$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: sAUapqTfCWW5piEaEP3ctiQIvcxegOawTd0VgeMPpaE= Subject key identifier: 5A:09:B0:26:45:E9:7F:7F:B7:F9:31:2C:3F:92:CF:17:49:91:FB:DB Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 0218 Signing time: Sat 09 Aug 2025 02:30:36 +0000 Manifest this update: Sat 09 Aug 2025 02:30:35 +0000 Manifest next update: Sat 16 Aug 2025 02:30:35 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: wLhv1vP+zOOYfRaLcdcgMjKdjAcNoXgcUAvYAAP5anA=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Aug 9 02:30:35 2025 GMT Not After : Aug 16 02:30:35 2025 GMT Subject: CN=6896b2cc-5ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1c:d7:0b:39:a7:b7:12:f8:75:e6:0c:1b:7c: 61:5d:50:02:36:22:fd:76:4f:42:79:73:9f:21:ea: a8:d3:be:d9:e2:ff:5a:7e:f2:5b:79:67:3a:74:17: ef:81:5c:9a:fd:1e:cc:dc:9f:cb:33:04:2c:d1:65: 34:14:1d:01:14:fa:cd:47:51:78:d3:39:83:c5:fd: 51:1e:1f:ec:9d:6f:79:01:9d:0a:b3:8d:fe:c6:e9: 94:ee:2b:b4:43:8e:c3:4e:19:95:ff:ad:e3:3b:46: 4e:0e:79:21:a7:98:dc:73:fc:e6:b4:2c:be:f2:82: 12:97:aa:72:e8:29:45:65:45:24:fd:38:1c:92:e4: a5:92:bf:6a:64:ad:80:51:20:03:cc:76:77:3f:b2: 3d:8a:c6:37:e3:c7:f9:d9:e0:60:88:53:c3:66:60: 89:e2:ab:f7:a5:00:da:8a:95:42:4c:5f:d5:9b:4a: 55:7d:16:91:f1:21:df:72:d5:fe:57:2d:86:f5:57: 4b:87:44:a6:ad:8e:82:34:ec:20:e0:1d:10:66:c8: 63:7d:e1:18:6e:fe:b8:27:2f:d4:2d:37:8e:f0:e7: f9:85:62:65:f8:ab:33:3d:da:fd:83:d1:b7:8e:0c: d3:79:89:83:7c:18:b3:1e:f4:27:4d:70:06:6f:54: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:B0:26:45:E9:7F:7F:B7:F9:31:2C:3F:92:CF:17:49:91:FB:DB X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5d:4f:7d:35:8a:ea:df:3f:90:c8:bb:f3:06:8c:3f:9a:8a: 92:e5:6b:35:40:5e:b4:2c:8f:09:31:31:04:0b:00:f4:d3:88: f6:fe:d7:d0:e6:a3:8e:93:d7:55:08:50:cf:46:ed:4d:70:de: e5:6a:d7:24:24:40:32:5e:17:5d:ec:79:84:3a:f5:43:7f:a4: ba:30:63:33:ed:a3:ce:1a:41:69:6f:da:a2:2c:9d:84:b3:61: 5a:d8:cc:0c:ec:f8:3c:77:0b:a8:5d:df:8f:f5:33:5e:c5:13: ae:7f:d2:d5:e2:e3:9b:2b:77:87:75:6f:af:47:db:3b:ec:82: 53:80:ef:0c:d5:87:e5:e7:68:cd:58:1d:55:dc:0e:17:2c:1e: 7b:f3:07:29:5a:14:14:ab:1e:98:e3:2f:27:f7:7a:7f:d4:41: 52:7f:d8:34:17:32:ff:7f:05:1e:af:83:16:c4:7e:ee:84:e7: 8d:b4:97:ea:fb:b6:ac:fd:05:47:a8:94:c0:15:e8:87:98:72: 67:41:8a:04:95:6e:12:fb:b0:bf:52:f5:6a:07:56:ef:f4:48: 36:5f:6f:1a:81:f4:91:24:23:15:18:2d:da:ae:3e:b7:80:54: cb:14:57:69:8f:ed:27:c0:8a:c5:4e:42:6b:4a:c0:d9:98:da: 21:f2:55:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwODA5MDIzMDM1WhcNMjUwODE2MDIzMDM1WjAYMRYwFAYD VQQDEw02ODk2YjJjYy01ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xzXCzmntxL4deYMG3xhXVACNiL9dk9CeXOfIeqo077Z4v9afvJbeWc6dBfv gVya/R7M3J/LMwQs0WU0FB0BFPrNR1F40zmDxf1RHh/snW95AZ0Ks43+xumU7iu0 Q47DThmV/63jO0ZODnkhp5jcc/zmtCy+8oISl6py6ClFZUUk/TgckuSlkr9qZK2A USADzHZ3P7I9isY348f52eBgiFPDZmCJ4qv3pQDaipVCTF/Vm0pVfRaR8SHfctX+ Vy2G9VdLh0SmrY6CNOwg4B0QZshjfeEYbv64Jy/ULTeO8Of5hWJl+KszPdr9g9G3 jgzTeYmDfBizHvQnTXAGb1T2sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoJsCZF 6X9/t/kxLD+SzxdJkfvbMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEXU99NYrq3z+QyLvzBow/moqS5Ws1QF60LI8JMTEECwD004j2/tfQ 5qOOk9dVCFDPRu1NcN7latckJEAyXhdd7HmEOvVDf6S6MGMz7aPOGkFpb9qiLJ2E s2Fa2MwM7Pg8dwuoXd+P9TNexROuf9LV4uObK3eHdW+vR9s77IJTgO8M1Yfl52jN WB1V3A4XLB578wcpWhQUqx6Y4y8n93p/1EFSf9g0FzL/fwUer4MWxH7uhOeNtJfq +7as/QVHqJTAFeiHmHJnQYoElW4S+7C/UvVqB1bv9Eg2X28agfSRJCMVGC3arj63 gFTLFFdpj+0nwIrFTkJrSsDZmNoh8lVD -----END CERTIFICATE-----Generated at Sat Aug 9 15:14:01 2025 by rpki-client