$ rpki-client -vvf rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft File: GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft (raw, json) Hash identifier: Xw2BqshFgy/lYoG0p3qdvzpqQ1RczK8uj6mfwjSp1JY= Subject key identifier: EC:8B:5F:89:D9:37:D1:78:5A:02:BC:4E:EC:A1:A7:46:B8:BA:79:FA Authority key identifier: 19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06 Certificate issuer: /CN=A9160827/serialNumber=1933F62B910631D0494CACC47CB167C581045006 Certificate serial: 1EAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft Manifest number: 1EA8 Signing time: Wed 02 Jul 2025 16:10:16 +0000 Manifest this update: Wed 02 Jul 2025 16:10:16 +0000 Manifest next update: Wed 09 Jul 2025 16:10:16 +0000 Files and hashes: 1: GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl (hash: zaIJOGSqvWRV4c67zLRx9w+NaCZvtsN64Aq83wgQLbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7853 (0x1ead) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160827, serialNumber=1933F62B910631D0494CACC47CB167C581045006 Validity Not Before: Jul 2 16:10:16 2025 GMT Not After : Jul 9 16:10:16 2025 GMT Subject: CN=686559e8-aae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:13:71:5c:82:52:98:5a:b4:f3:8c:a9:53: 15:91:95:95:1f:9c:80:61:80:9e:06:b5:37:e0:db: 1e:9d:d4:60:9a:f2:56:2d:82:a6:78:d5:c4:3b:29: df:d6:2a:1c:d1:6d:45:10:3f:6c:21:0f:24:59:b4: 4e:11:8f:47:dd:74:38:82:a5:8b:7f:5b:05:3c:9f: 12:19:ef:ac:00:97:d9:98:a7:df:36:48:30:59:84: 91:c7:cf:b1:2e:d1:4c:d7:25:ae:b8:4c:13:42:08: 69:f6:63:84:b4:42:33:64:d1:6e:18:bc:fe:1b:b4: a3:37:ac:54:77:39:26:5b:a3:09:41:53:27:8a:7b: 12:ab:d1:b5:b4:be:6e:b5:62:4b:6f:af:9b:1b:c3: 62:11:50:50:f9:f3:84:95:4d:7d:00:07:25:0b:ad: fe:6f:7a:38:75:3c:73:7e:e4:f4:27:19:4f:03:cd: 49:12:d4:71:14:05:1f:d9:e8:1d:c2:57:a3:4e:aa: 1f:85:7c:12:a9:b2:6d:51:57:ff:fd:a1:83:7a:2f: 22:4d:51:63:81:6c:3f:ff:de:46:20:e6:22:96:b0: b8:d3:4a:b8:be:78:75:c7:51:4a:3b:1a:df:27:db: 6c:9a:62:7b:6d:d7:97:e0:b0:fd:30:30:21:d6:2b: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8B:5F:89:D9:37:D1:78:5A:02:BC:4E:EC:A1:A7:46:B8:BA:79:FA X509v3 Authority Key Identifier: keyid:19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:16:bb:9f:b4:5e:84:92:be:ba:43:ea:23:d5:e5:93:90:15: a8:4e:38:39:fe:e4:30:f4:4d:65:b7:12:79:3e:93:85:33:66: 52:31:e1:58:ad:a7:3b:69:c6:16:4b:98:c4:2f:86:6e:37:e7: fd:6f:a3:74:16:2f:03:68:1d:c8:1a:b3:32:dd:97:a3:63:9b: e0:16:0b:6d:9d:81:cd:b3:61:b7:92:f3:30:11:a9:2d:af:95: c8:29:de:25:4a:86:da:ba:a5:b6:db:05:9f:98:85:36:bf:f3: a1:e5:07:07:65:49:30:4c:16:7f:36:ac:98:0d:8b:81:f4:54: 79:a2:94:79:e4:c2:6f:fb:3d:4f:c1:39:c8:fe:1c:03:41:8c: 0a:80:8b:77:a6:2f:02:2e:8d:c7:e4:d7:88:06:94:11:c3:0f: f2:1e:c3:c0:15:20:51:5f:9e:b8:80:67:a1:aa:bf:29:7b:80: 54:07:e6:0f:ff:34:74:70:ee:04:f5:6e:f5:99:56:0b:a9:90: 98:ec:cd:68:54:b0:ef:e3:ae:6e:08:db:a7:7f:13:b1:93:b6: c1:11:00:13:93:cb:d7:c6:9b:a4:5d:09:3c:42:73:f5:f1:61: 7a:21:f5:56:13:4b:53:ba:7b:77:23:e4:15:2f:13:93:ff:f6: 4c:d7:c3:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4MjcxMTAvBgNVBAUTKDE5MzNGNjJCOTEwNjMxRDA0OTRDQUNDNDdDQjE2N0M1 ODEwNDUwMDYwHhcNMjUwNzAyMTYxMDE2WhcNMjUwNzA5MTYxMDE2WjAYMRYwFAYD VQQDEw02ODY1NTllOC1hYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk4TcVyCUphatPOMqVMVkZWVH5yAYYCeBrU34NsendRgmvJWLYKmeNXEOynf 1ioc0W1FED9sIQ8kWbROEY9H3XQ4gqWLf1sFPJ8SGe+sAJfZmKffNkgwWYSRx8+x LtFM1yWuuEwTQghp9mOEtEIzZNFuGLz+G7SjN6xUdzkmW6MJQVMninsSq9G1tL5u tWJLb6+bG8NiEVBQ+fOElU19AAclC63+b3o4dTxzfuT0JxlPA81JEtRxFAUf2egd wlejTqofhXwSqbJtUVf//aGDei8iTVFjgWw//95GIOYilrC400q4vnh1x1FKOxrf J9tsmmJ7bdeX4LD9MDAh1itkewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyLX4nZ N9F4WgK8Tuyhp0a4unn6MB8GA1UdIwQYMBaAFBkz9iuRBjHQSUysxHyxZ8WBBFAG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDgyNy85NjUzQ0NCQzZC OEUxMUU2OUU3Qzc1NTRDNEY5QUUwMi9HVFAySzVFR01kQkpUS3pFZkxGbnhZRUVV QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dUUDJLNUVHTWRCSlRLekVmTEZueFlFRVVBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDgyNy85NjUzQ0NCQzZCOEUxMUU2OUU3Qzc1NTRDNEY5QUUwMi9HVFAySzVFR01k QkpUS3pFZkxGbnhZRUVVQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeFruftF6Ekr66Q+oj1eWTkBWoTjg5/uQw9E1ltxJ5PpOFM2ZSMeFY rac7acYWS5jEL4ZuN+f9b6N0Fi8DaB3IGrMy3ZejY5vgFgttnYHNs2G3kvMwEakt r5XIKd4lSobauqW22wWfmIU2v/Oh5QcHZUkwTBZ/NqyYDYuB9FR5opR55MJv+z1P wTnI/hwDQYwKgIt3pi8CLo3H5NeIBpQRww/yHsPAFSBRX564gGehqr8pe4BUB+YP /zR0cO4E9W71mVYLqZCY7M1oVLDv465uCNunfxOxk7bBEQATk8vXxpukXQk8QnP1 8WF6IfVWE0tTunt3I+QVLxOT//ZM18PZ -----END CERTIFICATE-----Generated at Thu Jul 3 10:33:42 2025 by rpki-client