$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: q9oYPxi2otgYinYcTOBjIsWx8HWGCIIWO1JDRLxSf5Q= Subject key identifier: 43:25:A4:93:C7:FB:5C:32:E8:B6:12:0F:DA:B9:BF:FE:0B:F7:37:B0 Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 14E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 14DD Signing time: Tue 12 Aug 2025 16:56:40 +0000 Manifest this update: Tue 12 Aug 2025 16:56:40 +0000 Manifest next update: Tue 19 Aug 2025 16:56:40 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: 0oaHxxADYP3Sw0te0WZyj67cBe1j2cxbaV+Awsdc6I0=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5350 (0x14e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Aug 12 16:56:40 2025 GMT Not After : Aug 19 16:56:40 2025 GMT Subject: CN=689b7248-2eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a2:c4:ee:60:12:04:4b:e6:fa:03:62:1e:a1: 6e:16:37:c4:2d:a6:25:17:ee:9a:f9:8d:0c:29:5b: c2:f3:e9:75:c7:fb:22:36:4c:d9:c7:5a:dc:04:1a: 0a:f8:7c:c3:7f:8e:d4:58:ff:df:5e:4a:bf:86:14: e3:fe:f5:04:0c:5a:06:32:f5:bb:b4:3a:ae:2e:44: 0c:c9:02:4e:83:88:f5:67:2b:bc:ef:67:a4:cc:e6: fb:99:aa:ce:5b:46:e5:8e:71:4c:51:b6:d1:b9:79: 18:11:fd:ea:8e:12:37:3a:f2:6a:df:c6:3a:7b:f7: ec:5b:c7:76:ed:e0:b6:cf:ff:c0:26:25:ea:84:f5: 8b:c2:a0:c0:4f:43:66:e8:26:49:0f:27:72:7e:30: bd:72:3d:2a:6b:49:75:1b:c1:d9:69:8a:1f:55:89: 6f:fb:cc:8e:4b:9f:98:98:a2:7b:6d:18:b1:1c:9e: 11:59:c1:46:c4:05:8e:b9:e3:5b:55:1c:49:24:be: b6:0d:68:18:dc:bb:93:f1:b4:fd:47:c6:09:02:c6: 04:21:d7:b9:7d:24:8f:0d:1a:be:36:56:b7:a6:8b: ff:df:be:a6:66:fb:c2:2f:f6:67:8d:9e:3e:e9:0f: 8b:aa:bb:23:d0:44:c7:65:14:23:40:a8:53:a5:ea: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:25:A4:93:C7:FB:5C:32:E8:B6:12:0F:DA:B9:BF:FE:0B:F7:37:B0 X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1e:9d:88:3f:fc:96:ab:fd:2a:96:0b:4b:43:1f:8d:61:37: ce:6d:8e:27:b6:d6:3b:86:5d:7b:66:1a:44:31:7a:d8:82:2e: 58:d6:d3:07:2a:79:c5:21:f8:ee:3e:63:14:28:4b:22:6c:ea: fe:87:b3:4f:79:11:63:06:98:2b:53:f2:c6:a5:8a:d5:23:e7: 0d:f1:10:2f:b4:12:4c:90:30:b2:15:07:73:71:b0:6c:c1:c5: 8e:8a:aa:51:b2:b3:52:27:d0:57:fb:42:86:67:16:71:3a:b7: 61:7b:4e:f4:26:62:dc:2b:7e:9b:c6:68:27:ac:65:95:d7:74: e9:f2:03:db:dc:29:ad:43:8e:c9:5d:e3:cf:d9:51:8d:c7:8d: ef:a9:f2:d3:08:0e:f6:e6:8c:5b:1f:d0:db:56:81:69:a8:50: 05:4e:47:e0:3e:5b:6b:1e:64:5c:28:83:b6:5d:56:b1:9c:6f: c7:e7:7d:f6:a9:9a:e7:9f:69:77:d6:47:55:d6:16:16:2b:cd: e6:71:bf:6a:8c:65:c0:26:6e:9a:67:bf:fb:00:98:b8:84:7e: 4c:b9:2a:28:f3:7e:44:fc:15:6d:7a:c8:41:1f:52:b1:9b:8d: 00:63:06:a7:a1:6d:b6:c0:bd:2a:25:f3:8e:8a:1c:55:e3:02: c2:bd:b6:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwODEyMTY1NjQwWhcNMjUwODE5MTY1NjQwWjAYMRYwFAYD VQQDEw02ODliNzI0OC0yZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+qLE7mASBEvm+gNiHqFuFjfELaYlF+6a+Y0MKVvC8+l1x/siNkzZx1rcBBoK +HzDf47UWP/fXkq/hhTj/vUEDFoGMvW7tDquLkQMyQJOg4j1Zyu872ekzOb7marO W0bljnFMUbbRuXkYEf3qjhI3OvJq38Y6e/fsW8d27eC2z//AJiXqhPWLwqDAT0Nm 6CZJDydyfjC9cj0qa0l1G8HZaYofVYlv+8yOS5+YmKJ7bRixHJ4RWcFGxAWOueNb VRxJJL62DWgY3LuT8bT9R8YJAsYEIde5fSSPDRq+Nla3pov/376mZvvCL/ZnjZ4+ 6Q+Lqrsj0ETHZRQjQKhTpeqfLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMlpJPH +1wy6LYSD9q5v/4L9zewMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeHp2IP/yWq/0qlgtLQx+NYTfObY4nttY7hl17ZhpEMXrYgi5Y1tMH KnnFIfjuPmMUKEsibOr+h7NPeRFjBpgrU/LGpYrVI+cN8RAvtBJMkDCyFQdzcbBs wcWOiqpRsrNSJ9BX+0KGZxZxOrdhe070JmLcK36bxmgnrGWV13Tp8gPb3CmtQ47J XePP2VGNx43vqfLTCA725oxbH9DbVoFpqFAFTkfgPltrHmRcKIO2XVaxnG/H5332 qZrnn2l31kdV1hYWK83mcb9qjGXAJm6aZ7/7AJi4hH5MuSoo835E/BVteshBH1Kx m40AYwanoW22wL0qJfOOihxV4wLCvbbl -----END CERTIFICATE-----Generated at Wed Aug 13 02:13:29 2025 by rpki-client