$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: SDJ/jMNOWmannZbUbqmY6NgaKLU2rU9VYOIuAPtm3Xc= Subject key identifier: 95:63:CB:CB:10:C1:0E:A9:29:A8:B0:4E:38:78:AA:F3:2D:01:FC:9C Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 0106 Signing time: Sat 23 Aug 2025 05:14:20 +0000 Manifest this update: Sat 23 Aug 2025 05:14:19 +0000 Manifest next update: Sat 30 Aug 2025 05:14:19 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: y1aMzicZhtbDScvqHzjdYcUScccUR099mlPPOUVJjDo=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Aug 23 05:14:19 2025 GMT Not After : Aug 30 05:14:19 2025 GMT Subject: CN=68a94e2b-54d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:61:f3:97:f3:05:f4:6b:e0:b8:32:74:54: fc:63:bf:e3:df:19:5c:fb:f2:14:1e:36:5d:0f:e0: c0:61:d4:fb:3e:90:95:b3:3c:9e:0f:8c:ed:db:89: e3:99:c7:c5:49:93:43:fa:74:d4:c5:04:13:61:ce: a6:9e:ab:c4:e0:54:ec:e8:8c:8f:27:b8:9d:57:ec: b0:56:a9:75:4d:90:da:f8:4d:94:c7:76:b4:d1:a2: bf:6f:1c:98:9f:7d:17:b6:a9:18:5a:47:c5:1b:e1: 0a:18:be:ff:eb:89:22:60:e1:1d:ec:1a:d2:0b:5e: 10:e3:59:9a:06:fd:9f:54:30:3c:3b:7c:57:b0:dd: f0:e1:c1:3a:64:cf:58:c3:be:d9:52:c6:4d:cf:dd: 34:b2:2e:b1:f2:a2:4e:89:11:d3:54:27:12:57:14: 77:5c:70:44:33:02:75:65:33:d2:96:5e:ce:e6:46: ca:ac:52:1f:42:e4:76:67:05:c7:b0:a0:2d:78:e8: d3:88:68:04:00:e4:ed:9a:f4:b4:18:7c:9e:7b:47: 5c:35:b4:9f:29:43:9c:23:8f:0e:91:d6:ce:24:79: 68:b7:ec:17:4f:76:96:cd:f0:7e:1e:c1:69:a5:67: 09:e1:0b:5f:51:bd:39:19:6d:eb:95:12:24:6d:70: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:63:CB:CB:10:C1:0E:A9:29:A8:B0:4E:38:78:AA:F3:2D:01:FC:9C X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:67:5b:01:c8:8d:6e:59:f9:43:8a:d9:3a:42:ff:8d:ad:7b: 1e:67:24:f6:44:7b:d0:33:db:e5:5a:42:08:d1:97:76:ee:aa: 32:5b:17:18:10:ad:20:c0:f6:77:6c:6f:5f:a7:9a:91:c6:f7: 9b:1d:30:a2:b9:44:3e:e3:eb:91:bf:69:80:b1:5d:40:3c:3b: 6e:74:e0:86:fc:8a:2d:7e:1a:b7:8d:2b:25:50:99:6e:80:eb: 7a:2a:18:2a:80:d8:4a:95:4e:47:fb:89:df:e1:4b:e7:b8:9f: 0b:c5:4b:2e:08:3a:8e:49:14:c9:fb:76:c0:e2:27:72:4d:bb: a6:c2:59:de:3d:71:15:07:ce:35:70:be:1d:f1:26:b1:63:e1: 53:46:10:41:71:58:11:7b:27:84:31:d1:23:88:0f:56:b0:aa: 31:50:c4:79:cf:70:9f:9d:22:e5:a9:ec:73:6a:26:2a:2b:ba: 76:86:f9:72:30:24:06:f3:89:dd:52:f4:0f:b3:b4:2c:8b:d9: 0b:c1:de:67:b3:1b:56:77:e1:53:e2:4b:66:37:d0:79:12:48: 7d:4c:10:fc:fb:00:2e:06:1b:c2:24:cb:ba:82:f4:37:ae:60: eb:fe:8a:9f:c3:00:b5:13:94:cb:ab:f2:3d:8f:06:ef:1c:5a: ce:9c:c4:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUwODIzMDUxNDE5WhcNMjUwODMwMDUxNDE5WjAYMRYwFAYD VQQDEw02OGE5NGUyYi01NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6chh85fzBfRr4LgydFT8Y7/j3xlc+/IUHjZdD+DAYdT7PpCVszyeD4zt24nj mcfFSZND+nTUxQQTYc6mnqvE4FTs6IyPJ7idV+ywVql1TZDa+E2Ux3a00aK/bxyY n30XtqkYWkfFG+EKGL7/64kiYOEd7BrSC14Q41maBv2fVDA8O3xXsN3w4cE6ZM9Y w77ZUsZNz900si6x8qJOiRHTVCcSVxR3XHBEMwJ1ZTPSll7O5kbKrFIfQuR2ZwXH sKAteOjTiGgEAOTtmvS0GHyee0dcNbSfKUOcI48OkdbOJHlot+wXT3aWzfB+HsFp pWcJ4QtfUb05GW3rlRIkbXB8sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVjy8sQ wQ6pKaiwTjh4qvMtAfycMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBZ1sByI1uWflDitk6Qv+NrXseZyT2RHvQM9vlWkII0Zd27qoyWxcY EK0gwPZ3bG9fp5qRxvebHTCiuUQ+4+uRv2mAsV1APDtudOCG/Iotfhq3jSslUJlu gOt6KhgqgNhKlU5H+4nf4UvnuJ8LxUsuCDqOSRTJ+3bA4idyTbumwlnePXEVB841 cL4d8SaxY+FTRhBBcVgReyeEMdEjiA9WsKoxUMR5z3CfnSLlqexzaiYqK7p2hvly MCQG84ndUvQPs7Qsi9kLwd5nsxtWd+FT4ktmN9B5Ekh9TBD8+wAuBhvCJMu6gvQ3 rmDr/oqfwwC1E5TLq/I9jwbvHFrOnMQb -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:48 2025 by rpki-client