$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: BcLHpuOJ+eVs4pcbnimFROLbY2fGD2Gzt2QTqMbPVkQ= Subject key identifier: 82:0D:4D:AA:54:28:BE:90:93:58:EF:4D:00:2C:DB:6A:3A:75:73:35 Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 06C0 Signing time: Fri 08 Aug 2025 21:01:07 +0000 Manifest this update: Fri 08 Aug 2025 21:01:06 +0000 Manifest next update: Fri 15 Aug 2025 21:01:06 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: 8S88dLV4jQLnj7yBjrvzyMG/GnWOQYJTrzFvXDyzb2I=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: IN0gc9PJxJ33qBabtfsH0oOyy1CZdnLejFeFWz0Ut3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Aug 8 21:01:06 2025 GMT Not After : Aug 15 21:01:06 2025 GMT Subject: CN=68966593-4d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:da:4d:ea:ca:f0:4c:94:0e:d1:b1:b5:03: 25:96:83:c2:9e:72:21:41:7d:e6:ef:a4:40:55:32: 8e:ee:f7:1e:aa:86:01:4a:9d:83:98:c0:9e:77:84: 3c:bb:15:45:8e:90:9b:11:be:87:f5:8f:bd:dc:ab: 00:de:b4:5a:05:1b:a3:00:ac:b7:a7:00:ce:ef:49: 0f:8f:1c:75:de:83:37:a0:30:fd:96:99:9f:99:7b: 66:5e:23:8b:73:cb:7b:19:30:6d:ad:2c:b4:4c:ef: 7d:43:17:25:5a:3f:41:99:4a:03:69:ac:17:77:27: ce:77:f3:69:19:a4:67:81:a7:3b:5d:be:85:f7:fc: 76:fb:1e:a9:87:4a:23:e7:07:8d:b0:13:52:f9:59: 59:51:21:70:57:ea:cb:06:49:29:9a:65:39:4e:37: e4:60:95:85:44:68:ea:a4:2d:9c:0a:26:ff:10:86: 86:8d:4d:e8:64:4a:9e:21:67:ef:f1:62:66:23:fd: 91:2b:4f:1d:6e:2e:18:8d:0e:85:90:7f:24:a4:6b: 54:e9:a2:bc:d1:39:5f:65:74:a6:85:8c:86:70:73: 2a:fa:dc:d4:d3:85:6f:03:ec:81:13:15:84:6e:d5: fa:c1:08:c7:5a:5f:30:21:cf:93:e1:1d:0b:fd:24: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0D:4D:AA:54:28:BE:90:93:58:EF:4D:00:2C:DB:6A:3A:75:73:35 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:78:36:68:3c:f4:3f:a2:f1:92:51:f7:0a:73:97:ad:b1: 3f:75:fd:39:da:19:20:37:85:dd:75:a9:c2:62:40:da:ec:8e: 0d:90:d4:1c:43:26:86:c5:d2:ed:5d:88:5e:82:cf:c8:c6:8e: 7f:39:f1:e0:ec:4d:78:26:f1:dc:82:75:a7:07:3e:2c:68:1b: 76:4b:53:14:ab:fb:ad:7d:3d:6b:16:49:bf:ee:f6:d1:52:01: 3b:60:98:35:19:79:16:03:6d:f5:59:3c:77:38:28:71:9b:5c: 58:f5:8f:31:2b:6c:55:c0:f4:4e:0c:1f:51:70:9e:ac:68:2a: 33:1f:1a:dc:cd:44:21:a7:07:56:0e:40:f0:33:f4:96:08:f0: c9:1a:88:4a:93:39:05:8b:a8:ab:2f:76:cd:1f:5e:11:e7:2e: 23:6e:28:66:8e:a8:52:56:b0:37:b5:eb:c4:85:5b:8c:ab:c1: 2f:7d:58:b6:85:a7:ff:fd:6a:5a:32:f7:8e:1e:20:d7:b7:2f: 5b:05:1c:38:93:96:c8:7a:4d:23:5a:d4:94:19:52:bf:fe:51: 8b:c0:2f:d7:90:7b:9a:26:0e:84:7e:74:10:dd:b2:26:17:79: 47:9e:9f:36:9f:5d:c1:c9:c3:c2:f9:1f:60:1f:80:5d:ce:91: 22:af:44:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUwODA4MjEwMTA2WhcNMjUwODE1MjEwMTA2WjAYMRYwFAYD VQQDEw02ODk2NjU5My00ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIDaTerK8EyUDtGxtQMlloPCnnIhQX3m76RAVTKO7vceqoYBSp2DmMCed4Q8 uxVFjpCbEb6H9Y+93KsA3rRaBRujAKy3pwDO70kPjxx13oM3oDD9lpmfmXtmXiOL c8t7GTBtrSy0TO99QxclWj9BmUoDaawXdyfOd/NpGaRngac7Xb6F9/x2+x6ph0oj 5weNsBNS+VlZUSFwV+rLBkkpmmU5TjfkYJWFRGjqpC2cCib/EIaGjU3oZEqeIWfv 8WJmI/2RK08dbi4YjQ6FkH8kpGtU6aK80TlfZXSmhYyGcHMq+tzU04VvA+yBExWE btX6wQjHWl8wIc+T4R0L/SQTRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIINTapU KL6Qk1jvTQAs22o6dXM1MB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAvng2aDz0P6LxklH3CnOXrbE/df052hkgN4XddanCYkDa7I4NkNQc QyaGxdLtXYhegs/Ixo5/OfHg7E14JvHcgnWnBz4saBt2S1MUq/utfT1rFkm/7vbR UgE7YJg1GXkWA231WTx3OChxm1xY9Y8xK2xVwPRODB9RcJ6saCozHxrczUQhpwdW DkDwM/SWCPDJGohKkzkFi6irL3bNH14R5y4jbihmjqhSVrA3tevEhVuMq8EvfVi2 haf//WpaMveOHiDXty9bBRw4k5bIek0jWtSUGVK//lGLwC/XkHuaJg6EfnQQ3bIm F3lHnp82n13BycPC+R9gH4BdzpEir0T0 -----END CERTIFICATE-----Generated at Sun Aug 10 05:32:48 2025 by rpki-client