc:a6:66:38:e6:7d:02:4a:87: a2:93:60:2d:0e:42:98:cd:73:8d:8e:43:e1:ed:3b: 06:1d:51:54:2c:ef:e6:2e:b6:5c:da:e3:3f:14:c3: 96:b6:ac:fe:7d:9a:dc:fd:52:a4:e2:b9:84:dd:74: de:92:5c:66:b9:ad:fe:3d:2d:f0:2e:ea:c5:d6:51: 3e:6e:48:94:53:09:49:6f:63:f1:b2:cb:4e:0a:7a: c2:3e:62:42:66:16:50:db:94:22:4c:79:a1:53:db: 92:cf:c9:58:d6:31:15:60:a9:da:0d:9a:4a:f3:9e: c9:14:fa:77:d3:41:1a:6b:b2:1a:fb:8f:d0:5e:56: d1:4d:9a:34:d7:77:59:2d:a9:b4:4c:42:64:9c:74: 45:a0:1c:d8:21:2e:c2:2e:71:9f:bf:8b:27:af:5c: 3f:f6:da:1b:8e:e1:66:9c:5b:95:5c:52:fe:a0:96: 4a:9f:d3:0d:1c:55:70:98:ef:4d:a5:cc:4e:a5:95: d2:8d:28:16:85:2f:cc:6b:7d:3c:b1:7f:ce:fd:0e: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:81:35:FB:99:C6:38:8F:9C:04:30:32:83:90:65:D4:91:9B:CD:B0 X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:92:f4:ec:65:b2:4f:9d:ee:73:e9:d2:0c:d9:6b:7a:94:3c: 04:26:5b:23:56:36:20:34:52:6f:43:65:ec:a4:f6:8e:6c:75: 43:07:06:6a:cf:c7:c3:db:ad:8e:d4:29:40:df:eb:47:90:d5: 33:ce:e7:21:29:81:e4:6d:32:11:c6:98:45:22:46:d8:58:a0: c2:54:30:7f:91:d5:74:c0:d8:ff:a9:17:df:55:2a:d7:62:a3: 33:de:b7:59:78:a4:70:8f:e1:bc:bb:3f:33:50:40:0f:0e:3e: 44:f8:28:d9:ee:e4:4d:24:92:0a:22:6f:90:b9:d0:f7:e5:8b: 69:c0:c7:9a:e9:0d:a2:fe:ef:88:80:13:c1:5c:57:3e:61:6b: de:b1:5d:17:fa:4f:b0:e4:5c:9e:63:64:ca:b1:ed:6b:46:9f: 6e:d6:af:9a:d1:9b:ec:c5:4a:45:fc:75:9d:13:18:3d:8b:fc: 78:d9:58:21:f0:03:7e:9a:37:48:c0:27:3b:82:49:ad:19:c6: 2b:27:14:fd:70:e4:0d:7a:53:3e:1f:79:3a:1d:7a:ff:53:db: c2:de:f2:b4:6e:43:e8:21:1f:74:4a:ca:b1:7e:55:a7:13:d9: ad:ef:ab:df:9b:85:4e:04:dd:fd:db:03:64:9a:8f:b9:92:84: 81:8e:18:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjUwODA2MTYwNjI0WhcNMjUwODEzMTYwNjI0WjAYMRYwFAYD VQQDEw02ODkzN2Q4MS0zZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0o+u9g4VQhb7HpvWCsex9q8TmJ/AJAKAbbGeMRAsAg8GdtzDwN5JQ9pSTOM 6kXUXLv8pmY45n0CSoeik2AtDkKYzXONjkPh7TsGHVFULO/mLrZc2uM/FMOWtqz+ fZrc/VKk4rmE3XTeklxmua3+PS3wLurF1lE+bkiUUwlJb2PxsstOCnrCPmJCZhZQ 25QiTHmhU9uSz8lY1jEVYKnaDZpK857JFPp300Eaa7Ia+4/QXlbRTZo013dZLam0 TEJknHRFoBzYIS7CLnGfv4snr1w/9tobjuFmnFuVXFL+oJZKn9MNHFVwmO9NpcxO pZXSjSgWhS/Ma308sX/O/Q5fTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6BNfuZ xjiPnAQwMoOQZdSRm82wMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBskvTsZbJPne5z6dIM2Wt6lDwEJlsjVjYgNFJvQ2XspPaObHVDBwZq z8fD262O1ClA3+tHkNUzzuchKYHkbTIRxphFIkbYWKDCVDB/kdV0wNj/qRffVSrX YqMz3rdZeKRwj+G8uz8zUEAPDj5E+CjZ7uRNJJIKIm+QudD35YtpwMea6Q2i/u+I gBPBXFc+YWvesV0X+k+w5FyeY2TKse1rRp9u1q+a0ZvsxUpF/HWdExg9i/x42Vgh 8AN+mjdIwCc7gkmtGcYrJxT9cOQNelM+H3k6HXr/U9vC3vK0bkPoIR90SsqxflWn E9mt76vfm4VOBN392wNkmo+5koSBjhhA -----END CERTIFICATE-----Generated at Fri Aug 8 13:04:31 2025 by rpki-client