$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: 344f6POJmf8Fs6hoFPN5ndUiGh4RrZlu+2LRAF8/oNg= Subject key identifier: 00:6B:0B:32:15:78:14:AF:19:3F:BF:8D:08:6E:0E:75:86:C5:2D:12 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 65 Signing time: Sat 23 Aug 2025 07:15:27 +0000 Manifest this update: Sat 23 Aug 2025 07:15:26 +0000 Manifest next update: Sat 30 Aug 2025 07:15:26 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: y9iMTdZ0V8Tf0B2PZy3SylGvBGst6C9nccVlbQqv0o0=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Aug 23 07:15:26 2025 GMT Not After : Aug 30 07:15:26 2025 GMT Subject: CN=68a96a8f-e5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:7b:9c:9f:95:a8:f9:dc:ef:d2:88:40:fc: be:65:6c:36:11:9f:4a:af:06:e4:27:6c:a8:03:25: c0:58:80:5e:f8:a2:05:0e:40:51:65:25:85:04:c6: f0:e7:1f:d3:ce:02:5e:c5:33:68:92:8f:2d:1a:6c: 69:b1:7b:4e:2a:78:25:bb:cc:24:dc:1f:aa:be:1b: e5:19:45:1a:82:d8:f6:f7:29:59:f0:48:97:47:60: 05:63:50:c3:e4:77:4b:f2:15:ee:de:6d:58:f5:a5: 3c:31:6a:7e:33:91:48:74:e8:89:ec:80:b1:33:e8: 47:4f:b9:ee:8f:5a:d2:a5:ad:9b:ee:1f:4f:46:20: a3:29:64:83:9c:67:62:76:f7:35:57:49:57:90:51: 98:87:83:be:2d:1a:17:5c:ef:06:4d:cd:e2:10:08: fe:a6:0a:48:91:7b:9c:34:c1:80:a1:a2:33:1a:7f: 92:08:db:73:8b:f4:dc:f4:dc:07:64:17:3c:f2:96: d6:04:6b:f5:f2:98:b1:a1:01:3d:c9:d2:a8:0d:9e: c8:4e:b5:9f:b8:d9:fe:bb:44:8b:f6:98:40:aa:f6: 7f:d4:17:f3:18:b3:69:b3:09:3a:b6:6a:fd:70:c9: 39:da:6a:88:7c:45:b9:41:4f:6e:36:ac:1f:16:54: 97:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6B:0B:32:15:78:14:AF:19:3F:BF:8D:08:6E:0E:75:86:C5:2D:12 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:20:6b:40:3c:79:2b:f6:10:00:a0:84:42:39:df:d8:fb:13: 6a:d4:b4:b9:2b:9f:f5:9c:8f:cc:4d:88:b5:01:e4:94:76:fd: 8f:c9:4a:f9:28:18:f9:ca:fe:7c:d6:88:9c:73:30:ea:9e:89: 55:0d:61:d2:4b:85:4b:d7:b3:7c:1c:53:c1:1c:64:00:37:58: 89:ba:5f:a7:c6:2e:cf:34:ac:69:97:9f:7c:87:9f:4e:af:6c: 74:88:6c:5a:a4:1e:d8:93:36:9b:39:05:83:f2:b9:a9:26:ec: 15:fa:d0:27:86:9f:3e:77:84:f7:8d:eb:e3:7f:d5:a5:0c:50: f3:0c:21:ff:23:95:72:a8:25:e2:6c:da:98:ea:94:be:8d:c8: 07:21:a1:91:2d:4c:3d:a9:5a:90:8f:10:d2:1d:58:90:30:94: 0a:ae:91:b0:de:16:1d:da:cf:e0:64:6f:aa:d4:a8:6e:24:a0: 52:8e:90:8b:74:97:b7:68:97:6b:a1:c6:84:bb:f9:e3:fc:e3: eb:3f:18:47:59:6c:64:f3:ec:29:9e:4d:b8:b1:51:ed:6b:5e: 77:dc:f6:3f:b5:a0:d6:21:1d:b9:fa:99:48:6b:27:0f:5b:ae: e9:44:05:f6:68:d1:8f:92:7f:9a:09:71:fc:2f:76:cd:8a:6c: 67:17:8f:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA4MjMwNzE1MjZaFw0yNTA4MzAwNzE1MjZaMBgxFjAUBgNV BAMTDTY4YTk2YThmLWU1YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUpHucn5Wo+dzv0ohA/L5lbDYRn0qvBuQnbKgDJcBYgF74ogUOQFFlJYUExvDn H9POAl7FM2iSjy0abGmxe04qeCW7zCTcH6q+G+UZRRqC2Pb3KVnwSJdHYAVjUMPk d0vyFe7ebVj1pTwxan4zkUh06InsgLEz6EdPue6PWtKlrZvuH09GIKMpZIOcZ2J2 9zVXSVeQUZiHg74tGhdc7wZNzeIQCP6mCkiRe5w0wYChojMaf5II23OL9Nz03Adk FzzyltYEa/XymLGhAT3J0qgNnshOtZ+42f67RIv2mECq9n/UF/MYs2mzCTq2av1w yTnaaoh8RblBT242rB8WVJc1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAGsLMhV4 FK8ZP7+NCG4OdYbFLRIwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYga0A8eSv2EACghEI539j7E2rUtLkrn/Wcj8xNiLUB5JR2/Y/JSvko GPnK/nzWiJxzMOqeiVUNYdJLhUvXs3wcU8EcZAA3WIm6X6fGLs80rGmXn3yHn06v bHSIbFqkHtiTNps5BYPyuakm7BX60CeGnz53hPeN6+N/1aUMUPMMIf8jlXKoJeJs 2pjqlL6NyAchoZEtTD2pWpCPENIdWJAwlAqukbDeFh3az+Bkb6rUqG4koFKOkIt0 l7dol2uhxoS7+eP84+s/GEdZbGTz7CmeTbixUe1rXnfc9j+1oNYhHbn6mUhrJw9b rulEBfZo0Y+Sf5oJcfwvds2KbGcXj7g= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:12 2025 by rpki-client