$ rpki-client -vvf rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft File: gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft (raw, json) Hash identifier: 0+5BPxofHfTm5GtfX14Wl7kSEFz/GRYVkmR9KoHzkWc= Subject key identifier: AB:12:0C:5B:01:42:11:63:F7:37:CD:24:82:98:B5:31:FD:49:EF:89 Authority key identifier: 81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC Certificate issuer: /CN=A916C6A1/serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft Manifest number: 0591 Signing time: Mon 16 Jun 2025 22:51:44 +0000 Manifest this update: Mon 16 Jun 2025 22:51:44 +0000 Manifest next update: Mon 23 Jun 2025 22:51:44 +0000 Files and hashes: 1: gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl (hash: fMHFG3E1QNeafpz4s52mDhxnscJP18zzpfo6gO6cUQw=) 2: 72AA1A38D7CB11EBB8307453C4F9AE02.roa (hash: YHV0pOPKI4RCYfRV7LWo65eFNEXv2JBj+IEUg9SpWKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C6A1, serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC Validity Not Before: Jun 16 22:51:44 2025 GMT Not After : Jun 23 22:51:44 2025 GMT Subject: CN=6850a000-effe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:1a:5c:18:d5:8b:38:10:53:98:82:bf:94: 9a:20:f6:3a:f7:a4:ed:2f:e7:48:db:3e:f4:70:df: 41:43:6c:73:7a:f1:5c:eb:27:11:96:20:e4:28:ee: a9:b7:18:2e:04:ed:d9:51:d5:c8:52:da:9d:c0:cc: dc:ef:11:bd:ed:0c:01:c3:0b:f7:fa:b0:21:b3:98: 64:2c:fa:4e:99:d9:42:19:1c:f4:9f:e0:8b:1a:cf: f4:5a:94:20:1c:3d:6b:20:5b:da:fe:1c:ab:c2:e7: 94:ef:ab:8f:74:ba:52:74:4e:aa:3a:11:4b:47:9f: 95:c4:bd:bb:d1:56:0d:ee:c3:b1:42:a8:9c:33:e6: d2:12:91:8b:8a:99:d7:c9:c7:c7:86:85:cd:9f:70: a3:d5:14:cf:c0:22:4f:40:7b:e7:9c:7f:87:d7:65: 37:98:92:60:c2:00:5c:6a:4a:3b:2b:1e:5b:50:cc: f9:88:69:86:32:06:3e:11:eb:af:31:e1:c6:55:13: 5b:09:2d:25:ce:35:5b:57:ba:1e:1d:47:94:4a:e6: 64:0b:db:39:e2:cf:b8:65:e1:45:c4:8e:14:a9:f8: 0f:e9:23:7a:60:4d:f6:1a:15:d2:50:f4:58:b2:c6: 93:e1:5b:4f:1e:c0:bc:17:77:ba:76:ad:b5:4a:a4: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:0C:5B:01:42:11:63:F7:37:CD:24:82:98:B5:31:FD:49:EF:89 X509v3 Authority Key Identifier: keyid:81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b8:3f:a6:8e:75:6f:cb:3d:0c:48:a4:c8:71:8a:f1:10:89: da:a2:72:50:64:f1:a1:16:9c:88:87:06:a4:11:dc:09:55:fa: 43:8e:23:f7:fd:16:d2:3b:a3:a3:7d:a1:de:46:94:80:2f:bf: 51:05:12:87:e5:71:63:d8:b3:48:b4:e1:9f:a5:50:b2:d6:6f: b8:66:4a:7f:32:eb:fb:1d:b9:4c:e3:75:63:c7:6c:96:a1:e2: 75:2b:e1:50:9f:9d:56:c7:5b:95:e6:f5:2f:3f:b1:d7:99:f6: 73:64:c3:38:e8:09:fa:34:a8:1d:55:51:6d:22:23:74:e4:33: e7:1c:28:91:4e:23:44:99:84:53:96:d8:07:f6:f6:6e:ec:ee: 25:48:2a:4e:3b:1e:da:39:b8:49:e0:94:a5:09:71:56:2a:75: d2:71:33:78:13:2e:fd:d6:cb:33:86:bb:31:34:2e:2d:80:fd: cb:a1:42:a4:c7:e9:89:98:b2:be:ba:4b:5e:70:5e:09:f8:df: f3:cc:89:06:b9:32:5b:84:be:c9:67:e0:5b:e3:9d:d2:ef:af: 78:2b:95:5f:d9:86:fc:17:3a:39:00:a3:d4:0a:b7:2d:a4:c7: 60:d4:ce:a5:5e:01:88:52:30:f6:4f:44:9d:7d:fd:6c:0a:6f: 7f:e9:3a:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2QTExMTAvBgNVBAUTKDgxQkZERTkxNjlENUMyQzBFQjQ1MTc2MjA3NTM3Mzc2 OTlERjE2QUMwHhcNMjUwNjE2MjI1MTQ0WhcNMjUwNjIzMjI1MTQ0WjAYMRYwFAYD VQQDEw02ODUwYTAwMC1lZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv14aXBjVizgQU5iCv5SaIPY696TtL+dI2z70cN9BQ2xzevFc6ycRliDkKO6p txguBO3ZUdXIUtqdwMzc7xG97QwBwwv3+rAhs5hkLPpOmdlCGRz0n+CLGs/0WpQg HD1rIFva/hyrwueU76uPdLpSdE6qOhFLR5+VxL270VYN7sOxQqicM+bSEpGLipnX ycfHhoXNn3Cj1RTPwCJPQHvnnH+H12U3mJJgwgBcako7Kx5bUMz5iGmGMgY+Eeuv MeHGVRNbCS0lzjVbV7oeHUeUSuZkC9s54s+4ZeFFxI4UqfgP6SN6YE32GhXSUPRY ssaT4VtPHsC8F3e6dq21SqRa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsSDFsB QhFj9zfNJIKYtTH9Se+JMB8GA1UdIwQYMBaAFIG/3pFp1cLA60UXYgdTc3aZ3xas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzZBMS83MTE5QzVFQUQ3 QzgxMUVCODQwNjI0NEVDNEY5QUUwMi9nYl9la1duVndzRHJSUmRpQjFOemRwbmZG cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2diX2VrV25Wd3NEclJSZGlCMU56ZHBuZkZxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzZBMS83MTE5QzVFQUQ3QzgxMUVCODQwNjI0NEVDNEY5QUUwMi9nYl9la1duVndz RHJSUmRpQjFOemRwbmZGcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6uD+mjnVvyz0MSKTIcYrxEInaonJQZPGhFpyIhwakEdwJVfpDjiP3 /RbSO6OjfaHeRpSAL79RBRKH5XFj2LNItOGfpVCy1m+4Zkp/Muv7HblM43Vjx2yW oeJ1K+FQn51Wx1uV5vUvP7HXmfZzZMM46An6NKgdVVFtIiN05DPnHCiRTiNEmYRT ltgH9vZu7O4lSCpOOx7aObhJ4JSlCXFWKnXScTN4Ey791sszhrsxNC4tgP3LoUKk x+mJmLK+uktecF4J+N/zzIkGuTJbhL7JZ+Bb453S7694K5Vf2Yb8Fzo5AKPUCrct pMdg1M6lXgGIUjD2T0Sdff1sCm9/6Tqk -----END CERTIFICATE-----Generated at Tue Jun 17 12:03:34 2025 by rpki-client