$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: Brbj2M/vGF/65hK3KsFFs2U2k5EpOtJwmuzg1mDU+/k= Subject key identifier: 29:23:21:B1:A5:8D:26:D1:07:EC:CF:AC:26:56:EA:EF:0C:53:B5:31 Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 083B Signing time: Thu 12 Jun 2025 20:29:58 +0000 Manifest this update: Thu 12 Jun 2025 20:29:58 +0000 Manifest next update: Thu 19 Jun 2025 20:29:58 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: o1h6uUO4x88tadE4mvMRxJpCYEJiHboYYu2NkOES4gE=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: Mx6TdeWb7xQYRiw4RSx4+mjl75r/TBUYOnLqpN3UBjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Jun 12 20:29:58 2025 GMT Not After : Jun 19 20:29:58 2025 GMT Subject: CN=684b38c6-bacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:37:a6:ad:da:a1:ee:ba:e2:56:0a:31:65: 4c:29:d7:41:bf:88:13:e1:c3:d5:41:19:26:5d:a3: ee:b9:0e:a4:c5:9d:75:24:79:cd:8f:56:7d:40:df: fc:40:07:50:d1:23:2c:4c:1d:e1:43:73:85:ec:da: 7c:4d:19:b5:63:61:1b:28:52:8f:34:e8:ef:21:28: fe:a1:68:c6:3a:c6:ad:8a:40:7b:d5:4f:be:9d:7b: ef:55:c9:6b:9b:54:a2:c8:b5:84:9a:fd:d7:6d:7f: 67:7b:56:d6:96:2a:73:7e:63:7e:aa:df:1c:6a:ec: 3c:1d:a0:3a:11:e7:4e:6c:04:36:e4:7b:28:51:1c: a1:1a:7d:c4:31:7f:88:80:e6:be:39:08:a0:df:73: 1d:23:d1:89:cb:07:e9:f6:ec:72:b7:98:56:ab:a8: f0:9e:3a:5f:19:2f:c9:3d:72:5c:d7:87:07:dc:a4: 7f:e6:e2:b8:9e:e5:88:01:a0:8b:96:d2:bf:3d:02: 28:e1:b6:b1:a7:b9:a6:01:8f:ea:cb:b0:e9:f6:d2: 46:2e:e7:a4:60:96:07:20:fc:47:2d:6f:27:6d:64: e2:12:c1:b0:0c:7f:76:c2:52:50:ba:7b:48:bf:5a: 1f:ac:09:cc:37:94:6b:e4:07:27:db:c9:d5:31:81: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:23:21:B1:A5:8D:26:D1:07:EC:CF:AC:26:56:EA:EF:0C:53:B5:31 X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:71:b5:e2:c8:d2:94:e1:ce:99:33:9b:57:f1:92:12:84:73: 33:7e:ba:7e:3c:2f:69:55:62:fa:ba:45:a7:d1:e9:c7:55:17: f9:ed:5b:ad:6b:85:08:86:2e:c0:91:45:e0:12:c8:1e:bc:68: fa:e3:86:96:1d:6f:43:c4:a6:3a:18:a7:e4:24:8d:48:b9:60: 48:36:74:fc:4b:f5:f3:14:a1:9d:c4:9f:cc:68:98:02:34:55: 20:37:d0:42:95:61:92:a3:ea:75:7b:14:41:9d:1f:6b:26:b0: ca:a9:f0:7d:e7:21:d5:f7:cb:e0:a4:ff:7d:03:db:27:01:13: 7f:6d:e4:bd:f4:1c:6f:10:19:1b:cb:d9:24:17:85:3e:30:8c: 76:64:12:43:02:0c:86:fd:f8:0d:3f:2f:9f:ce:82:93:d5:d2: bc:ea:c0:a5:8a:0f:13:4a:96:65:07:df:53:8d:c6:15:d6:1b: c2:79:21:30:75:87:b6:18:1e:9c:02:dd:9f:ab:dd:8d:3d:22: b6:33:21:76:44:c0:cd:2c:ce:18:48:a5:89:b5:1a:5e:c5:78: f5:41:6d:1f:ad:eb:ff:f3:08:d5:1b:d5:de:98:db:88:ae:4e: 62:bd:ca:62:39:71:74:d3:26:a0:91:f0:98:de:d8:28:9c:77: 02:a0:71:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjUwNjEyMjAyOTU4WhcNMjUwNjE5MjAyOTU4WjAYMRYwFAYD VQQDEw02ODRiMzhjNi1iYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcc3pq3aoe664lYKMWVMKddBv4gT4cPVQRkmXaPuuQ6kxZ11JHnNj1Z9QN/8 QAdQ0SMsTB3hQ3OF7Np8TRm1Y2EbKFKPNOjvISj+oWjGOsatikB71U++nXvvVclr m1SiyLWEmv3XbX9ne1bWlipzfmN+qt8cauw8HaA6EedObAQ25HsoURyhGn3EMX+I gOa+OQig33MdI9GJywfp9uxyt5hWq6jwnjpfGS/JPXJc14cH3KR/5uK4nuWIAaCL ltK/PQIo4baxp7mmAY/qy7Dp9tJGLuekYJYHIPxHLW8nbWTiEsGwDH92wlJQuntI v1ofrAnMN5Rr5Acn28nVMYHAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkjIbGl jSbRB+zPrCZW6u8MU7UxMB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCycbXiyNKU4c6ZM5tX8ZIShHMzfrp+PC9pVWL6ukWn0enHVRf57Vut a4UIhi7AkUXgEsgevGj644aWHW9DxKY6GKfkJI1IuWBINnT8S/XzFKGdxJ/MaJgC NFUgN9BClWGSo+p1exRBnR9rJrDKqfB95yHV98vgpP99A9snARN/beS99BxvEBkb y9kkF4U+MIx2ZBJDAgyG/fgNPy+fzoKT1dK86sClig8TSpZlB99TjcYV1hvCeSEw dYe2GB6cAt2fq92NPSK2MyF2RMDNLM4YSKWJtRpexXj1QW0frev/8wjVG9XemNuI rk5ivcpiOXF00yagkfCY3tgonHcCoHGx -----END CERTIFICATE-----Generated at Sat Jun 14 18:02:00 2025 by rpki-client