$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json) Hash identifier: ieNPaDnbe7xmzgkVDKCZYIhMsPkFEqVNdgx3IdU1rfU= Subject key identifier: 95:E7:97:37:68:DA:73:02:9A:95:68:59:6E:24:3C:DE:E7:E4:69:C3 Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 070C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft Manifest number: 0706 Signing time: Fri 22 Aug 2025 22:05:22 +0000 Manifest this update: Fri 22 Aug 2025 22:05:21 +0000 Manifest next update: Fri 29 Aug 2025 22:05:21 +0000 Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: Wtv+lrY9H0EmlnqeZtG8E/ikomWiOOQUkcRmrDKGgjI=) 2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1804 (0x70c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: Aug 22 22:05:21 2025 GMT Not After : Aug 29 22:05:21 2025 GMT Subject: CN=68a8e9a1-0795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:b6:eb:46:a0:3c:be:60:66:32:82:2f:61: a4:46:8d:b6:f8:5d:cc:8c:23:e9:2f:2a:6a:32:36: 11:30:85:5b:a5:a2:39:5c:d8:54:b2:fc:fa:4a:99: 78:da:a6:12:e9:ce:3f:9f:72:c8:91:72:3d:78:35: 11:5c:7b:c7:79:bf:4a:4f:10:ea:37:6d:14:27:08: 7a:56:df:58:1f:12:6f:a6:df:4e:6c:99:b2:57:9e: a9:0f:4f:2a:c5:5b:a2:cf:45:83:d5:f0:be:0d:f3: a8:1e:ad:62:fd:bf:58:73:c7:f3:bf:b4:4e:ea:8b: e3:08:07:df:b6:89:73:ce:91:92:0a:0d:90:0b:ca: 74:95:84:c0:cf:5f:30:60:65:5d:ff:8a:05:b1:d9: aa:51:5f:cd:d1:b0:73:e8:0a:e0:9d:c7:d5:3e:9e: bf:64:3d:f8:ae:43:9f:1f:68:72:f9:0e:22:a8:33: d6:30:db:f0:cb:33:19:dd:61:a4:cd:4d:98:5f:1c: 1b:09:c6:df:1d:71:e8:06:76:bc:f7:e6:0b:b6:35: c9:5c:2e:db:ff:be:a5:ef:9a:8b:cf:2d:17:46:5c: 4b:c4:fa:72:9e:10:65:64:58:00:47:d4:d3:74:ea: f0:74:53:cf:b5:21:29:89:e8:c1:08:eb:d2:59:18: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:97:37:68:DA:73:02:9A:95:68:59:6E:24:3C:DE:E7:E4:69:C3 X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bf:64:fd:48:0a:b0:9b:f3:0a:26:6c:1e:b3:69:ff:42:db: ba:98:34:e2:74:b2:4e:1d:66:4e:18:27:b6:34:96:01:5d:4c: 33:7d:09:cd:1a:f6:a7:c4:1e:ca:54:f5:cf:38:06:e3:95:f1: 08:70:34:87:ec:5c:f3:b4:2c:7b:12:2a:13:82:c2:9e:09:e7: 99:2a:79:53:56:b5:14:f2:91:87:c7:c3:bf:f2:22:d6:f5:c6: 25:72:92:be:4d:d1:39:07:07:cc:fb:5c:c8:79:35:be:df:f2: a2:ba:01:94:65:07:89:41:1b:57:d6:e9:4d:a7:a7:9d:5a:63: c6:e7:ba:25:be:c2:af:57:4a:c6:e9:dd:38:67:c8:d0:f5:7f: 70:52:e8:09:1d:b6:3b:cc:59:87:8d:47:82:8a:5d:d2:23:f8: 95:0f:8d:6c:24:3e:47:67:40:f5:e4:92:e3:ae:c1:d8:a3:e9: 66:e7:26:02:f8:4b:96:28:b5:35:24:da:02:c1:d5:c0:ab:d9: ed:33:cb:85:df:c2:df:fa:d9:8d:53:6d:d9:e1:67:bf:7f:d9: 47:a8:d6:63:c5:59:ff:30:1c:d4:23:36:b5:37:de:c1:fc:51: e9:62:10:07:4b:b4:ea:1e:3d:db:86:62:01:80:5c:58:1e:c5: 63:89:81:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjUwODIyMjIwNTIxWhcNMjUwODI5MjIwNTIxWjAYMRYwFAYD VQQDEw02OGE4ZTlhMS0wNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vm260agPL5gZjKCL2GkRo22+F3MjCPpLypqMjYRMIVbpaI5XNhUsvz6Spl4 2qYS6c4/n3LIkXI9eDURXHvHeb9KTxDqN20UJwh6Vt9YHxJvpt9ObJmyV56pD08q xVuiz0WD1fC+DfOoHq1i/b9Yc8fzv7RO6ovjCAfftolzzpGSCg2QC8p0lYTAz18w YGVd/4oFsdmqUV/N0bBz6ArgncfVPp6/ZD34rkOfH2hy+Q4iqDPWMNvwyzMZ3WGk zU2YXxwbCcbfHXHoBna89+YLtjXJXC7b/76l75qLzy0XRlxLxPpynhBlZFgAR9TT dOrwdFPPtSEpiejBCOvSWRizkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXnlzdo 2nMCmpVoWW4kPN7n5GnDMB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ dERfVlExaVRqZEh6R2hhUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBev2T9SAqwm/MKJmwes2n/Qtu6mDTidLJOHWZOGCe2NJYBXUwzfQnN GvanxB7KVPXPOAbjlfEIcDSH7FzztCx7EioTgsKeCeeZKnlTVrUU8pGHx8O/8iLW 9cYlcpK+TdE5BwfM+1zIeTW+3/KiugGUZQeJQRtX1ulNp6edWmPG57olvsKvV0rG 6d04Z8jQ9X9wUugJHbY7zFmHjUeCil3SI/iVD41sJD5HZ0D15JLjrsHYo+lm5yYC +EuWKLU1JNoCwdXAq9ntM8uF38Lf+tmNU23Z4We/f9lHqNZjxVn/MBzUIza1N97B /FHpYhAHS7TqHj3bhmIBgFxYHsVjiYE2 -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:22 2025 by rpki-client