$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: L8T8c/tmU6DQ30RyYiKKk9Jlcoj1l80pzVTeR6bbQZc= Subject key identifier: 38:D8:5C:1D:53:4B:91:EE:B1:F0:B1:0D:2D:C0:63:D8:1B:16:5E:81 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 4B Signing time: Thu 03 Jul 2025 07:34:34 +0000 Manifest this update: Thu 03 Jul 2025 07:34:33 +0000 Manifest next update: Thu 10 Jul 2025 07:34:33 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: pey0FM7BUYJDQ6PxZQh6+XwAqppGiynV/nA9E/9BS5M=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Jul 3 07:34:33 2025 GMT Not After : Jul 10 07:34:33 2025 GMT Subject: CN=68663289-0d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:53:8d:92:6b:90:52:aa:e9:d1:01:4e:99: 90:ed:bb:c8:a1:39:ed:e6:05:a4:77:4a:67:91:3c: 70:b4:be:84:f1:1e:57:95:a0:0d:30:c6:a5:5e:db: 8d:dd:05:f4:ff:7e:90:4a:f5:af:2e:10:8f:07:82: cf:a2:3d:96:93:8a:12:6b:3e:af:75:d2:be:2a:87: 62:e4:f8:00:63:cd:95:fe:93:d7:c1:2b:da:7e:8f: 61:15:0d:cd:6e:87:5f:79:46:47:99:13:61:75:56: de:a5:0b:18:07:fa:a4:76:84:c0:3d:39:4c:b6:16: 3f:01:2b:bb:23:6b:1d:9e:0a:77:18:dc:be:98:1b: 27:23:d0:28:c5:95:23:80:8d:e5:92:b3:2f:5b:64: c3:9c:5c:5b:ad:76:10:ef:46:c8:8c:da:5c:0b:b1: e9:c9:e6:6b:0f:39:6a:03:93:54:af:86:05:1c:f8: c3:69:2f:de:af:f8:6b:52:44:5c:cd:42:8e:58:c2: 1a:4f:d9:0b:e4:cb:61:a4:cc:a5:1d:61:cf:81:12: 91:41:d5:38:34:45:06:36:3f:b0:06:d4:bb:ff:5a: d7:c7:47:5c:d3:08:8e:aa:1c:04:66:e1:4c:82:c9: 55:87:8d:bf:81:08:57:08:fd:e5:4b:ef:0b:bd:72: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:5C:1D:53:4B:91:EE:B1:F0:B1:0D:2D:C0:63:D8:1B:16:5E:81 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:9a:d1:0b:b1:1f:19:75:bf:90:62:5c:48:db:78:be:9d:4a: a6:d0:0d:05:fc:4e:6d:f4:77:4a:3d:09:4e:24:d1:65:a5:c6: c7:58:99:11:4b:bf:1c:91:5f:cd:40:ad:86:af:45:66:62:ac: d6:1c:b8:d5:70:31:9e:8c:23:72:81:3e:21:eb:73:f4:59:77: 0e:60:b3:85:d3:60:96:e2:e5:ba:78:db:b3:21:d5:e1:87:09: 0f:8d:4c:64:8e:f2:16:e7:cf:3d:9d:98:07:e8:52:35:69:46: 05:fd:b9:82:8a:9f:e4:cc:89:f0:1e:ac:4d:c0:7d:16:f7:a0: 82:14:10:56:88:88:f1:ac:db:ec:5d:38:76:00:31:40:d4:c2: 75:eb:37:33:d9:94:77:25:df:ca:eb:f6:5a:e2:5a:0c:b9:71: 22:50:3d:74:6a:39:c6:9f:1f:37:8d:1c:9e:12:f6:e8:f2:63: 8e:c9:0e:92:3d:63:8f:dc:bb:45:84:8a:ed:e2:b1:9d:fd:6f: 30:b6:c7:82:d7:25:ff:0c:76:12:ac:6c:f5:9d:d4:2b:24:89: 44:17:d9:1b:d6:73:0a:62:e8:8f:fc:fc:b1:85:ec:2b:be:21: 0c:8e:bc:f2:96:c7:e9:d2:fe:33:88:6f:cc:e7:4c:77:a8:ed: 5b:da:53:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA3MDMwNzM0MzNaFw0yNTA3MTAwNzM0MzNaMBgxFjAUBgNV BAMTDTY4NjYzMjg5LTBkMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBI1ONkmuQUqrp0QFOmZDtu8ihOe3mBaR3SmeRPHC0voTxHleVoA0wxqVe243d BfT/fpBK9a8uEI8Hgs+iPZaTihJrPq910r4qh2Lk+ABjzZX+k9fBK9p+j2EVDc1u h195RkeZE2F1Vt6lCxgH+qR2hMA9OUy2Fj8BK7sjax2eCncY3L6YGycj0CjFlSOA jeWSsy9bZMOcXFutdhDvRsiM2lwLsenJ5msPOWoDk1SvhgUc+MNpL96v+GtSRFzN Qo5YwhpP2Qvky2GkzKUdYc+BEpFB1Tg0RQY2P7AG1Lv/WtfHR1zTCI6qHARm4UyC yVWHjb+BCFcI/eVL7wu9cjuJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUONhcHVNL ke6x8LENLcBj2BsWXoEwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaa0QuxHxl1v5BiXEjbeL6dSqbQDQX8Tm30d0o9CU4k0WWlxsdYmRFL vxyRX81ArYavRWZirNYcuNVwMZ6MI3KBPiHrc/RZdw5gs4XTYJbi5bp427Mh1eGH CQ+NTGSO8hbnzz2dmAfoUjVpRgX9uYKKn+TMifAerE3AfRb3oIIUEFaIiPGs2+xd OHYAMUDUwnXrNzPZlHcl38rr9lriWgy5cSJQPXRqOcafHzeNHJ4S9ujyY47JDpI9 Y4/cu0WEiu3isZ39bzC2x4LXJf8MdhKsbPWd1CskiUQX2RvWcwpi6I/8/LGF7Cu+ IQyOvPKWx+nS/jOIb8znTHeo7VvaU4s= -----END CERTIFICATE-----Generated at Thu Jul 3 17:41:06 2025 by rpki-client