$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft File: gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft (raw, json) Hash identifier: Gq6SRcG/JyVALfvCGkQD3vLG68gocwTVQy4HgzGSKtI= Subject key identifier: DA:3C:49:B9:E1:2B:90:6E:E4:25:95:DF:66:39:E7:27:DF:10:7C:C5 Authority key identifier: 80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95 Certificate issuer: /CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95 Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft Manifest number: 08C1 Signing time: Sun 10 Aug 2025 21:32:17 +0000 Manifest this update: Sun 10 Aug 2025 21:32:17 +0000 Manifest next update: Sun 17 Aug 2025 21:32:17 +0000 Files and hashes: 1: gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl (hash: jXUVMwS823aiZ06GLkus7rlURQGyy3Q8xkD+iBEOSXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 21:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=8060505633934E4AC90717B23094DF98456ABE95 Validity Not Before: Aug 10 21:32:17 2025 GMT Not After : Aug 17 21:32:17 2025 GMT Subject: CN=68990fe1-4c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:e7:e0:a7:d5:e6:d8:a3:57:e1:71:20:55: c5:3e:3c:7d:b0:be:a6:e9:43:4a:3a:09:6b:d0:b8: b0:14:e1:bd:aa:d5:f8:dc:e0:ce:b6:4a:3d:21:b3: 63:13:d9:6c:65:c4:65:db:75:41:a0:fa:f0:d0:df: b9:d3:ea:80:74:d7:79:37:43:41:f1:64:61:19:c1: f1:72:21:33:34:a1:0a:e3:39:64:d4:f9:17:4b:80: 37:ef:31:30:83:cd:49:d1:42:42:fb:bc:ad:ef:b9: e2:39:a1:41:2a:d2:6d:28:27:73:71:34:32:be:b3: 5c:40:60:3b:3c:78:75:c8:e1:55:e4:41:96:2c:52: 88:28:0e:22:31:ce:e6:19:08:f6:9f:28:1d:43:61: e8:0e:c9:1b:a1:d6:80:8f:46:42:e7:55:e9:3e:6c: da:fd:66:db:ce:b0:c0:e9:c7:90:db:1e:ec:d8:1a: 73:d6:f4:21:26:24:4c:7f:ec:96:1b:ae:75:94:df: f6:ad:1e:21:66:11:6f:74:81:15:d0:a3:eb:e7:13: e4:1a:8d:22:9c:14:f9:be:1d:30:51:02:db:de:54: 9d:0d:2c:f8:fd:c8:3c:c7:5c:88:d2:a6:7d:8e:28: 4a:dd:fe:01:f2:f2:91:72:2e:17:37:b4:0e:5a:d6: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:49:B9:E1:2B:90:6E:E4:25:95:DF:66:39:E7:27:DF:10:7C:C5 X509v3 Authority Key Identifier: keyid:80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a5:38:0d:fc:5d:7b:6d:00:b3:11:00:66:b3:70:89:d8:b6: ee:d0:9d:d7:8d:af:82:50:35:14:58:a2:73:9c:a9:ed:bd:c7: 75:a9:51:55:69:39:67:bc:a2:e2:62:18:79:5c:1a:e9:c5:12: 45:f0:c8:64:81:26:da:14:7c:0a:76:b1:1b:7e:8f:a4:37:1e: 2b:81:00:94:8f:fa:b2:a4:90:69:6f:c7:5f:cc:6e:cc:9a:b4: 24:b1:a6:95:fd:12:c7:58:b8:ed:06:47:b4:22:12:f0:b0:e5: 1e:8e:c3:26:0b:2d:d1:a5:f7:27:92:7b:f1:33:a3:16:3d:66: e4:b6:f5:b0:e9:ab:8a:e6:16:e0:fc:9a:d0:55:18:6f:f8:1e: cb:5d:17:4b:2f:c3:e4:a2:70:c3:ac:72:d0:8e:21:2f:67:7a: 7c:66:68:17:9d:07:3e:c5:98:ed:85:1c:d8:10:68:5b:62:0a: fb:02:d4:3a:1f:79:e1:d8:37:25:e7:65:0e:b5:8d:25:77:86: be:91:0d:c6:ac:8b:96:36:50:49:f7:93:d9:0b:4e:3a:02:7e: 35:db:2b:2f:26:46:05:5d:75:00:b0:84:9f:2d:ed:9c:c0:f8: c2:dd:d1:3a:d2:74:68:46:87:ee:ec:56:f6:01:08:8e:26:12: 3b:dc:1d:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDgwNjA1MDU2MzM5MzRFNEFDOTA3MTdCMjMwOTRERjk4 NDU2QUJFOTUwHhcNMjUwODEwMjEzMjE3WhcNMjUwODE3MjEzMjE3WjAYMRYwFAYD VQQDEw02ODk5MGZlMS00YzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWbn4KfV5tijV+FxIFXFPjx9sL6m6UNKOglr0LiwFOG9qtX43ODOtko9IbNj E9lsZcRl23VBoPrw0N+50+qAdNd5N0NB8WRhGcHxciEzNKEK4zlk1PkXS4A37zEw g81J0UJC+7yt77niOaFBKtJtKCdzcTQyvrNcQGA7PHh1yOFV5EGWLFKIKA4iMc7m GQj2nygdQ2HoDskbodaAj0ZC51XpPmza/WbbzrDA6ceQ2x7s2Bpz1vQhJiRMf+yW G651lN/2rR4hZhFvdIEV0KPr5xPkGo0inBT5vh0wUQLb3lSdDSz4/cg8x1yI0qZ9 jihK3f4B8vKRci4XN7QOWtZD4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo8Sbnh K5Bu5CWV32Y55yffEHzFMB8GA1UdIwQYMBaAFIBgUFYzk05KyQcXsjCU35hFar6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9nR0JRVmpPVFRrckpCeGV5TUpUZm1FVnF2 cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHQlFWak9UVGtySkJ4ZXlNSlRmbUVWcXZwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9nR0JRVmpPVFRr ckpCeGV5TUpUZm1FVnF2cFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDpTgN/F17bQCzEQBms3CJ2Lbu0J3Xja+CUDUUWKJznKntvcd1qVFV aTlnvKLiYhh5XBrpxRJF8MhkgSbaFHwKdrEbfo+kNx4rgQCUj/qypJBpb8dfzG7M mrQksaaV/RLHWLjtBke0IhLwsOUejsMmCy3RpfcnknvxM6MWPWbktvWw6auK5hbg /JrQVRhv+B7LXRdLL8PkonDDrHLQjiEvZ3p8ZmgXnQc+xZjthRzYEGhbYgr7AtQ6 H3nh2Dcl52UOtY0ld4a+kQ3GrIuWNlBJ95PZC046An412ysvJkYFXXUAsISfLe2c wPjC3dE60nRoRofu7Fb2AQiOJhI73B2p -----END CERTIFICATE-----Generated at Tue Aug 12 19:11:20 2025 by rpki-client