$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: S2rzVv/z38PyyClsV7LP6YC2O/le3EDz/OYxXQ5Qj1U= Subject key identifier: 4F:E8:C5:B1:8B:18:BC:0D:A0:24:8C:5F:F2:25:47:8D:E6:A2:99:98 Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 0858 Signing time: Fri 08 Aug 2025 21:02:58 +0000 Manifest this update: Fri 08 Aug 2025 21:02:57 +0000 Manifest next update: Fri 15 Aug 2025 21:02:57 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: M0W1IJ9BHjXHC13NhBv4wzseBN4K9JEEjWQIszbu2ks=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: Mx6TdeWb7xQYRiw4RSx4+mjl75r/TBUYOnLqpN3UBjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Aug 8 21:02:57 2025 GMT Not After : Aug 15 21:02:57 2025 GMT Subject: CN=68966602-81bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:18:6f:70:f2:41:45:94:1b:fb:b8:a1:ea: 7f:38:5d:c2:b4:1d:d4:cb:ed:0a:7c:58:40:b3:5a: d8:0c:0b:17:c0:be:26:76:52:ae:c0:3d:34:52:3f: a5:66:1c:08:8a:82:92:f1:58:8f:e5:d4:bd:5d:35: be:04:2b:c4:ab:b0:c7:01:20:09:a1:a2:e9:b6:46: d9:6b:f4:68:62:97:0b:b8:81:52:b0:b3:c2:b0:b9: b7:81:ad:12:63:a8:6d:f7:23:0c:ca:33:5f:b3:3b: bc:1c:11:88:02:16:32:5e:33:ea:a4:78:50:8f:77: e5:c3:6a:0b:84:3b:88:6a:33:72:07:e1:12:49:8e: b9:51:f9:fc:ad:07:52:d5:dd:c8:da:ed:1c:73:46: 17:e9:c1:c3:44:02:51:c5:ff:c4:42:50:dc:34:1f: e8:73:38:50:8f:48:f2:2a:e6:e6:21:9e:43:c0:2b: 76:dd:97:ed:7f:ba:ac:fc:81:17:e6:c1:07:dc:71: 15:a6:21:dd:f0:9d:6a:88:08:72:9a:f6:33:35:87: 7f:33:62:98:90:21:52:a7:1a:1f:41:33:4a:2f:dd: 12:dd:2e:14:58:7d:84:03:45:f6:b8:7f:b6:2d:e7: 9a:af:99:18:9f:a8:d1:77:14:de:07:04:61:dd:11: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E8:C5:B1:8B:18:BC:0D:A0:24:8C:5F:F2:25:47:8D:E6:A2:99:98 X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f8:09:8f:59:17:f2:ce:fd:fb:8e:74:e7:ad:fb:11:b2:72: 06:64:21:46:ea:cf:83:35:cc:b5:d6:6e:4d:b3:04:85:f9:1b: 94:75:a1:51:e8:d4:16:d0:18:8f:e6:02:71:e1:1c:94:a0:17: cc:cd:be:f7:c5:7c:96:f3:11:dc:b1:32:67:f6:48:f3:3a:d8: 14:0c:41:e0:d1:6b:16:4d:2f:e4:11:8f:9e:7d:d4:42:55:c4: 0c:b8:f9:13:2e:71:d0:3b:e9:8a:28:5d:79:8c:60:9c:36:25: 60:9a:ee:d8:56:00:20:c9:77:b1:bb:ef:d5:45:5d:63:5f:71: 3b:a2:a5:11:9f:02:b0:5a:18:8c:f9:3a:58:fd:ab:6e:3d:61: 3b:fd:99:70:b5:a2:86:8b:bb:b5:a4:7e:14:ee:c8:38:2c:cc: b9:81:dd:3b:09:7a:a2:8c:b2:5d:40:14:d1:ab:d5:96:38:70: d1:8c:cd:02:71:fa:b5:91:40:16:50:fb:6d:98:f5:48:0f:7a: fd:a2:12:96:94:5d:91:b4:38:7f:2a:2f:4e:9d:7f:9f:c1:ed: f4:bd:a8:50:8e:2f:b0:85:6d:21:85:c4:e8:06:e1:9d:0a:e4: 7e:31:40:f5:86:53:fd:ec:bf:2f:e7:e3:6f:ae:6b:be:0c:0e: 4e:33:b5:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjUwODA4MjEwMjU3WhcNMjUwODE1MjEwMjU3WjAYMRYwFAYD VQQDEw02ODk2NjYwMi04MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4MYb3DyQUWUG/u4oep/OF3CtB3Uy+0KfFhAs1rYDAsXwL4mdlKuwD00Uj+l ZhwIioKS8ViP5dS9XTW+BCvEq7DHASAJoaLptkbZa/RoYpcLuIFSsLPCsLm3ga0S Y6ht9yMMyjNfszu8HBGIAhYyXjPqpHhQj3flw2oLhDuIajNyB+ESSY65Ufn8rQdS 1d3I2u0cc0YX6cHDRAJRxf/EQlDcNB/oczhQj0jyKubmIZ5DwCt23Zftf7qs/IEX 5sEH3HEVpiHd8J1qiAhymvYzNYd/M2KYkCFSpxofQTNKL90S3S4UWH2EA0X2uH+2 Leear5kYn6jRdxTeBwRh3REETQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/oxbGL GLwNoCSMX/IlR43mopmYMB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS+AmPWRfyzv37jnTnrfsRsnIGZCFG6s+DNcy11m5NswSF+RuUdaFR 6NQW0BiP5gJx4RyUoBfMzb73xXyW8xHcsTJn9kjzOtgUDEHg0WsWTS/kEY+efdRC VcQMuPkTLnHQO+mKKF15jGCcNiVgmu7YVgAgyXexu+/VRV1jX3E7oqURnwKwWhiM +TpY/atuPWE7/ZlwtaKGi7u1pH4U7sg4LMy5gd07CXqijLJdQBTRq9WWOHDRjM0C cfq1kUAWUPttmPVID3r9ohKWlF2RtDh/Ki9OnX+fwe30vahQji+whW0hhcToBuGd CuR+MUD1hlP97L8v5+Nvrmu+DA5OM7VD -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:26 2025 by rpki-client