$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: NRYfWKJZ85G4Mx4s6g34QylvMogu9RFFKw1fiGDrbPg= Subject key identifier: 89:69:A5:9D:D7:71:59:EA:98:A4:12:DE:A9:27:BE:C6:13:19:87:75 Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 14C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 14BF Signing time: Sat 14 Jun 2025 16:48:23 +0000 Manifest this update: Sat 14 Jun 2025 16:48:22 +0000 Manifest next update: Sat 21 Jun 2025 16:48:22 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: m8Utlc0MzbR3uW+/+9R3rizIfkFsChXfVOAbzi5ebR8=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5320 (0x14c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Jun 14 16:48:22 2025 GMT Not After : Jun 21 16:48:22 2025 GMT Subject: CN=684da7d6-5f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:a2:0b:4e:7c:d3:66:dd:cd:65:36:2b:c6: 5b:dc:9d:1f:ff:5a:86:6b:df:8b:f1:89:4c:c1:57: 81:0e:71:f9:a8:4b:a3:61:8e:6c:af:3c:60:75:d1: 6d:79:80:1b:7f:85:80:a4:31:98:d5:b4:58:9d:66: ed:0e:b0:7c:84:9a:55:ae:f1:54:ac:35:de:8c:54: 13:33:2c:b6:aa:84:c5:a7:8a:2e:77:8e:82:36:b0: 82:a8:be:b1:2b:b6:fc:f3:b2:17:84:8d:80:48:0f: cc:a4:ac:be:1f:90:a0:8f:36:37:a5:03:e5:d4:93: b0:39:11:b2:ab:3d:5f:47:9f:ac:15:c6:09:19:56: 47:f5:f0:bd:f7:7c:5e:c1:d3:6f:ec:57:5d:e2:49: 25:b5:a6:d7:ec:c2:bd:85:63:03:46:1d:00:de:96: 8e:64:d3:c7:ec:1a:52:dd:bb:4b:40:56:89:b6:5c: 8d:c1:f6:3d:63:90:a7:83:0b:87:4e:68:78:3c:a1: 43:d4:25:81:cf:be:d4:e3:2a:6f:d5:17:80:c4:70: c5:bd:62:e4:cf:5c:93:93:51:69:ae:d0:49:45:0a: 13:48:b1:12:d1:35:f5:bb:06:82:57:9d:d4:01:f9: bf:6a:d0:c0:ef:aa:52:e2:39:b2:5b:fe:af:b5:17: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:69:A5:9D:D7:71:59:EA:98:A4:12:DE:A9:27:BE:C6:13:19:87:75 X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1d:93:47:c3:da:1b:3a:16:89:a5:e6:28:94:d7:a6:fd:f8: 27:10:c3:79:fd:05:69:5f:e8:d5:dc:f5:56:a0:09:21:5f:57: e8:70:0f:0d:43:10:69:7b:f9:45:08:8c:87:25:6f:23:fc:52: 18:ac:10:e0:6b:51:d9:05:8a:1e:39:09:73:7b:f3:17:8d:8b: d4:0a:60:f3:c9:9f:db:dc:fe:b5:84:93:c3:3a:0e:c3:da:ce: 34:5c:c3:24:2c:c0:7d:9e:0e:71:dd:59:39:14:24:82:29:6d: 90:26:19:ac:5d:43:3b:27:1c:06:d6:80:fa:70:75:15:27:75: 54:b7:60:26:65:e9:ed:a0:e0:b2:b4:1a:88:c4:3c:05:b5:bb: 2b:78:70:e3:6f:9f:45:8c:d1:29:81:b0:98:72:32:9c:37:65: 70:95:01:f4:7e:ca:de:81:47:9c:f7:80:e3:cd:d8:63:6d:8e: 99:03:fe:98:a0:e1:d6:cd:27:89:72:31:5f:70:f2:6e:75:21: b6:5f:a7:ab:35:83:0b:a0:8a:bb:b3:50:31:37:99:21:34:3f: c8:3e:d1:3c:31:61:bb:f3:6f:4c:39:ac:1f:e2:f2:1d:f6:20: c8:87:80:35:ad:9b:f0:90:12:35:97:ca:81:cc:0c:54:e6:0b: 35:e9:6a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwNjE0MTY0ODIyWhcNMjUwNjIxMTY0ODIyWjAYMRYwFAYD VQQDEw02ODRkYTdkNi01ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVqiC05802bdzWU2K8Zb3J0f/1qGa9+L8YlMwVeBDnH5qEujYY5srzxgddFt eYAbf4WApDGY1bRYnWbtDrB8hJpVrvFUrDXejFQTMyy2qoTFp4oud46CNrCCqL6x K7b887IXhI2ASA/MpKy+H5CgjzY3pQPl1JOwORGyqz1fR5+sFcYJGVZH9fC993xe wdNv7Fdd4kkltabX7MK9hWMDRh0A3paOZNPH7BpS3btLQFaJtlyNwfY9Y5CngwuH Tmh4PKFD1CWBz77U4ypv1ReAxHDFvWLkz1yTk1FprtBJRQoTSLES0TX1uwaCV53U Afm/atDA76pS4jmyW/6vtRdwMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlppZ3X cVnqmKQS3qknvsYTGYd1MB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASHZNHw9obOhaJpeYolNem/fgnEMN5/QVpX+jV3PVWoAkhX1focA8N QxBpe/lFCIyHJW8j/FIYrBDga1HZBYoeOQlze/MXjYvUCmDzyZ/b3P61hJPDOg7D 2s40XMMkLMB9ng5x3Vk5FCSCKW2QJhmsXUM7JxwG1oD6cHUVJ3VUt2AmZentoOCy tBqIxDwFtbsreHDjb59FjNEpgbCYcjKcN2VwlQH0fsregUec94DjzdhjbY6ZA/6Y oOHWzSeJcjFfcPJudSG2X6erNYMLoIq7s1AxN5khND/IPtE8MWG7829MOawf4vId 9iDIh4A1rZvwkBI1l8qBzAxU5gs16WqV -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:39 2025 by rpki-client