$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json) Hash identifier: MkD6EQn1LxkfcpUw6dIkyyWMDTVP+D0GeJh2oR+glzw= Subject key identifier: B8:34:92:D5:D4:8E:56:07:2B:F6:E3:B1:55:63:EE:7B:1E:E0:DA:33 Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft Manifest number: 0E Signing time: Sun 03 Aug 2025 08:29:32 +0000 Manifest this update: Sun 03 Aug 2025 08:29:31 +0000 Manifest next update: Sun 10 Aug 2025 08:29:31 +0000 Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: UvW71LTou0DNmoY305BdkSE3B46/4wBGami8TWMldjU=) 2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: jbmHjCRldQebtcE9n4Zv2veO89dDLab7PzgfvTloAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Validity Not Before: Aug 3 08:29:31 2025 GMT Not After : Aug 10 08:29:31 2025 GMT Subject: CN=688f1deb-801a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:83:bd:6a:ce:07:76:67:5c:82:6b:b7:bf: da:51:d8:b3:98:1d:bf:e7:e1:16:59:a5:02:49:0e: 86:f8:e4:2f:ed:84:cf:14:90:19:5d:e3:66:53:78: 4a:bf:1d:27:d3:6d:b3:ed:88:ef:72:2e:76:e8:9e: 1e:23:ee:34:97:98:9d:e3:bf:1d:e9:bf:b9:58:43: 39:b0:6e:af:05:8c:76:fb:78:58:fb:cd:1f:88:56: 36:46:85:1f:0b:40:75:fe:d6:f4:ef:86:26:7e:23: 21:e7:7a:37:01:a5:65:32:81:a4:55:3d:db:99:5d: af:33:c5:fa:5a:77:45:55:0e:3c:0d:96:5a:6f:a0: 6c:37:66:d3:cc:f3:5d:1b:ef:88:4b:d7:a5:bf:51: 22:79:7e:1e:79:ae:a6:d0:3e:3f:8b:6b:b0:78:82: 81:b6:4f:32:a8:74:41:03:74:7a:6b:88:8d:c3:13: 78:c5:86:00:60:e4:17:db:e0:57:30:82:93:90:71: d0:60:f1:56:78:8e:59:a3:2c:85:5c:52:98:3f:e2: 28:c4:5c:f1:83:05:29:3d:8d:9f:cb:aa:c4:56:74: e3:46:b0:bf:92:63:2c:29:97:21:18:e3:d2:b1:24: 63:90:2d:05:1a:4c:22:c0:98:fb:34:bf:cd:d4:20: 53:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:34:92:D5:D4:8E:56:07:2B:F6:E3:B1:55:63:EE:7B:1E:E0:DA:33 X509v3 Authority Key Identifier: keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:42:8e:fa:9c:07:cf:2d:05:eb:04:fe:55:4d:8c:14:79:c7: df:48:30:66:5e:c6:9f:1e:b1:33:ba:2b:08:f2:f3:d5:f5:67: 02:65:e2:c5:ce:3f:2f:32:d6:87:ba:ef:36:1a:64:22:0f:12: 60:f5:a7:3c:21:91:be:28:14:0a:ea:4e:d5:9c:0c:7a:65:a2: 2c:1d:08:59:cd:18:1a:60:7c:23:9b:45:ce:f4:ac:1d:98:d8: ff:8e:d1:54:42:d5:a5:87:8e:93:af:5d:b8:32:a1:a8:e1:3d: 67:1a:99:9a:f3:fe:d9:02:f3:85:43:a7:09:42:cb:0e:53:bf: e6:11:cd:d3:bd:9a:e3:f7:11:ec:b1:92:fd:ca:ac:73:d5:88: d6:0b:96:30:a8:d3:79:19:ac:90:4c:0f:d4:55:ee:65:eb:ec: 46:83:b5:ba:46:d3:db:4e:3c:12:8f:41:16:1a:58:1e:33:e0: a4:c4:61:fb:a5:ab:f4:50:e1:f9:0b:41:be:6b:90:03:5f:4a: 50:07:90:c7:ca:ee:4b:25:b0:40:f4:47:df:87:1f:fb:26:cd: be:a5:56:30:11:0f:69:ac:f3:62:30:12:75:42:08:00:39:92: 6e:41:63:d0:a3:7b:9a:e0:ca:e1:1d:7f:5d:ed:fe:e1:4e:b1: 89:42:dc:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODQyRTExMC8GA1UEBRMoMTlBMDQzODE5OUZERkUyNERDRjg1NjYyQTQ4QkRCNTc1 MUUxQjVEOTAeFw0yNTA4MDMwODI5MzFaFw0yNTA4MTAwODI5MzFaMBgxFjAUBgNV BAMTDTY4OGYxZGViLTgwMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOHoO9as4Hdmdcgmu3v9pR2LOYHb/n4RZZpQJJDob45C/thM8UkBld42ZTeEq/ HSfTbbPtiO9yLnbonh4j7jSXmJ3jvx3pv7lYQzmwbq8FjHb7eFj7zR+IVjZGhR8L QHX+1vTvhiZ+IyHnejcBpWUygaRVPduZXa8zxfpad0VVDjwNllpvoGw3ZtPM810b 74hL16W/USJ5fh55rqbQPj+La7B4goG2TzKodEEDdHpriI3DE3jFhgBg5Bfb4Fcw gpOQcdBg8VZ4jlmjLIVcUpg/4ijEXPGDBSk9jZ/LqsRWdONGsL+SYywplyEY49Kx JGOQLQUaTCLAmPs0v83UIFNDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuDSS1dSO Vgcr9uOxVWPuex7g2jMwHwYDVR0jBBgwFoAUGaBDgZn9/iTc+FZipIvbV1Hhtdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NDJFLzYxOTlCRDU0NURF RTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2FCRGdabjlfaVRjLUZaaXBJdmJWMUhodGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NDJFLzYxOTlCRDU0NURFRTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lU Yy1GWmlwSXZiVjFIaHRkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9CjvqcB88tBesE/lVNjBR5x99IMGZexp8esTO6Kwjy89X1ZwJl4sXO Py8y1oe67zYaZCIPEmD1pzwhkb4oFArqTtWcDHploiwdCFnNGBpgfCObRc70rB2Y 2P+O0VRC1aWHjpOvXbgyoajhPWcamZrz/tkC84VDpwlCyw5Tv+YRzdO9muP3Eeyx kv3KrHPViNYLljCo03kZrJBMD9RV7mXr7EaDtbpG09tOPBKPQRYaWB4z4KTEYful q/RQ4fkLQb5rkANfSlAHkMfK7kslsED0R9+HH/smzb6lVjARD2ms82IwEnVCCAA5 km5BY9Cje5rgyuEdf13t/uFOsYlC3NM= -----END CERTIFICATE-----Generated at Mon Aug 4 11:17:43 2025 by rpki-client