$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json) Hash identifier: URe2DlMSorkjfjnNqy//R1sddaXGt0/aT2Ya1eQo++w= Subject key identifier: 68:B7:0D:23:C6:A8:C3:80:AA:85:12:5F:2D:56:9A:8A:DE:3E:BB:03 Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft Manifest number: 33 Signing time: Sat 09 Aug 2025 08:07:45 +0000 Manifest this update: Sat 09 Aug 2025 08:07:44 +0000 Manifest next update: Sat 16 Aug 2025 08:07:44 +0000 Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: eFfVPRdsK3nDiq6A0jbJyCvOcfld4esxK/1LKX4x+NY=) 2: D7605790272B11F08FF39632C4F9AE02.roa (hash: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Validity Not Before: Aug 9 08:07:44 2025 GMT Not After : Aug 16 08:07:44 2025 GMT Subject: CN=689701d0-99f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:fc:00:3f:bb:9c:cb:07:82:01:51:cb:2c: 6d:0f:76:5b:78:a2:90:e9:29:fa:16:15:4f:0e:d0: 72:82:8b:e7:be:66:8b:be:b7:92:6f:70:3f:36:ff: 14:68:5a:94:6a:81:67:8c:29:d2:69:a1:72:bd:36: 04:e8:aa:6f:ec:6a:3e:2e:e0:ef:9f:d9:7e:d9:48: 08:01:a8:ed:d2:58:e3:c1:71:fa:74:fd:ea:ab:8c: 28:a1:ba:f5:3c:9c:a0:9e:de:96:ad:0f:91:f7:8a: 1a:aa:f1:bb:41:a2:f4:2f:92:17:f5:fb:76:12:38: bb:52:cb:94:77:3e:47:59:ab:8c:d9:f9:94:43:a7: ef:7a:ba:28:3a:9a:66:41:7e:2e:24:c8:85:1b:d4: ca:42:88:a7:ad:ce:d4:e9:53:14:40:83:df:bf:11: 95:e4:d6:43:3c:fc:d6:a9:65:1c:0e:6a:99:cc:62: 5e:3b:a2:fe:9b:57:49:0e:3e:41:cf:20:b9:b5:1f: aa:19:6b:91:e8:1e:61:7e:b5:3a:52:dc:0c:30:24: e4:1a:23:1f:91:17:22:2f:a3:ff:95:bd:7c:8c:31: c1:9d:50:9a:fd:0d:17:43:67:dc:a5:b6:37:10:8c: 6e:56:89:12:50:50:f1:02:ad:ab:0e:7e:4d:ef:5e: 1d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B7:0D:23:C6:A8:C3:80:AA:85:12:5F:2D:56:9A:8A:DE:3E:BB:03 X509v3 Authority Key Identifier: keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d8:86:05:b6:41:3d:c3:3b:3a:b0:d8:74:ca:7d:7d:85:14: 38:1e:31:d2:32:38:a5:ac:3d:99:b0:25:0d:a0:db:18:fe:46: e9:a2:1d:89:9f:b6:3c:fc:c9:81:26:29:af:59:dc:91:8e:ca: 6c:6f:85:68:d2:12:22:04:f4:73:80:49:4f:a2:b1:8a:42:38: 4e:19:51:4d:01:2a:b6:77:5a:d5:5b:f9:33:f8:9a:d0:21:be: ff:5d:05:32:95:ae:0d:4d:b9:4e:06:e2:7a:bd:2c:47:f5:a1: 57:09:66:59:d4:43:65:1a:05:b5:0e:d0:64:5d:2c:b5:b0:89: 57:1e:ef:87:70:82:58:35:7f:e9:da:0e:32:1f:b6:ec:bb:c9: 32:ae:b5:0e:87:19:68:30:ee:3f:1e:51:27:19:dc:36:71:62: 92:fa:33:89:6a:03:7d:39:fe:59:8d:5f:b9:67:9a:55:8f:42: 19:0d:44:fd:72:e8:b6:2f:05:a1:6d:a3:5f:f7:b2:ed:9f:c7: 81:28:bb:52:6f:c0:c3:0f:ec:46:82:3e:34:63:f3:05:e8:63: 2a:bc:06:22:0c:2c:5f:5d:04:ad:54:28:1c:8c:3f:e7:03:ab: 91:ef:7c:b1:6f:51:15:fb:9e:11:2d:3d:ef:8a:af:f4:03:19: df:af:6e:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0U2RjExMC8GA1UEBRMoMUIxQUYxODM1MTA2QzkzMzlBREQzMTQ1RTkwMEIwNkZE QTlFNTZFNzAeFw0yNTA4MDkwODA3NDRaFw0yNTA4MTYwODA3NDRaMBgxFjAUBgNV BAMTDTY4OTcwMWQwLTk5ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCypvwAP7ucyweCAVHLLG0Pdlt4opDpKfoWFU8O0HKCi+e+Zou+t5JvcD82/xRo WpRqgWeMKdJpoXK9NgToqm/saj4u4O+f2X7ZSAgBqO3SWOPBcfp0/eqrjCihuvU8 nKCe3patD5H3ihqq8btBovQvkhf1+3YSOLtSy5R3PkdZq4zZ+ZRDp+96uig6mmZB fi4kyIUb1MpCiKetztTpUxRAg9+/EZXk1kM8/NapZRwOapnMYl47ov6bV0kOPkHP ILm1H6oZa5HoHmF+tTpS3AwwJOQaIx+RFyIvo/+VvXyMMcGdUJr9DRdDZ9yltjcQ jG5WiRJQUPECrasOfk3vXh3HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaLcNI8ao w4CqhRJfLVaait4+uwMwHwYDVR0jBBgwFoAUGxrxg1EGyTOa3TFF6QCwb9qeVucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRTZGLzJEMTgxN0I0Mjcy QjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3hyeGcxRUd5VE9hM1RGRjZRQ3diOXFlVnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD RTZGLzJEMTgxN0I0MjcyQjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRP YTNURkY2UUN3YjlxZVZ1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALbYhgW2QT3DOzqw2HTKfX2FFDgeMdIyOKWsPZmwJQ2g2xj+RumiHYmf tjz8yYEmKa9Z3JGOymxvhWjSEiIE9HOASU+isYpCOE4ZUU0BKrZ3WtVb+TP4mtAh vv9dBTKVrg1NuU4G4nq9LEf1oVcJZlnUQ2UaBbUO0GRdLLWwiVce74dwglg1f+na DjIftuy7yTKutQ6HGWgw7j8eUScZ3DZxYpL6M4lqA305/lmNX7lnmlWPQhkNRP1y 6LYvBaFto1/3su2fx4Eou1JvwMMP7EaCPjRj8wXoYyq8BiIMLF9dBK1UKByMP+cD q5HvfLFvURX7nhEtPe+Kr/QDGd+vbns= -----END CERTIFICATE-----Generated at Sat Aug 9 22:45:20 2025 by rpki-client