$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: tX8YsUYDs/8fvTGJRhnmyvoWx0liSsfVOL2YGmg7G2o= Subject key identifier: A1:A2:04:E0:A2:FF:F9:18:60:E7:0A:7F:1A:F7:10:DE:20:BD:95:E0 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: 0117 Signing time: Sun 03 Aug 2025 05:10:25 +0000 Manifest this update: Sun 03 Aug 2025 05:10:24 +0000 Manifest next update: Sun 10 Aug 2025 05:10:24 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: AdZXO+4qgzUPzfWelOTmCVZ9j4QW1gKj6xBTMO8BF7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: Aug 3 05:10:24 2025 GMT Not After : Aug 10 05:10:24 2025 GMT Subject: CN=688eef40-7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:82:ec:49:22:db:71:44:93:a3:09:4c:de: c4:1a:94:06:71:c6:1b:ab:15:9e:0c:c0:6a:09:e0: d0:17:ba:b1:35:0f:53:21:98:64:b4:5c:85:86:e1: e7:48:6b:f5:57:af:3e:94:58:d2:56:03:a2:1b:34: 76:2d:cd:99:b5:d4:d5:b8:c7:46:a7:85:31:b8:47: 85:e5:8f:2f:62:a1:0b:14:25:2e:50:4b:ad:76:c3: 1a:2f:8f:c7:d2:1b:72:38:17:05:7c:05:73:b7:8d: f9:df:ea:30:4c:dc:f8:15:e3:5d:ce:80:d6:f2:1b: 56:92:e4:51:d5:a7:5b:81:77:74:33:87:51:5b:cc: 93:53:d9:3f:13:71:ed:4e:75:33:99:65:05:45:06: 25:12:61:80:db:2c:a2:18:87:2d:64:17:f0:2d:3d: d3:7c:f3:f1:a7:7f:a5:36:94:b0:2e:25:8e:1e:6d: 45:2d:40:f9:dd:51:1d:e7:f9:1b:76:d9:3b:dd:c8: b9:fd:28:5c:37:f0:cc:19:c2:fa:8d:42:b1:15:21: a6:a0:b9:7d:c2:49:c9:02:18:71:d5:34:0e:f2:57: a0:c2:b1:9a:16:32:ce:d2:8d:dd:14:a0:1a:45:56: d4:7f:9d:9e:8a:1e:4a:b7:19:68:59:c6:03:81:c3: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A2:04:E0:A2:FF:F9:18:60:E7:0A:7F:1A:F7:10:DE:20:BD:95:E0 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a9:10:e7:90:4e:69:40:25:20:80:73:b8:c3:9e:c9:a8:f2: 24:b3:d2:e7:d2:e1:e4:6d:31:a1:a8:5c:12:c4:6c:a7:d9:0d: 83:40:93:9c:77:61:b0:ab:52:d4:08:c9:a5:5c:be:b3:8e:2a: c4:97:29:47:b5:04:08:aa:78:1e:89:d6:b1:5d:09:7a:fa:5f: 69:8f:c1:53:44:1b:55:54:a4:2f:5d:01:6e:13:d3:ca:b4:df: ca:84:ec:15:f2:43:d6:13:53:5d:8f:5c:11:c5:b0:76:3e:43: ec:3f:3f:e7:3a:62:fc:29:09:8b:0e:b2:8c:2d:f5:88:3b:b2: a8:63:31:df:23:79:4a:9e:c4:33:d6:8f:36:42:c1:d1:10:94: a6:2f:5a:87:f7:86:ca:40:db:37:4f:28:a7:00:ab:0f:a9:da: c5:b5:59:a4:cf:c0:a7:b1:71:4f:22:d8:05:63:9f:70:2b:08: c7:76:49:5c:73:55:21:1b:38:09:86:cc:2d:40:e0:7a:52:e1: ff:fe:76:33:58:b7:9f:15:15:ad:b4:73:b1:df:c5:35:a9:d0: b5:e3:87:00:cc:4b:fe:33:d5:29:58:6e:bc:81:ba:fd:6a:38: de:41:66:f9:ee:89:c8:ba:c9:12:5b:eb:97:d9:4a:80:d4:ad: 8a:b8:94:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUwODAzMDUxMDI0WhcNMjUwODEwMDUxMDI0WjAYMRYwFAYD VQQDEw02ODhlZWY0MC03ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0SC7Eki23FEk6MJTN7EGpQGccYbqxWeDMBqCeDQF7qxNQ9TIZhktFyFhuHn SGv1V68+lFjSVgOiGzR2Lc2ZtdTVuMdGp4UxuEeF5Y8vYqELFCUuUEutdsMaL4/H 0htyOBcFfAVzt4353+owTNz4FeNdzoDW8htWkuRR1adbgXd0M4dRW8yTU9k/E3Ht TnUzmWUFRQYlEmGA2yyiGIctZBfwLT3TfPPxp3+lNpSwLiWOHm1FLUD53VEd5/kb dtk73ci5/ShcN/DMGcL6jUKxFSGmoLl9wknJAhhx1TQO8legwrGaFjLO0o3dFKAa RVbUf52eih5KtxloWcYDgcP9PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGiBOCi //kYYOcKfxr3EN4gvZXgMB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqqRDnkE5pQCUggHO4w57JqPIks9Ln0uHkbTGhqFwSxGyn2Q2DQJOc d2Gwq1LUCMmlXL6zjirElylHtQQIqngeidaxXQl6+l9pj8FTRBtVVKQvXQFuE9PK tN/KhOwV8kPWE1Ndj1wRxbB2PkPsPz/nOmL8KQmLDrKMLfWIO7KoYzHfI3lKnsQz 1o82QsHREJSmL1qH94bKQNs3TyinAKsPqdrFtVmkz8CnsXFPItgFY59wKwjHdklc c1UhGzgJhswtQOB6UuH//nYzWLefFRWttHOx38U1qdC144cAzEv+M9UpWG68gbr9 ajjeQWb57onIuskSW+uX2UqA1K2KuJRB -----END CERTIFICATE-----Generated at Mon Aug 4 16:10:39 2025 by rpki-client