$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: vSZ5KqDzdEq6+DvN77IpO/v0D667gyJJ0qbW5MecTsM= Subject key identifier: 1E:FF:EA:4A:DB:E8:7D:9F:38:A0:FF:D4:9E:55:62:41:2E:D7:2F:0F Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 01FC Signing time: Sun 15 Jun 2025 01:43:19 +0000 Manifest this update: Sun 15 Jun 2025 01:43:18 +0000 Manifest next update: Sun 22 Jun 2025 01:43:18 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: cqn9l5XRqDQiIAoxVr4CdGEhXOfZVVX4ImxP/npn1tI=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Jun 15 01:43:18 2025 GMT Not After : Jun 22 01:43:18 2025 GMT Subject: CN=684e2536-a2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:4b:db:5f:13:6d:ee:97:08:b5:fd:0e:bf: 2b:c1:49:6c:70:45:5a:65:ac:a7:68:90:46:c1:46: 1d:ed:99:eb:d9:cf:a5:ea:66:c2:4b:a3:a3:a0:6d: a4:e4:9d:ba:7e:bb:d3:1a:5c:f4:77:c1:02:92:7a: a9:d8:97:66:a9:d3:99:3e:be:89:c7:ff:bc:a3:85: 79:35:91:90:be:66:94:5b:de:81:aa:e2:61:a7:a6: a2:b7:f1:32:6e:ba:3d:1f:ab:f0:03:c2:00:e8:23: 3e:c3:3d:b9:a8:95:82:04:ea:76:dc:33:58:d8:a1: c8:bf:ac:82:48:1f:6c:23:fa:e4:34:d3:a3:67:c3: 19:d8:b2:72:e9:54:11:02:da:cb:9b:aa:21:71:45: 01:7a:b7:cc:1c:53:5a:0c:ca:be:cb:27:01:de:16: 4e:e1:f3:ed:f4:b8:87:d1:87:ec:23:c3:70:01:96: 42:5f:4b:9e:24:32:22:e8:59:0b:16:ee:67:32:23: 3b:6e:24:14:21:c6:96:21:ad:3d:c4:c0:1d:56:f9: f1:f6:4c:53:ab:5d:ed:e3:36:fa:0b:25:f6:1c:34: 90:27:56:45:42:20:f1:88:d2:73:6c:e6:de:7e:45: df:d8:9d:6a:1d:43:fa:e3:51:33:85:d5:19:53:64: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FF:EA:4A:DB:E8:7D:9F:38:A0:FF:D4:9E:55:62:41:2E:D7:2F:0F X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ea:ad:26:20:c8:5b:0f:5b:a1:97:cf:f8:74:1e:08:1c:15: ec:f8:90:ec:11:7d:a8:43:c4:63:5f:af:0c:88:60:70:7d:68: 79:22:85:93:0c:97:6f:2c:6e:ee:9a:1e:c6:32:4f:36:e9:eb: fe:ad:d0:42:fb:93:a3:f3:bf:69:f0:fc:6b:a4:ac:c4:22:1d: d2:c0:b5:a7:05:83:fc:7e:9e:d0:23:83:92:c9:68:85:b7:29: d5:86:a5:7e:c4:56:b0:f3:23:f4:7d:32:6c:c7:cf:c6:74:1a: 70:64:42:47:d4:44:1d:10:15:20:13:b5:ed:ec:c7:c9:a0:77: d9:64:31:61:0d:27:8b:e4:2e:c8:8c:20:b7:d8:1a:ca:83:f4: ac:2b:d7:a8:d2:f5:2c:45:e9:af:ab:82:7c:fc:61:45:c9:ad: 08:9b:a4:dc:dc:a2:49:6c:00:08:1b:7f:7e:bb:e0:a2:9a:8e: b5:5f:13:af:a8:5e:2e:23:39:51:c7:4b:f3:eb:2a:a4:ac:d4: 00:87:4d:0d:bb:90:81:6e:7a:23:c8:72:f2:4a:8d:0e:8e:c8: 8f:86:32:a0:d3:47:11:a3:79:44:d7:d4:36:30:b1:bf:d8:e3: fe:09:e7:cb:52:8b:33:63:44:67:37:e8:73:14:bd:c3:71:b9: 8a:9e:d4:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwNjE1MDE0MzE4WhcNMjUwNjIyMDE0MzE4WjAYMRYwFAYD VQQDEw02ODRlMjUzNi1hMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPhL218Tbe6XCLX9Dr8rwUlscEVaZaynaJBGwUYd7Znr2c+l6mbCS6OjoG2k 5J26frvTGlz0d8ECknqp2JdmqdOZPr6Jx/+8o4V5NZGQvmaUW96BquJhp6ait/Ey bro9H6vwA8IA6CM+wz25qJWCBOp23DNY2KHIv6yCSB9sI/rkNNOjZ8MZ2LJy6VQR AtrLm6ohcUUBerfMHFNaDMq+yycB3hZO4fPt9LiH0YfsI8NwAZZCX0ueJDIi6FkL Fu5nMiM7biQUIcaWIa09xMAdVvnx9kxTq13t4zb6CyX2HDSQJ1ZFQiDxiNJzbObe fkXf2J1qHUP641EzhdUZU2SBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7/6krb 6H2fOKD/1J5VYkEu1y8PMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl6q0mIMhbD1uhl8/4dB4IHBXs+JDsEX2oQ8RjX68MiGBwfWh5IoWT DJdvLG7umh7GMk826ev+rdBC+5Oj879p8PxrpKzEIh3SwLWnBYP8fp7QI4OSyWiF tynVhqV+xFaw8yP0fTJsx8/GdBpwZEJH1EQdEBUgE7Xt7MfJoHfZZDFhDSeL5C7I jCC32BrKg/SsK9eo0vUsRemvq4J8/GFFya0Im6Tc3KJJbAAIG39+u+Cimo61XxOv qF4uIzlRx0vz6yqkrNQAh00Nu5CBbnojyHLySo0OjsiPhjKg00cRo3lE19Q2MLG/ 2OP+CefLUoszY0RnN+hzFL3DcbmKntSI -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:33 2025 by rpki-client