$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: wCAPIAxcWa/Eunm4uFjS+9l4AIB3MDb5YW4C/LEbxqo= Subject key identifier: 42:1A:7F:8D:37:5E:BC:11:59:3F:7F:A3:16:D9:47:22:4E:25:A6:39 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 021F Signing time: Sat 23 Aug 2025 02:10:31 +0000 Manifest this update: Sat 23 Aug 2025 02:10:31 +0000 Manifest next update: Sat 30 Aug 2025 02:10:31 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: zBMHlBKcUK3jSYjHXXCNutHbvEN7OxriWqqUySeJ21g=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Aug 23 02:10:31 2025 GMT Not After : Aug 30 02:10:31 2025 GMT Subject: CN=68a92317-784d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:d1:35:bb:89:53:58:d4:1a:08:98:7c:01: 84:3c:7b:9a:db:af:85:d6:b8:28:56:e8:e4:af:37: 60:3e:17:0a:5f:85:c4:17:94:c6:9c:37:df:73:cc: 1f:ca:5b:63:d6:7a:90:24:63:df:02:b3:9f:3a:d7: fa:fa:72:e6:99:ed:7e:d1:7b:90:72:14:a6:7c:62: 4d:10:a5:49:b5:78:e6:7d:53:f5:c3:40:4b:a1:ff: 0d:92:f7:76:24:4c:58:0a:14:1c:ed:74:56:99:1a: b2:df:94:9c:33:4a:0a:93:58:b7:bb:16:1f:1f:fe: 26:3f:fd:c1:24:e5:47:47:36:69:c4:d7:2f:1d:39: dc:f8:b9:da:e9:25:e6:69:4d:ed:08:d3:71:d4:76: 39:7a:c4:50:74:fb:02:d9:aa:49:86:b8:6a:cb:7f: 93:06:b3:79:6b:50:d7:5a:b8:9d:ae:76:a8:0a:e2: be:b7:3b:5c:52:0c:0b:8c:1b:92:e6:ad:27:71:d7: b9:be:f3:28:9c:5f:14:8e:22:7a:b5:e9:9a:ba:06: ce:85:98:d5:eb:b5:ea:5a:08:79:71:f3:e5:53:dd: 2a:94:dd:02:72:d1:77:13:38:67:ee:48:43:cd:61: f1:45:9a:80:3d:36:3e:94:eb:cc:37:8d:09:26:f6: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:7F:8D:37:5E:BC:11:59:3F:7F:A3:16:D9:47:22:4E:25:A6:39 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:95:30:3c:ad:b3:16:b9:f7:08:f1:17:f4:78:93:bd:27:89: 93:f5:9d:b7:81:a4:c0:8b:d6:82:af:c4:f5:87:75:eb:c8:a1: 83:43:75:fd:1e:3f:f3:43:2c:6f:67:ca:bf:dc:06:d3:54:81: 63:b7:78:df:0c:d5:3c:20:19:4e:be:18:6a:79:7d:60:94:a8: 28:14:1f:5f:a1:cb:fd:ce:8f:ce:de:af:cf:5f:33:88:3d:b9: dd:c5:65:e1:0e:cb:7c:32:10:e4:0a:40:4b:9e:63:e7:50:8b: c1:dd:a3:73:73:f9:f9:a7:89:5a:46:f1:2a:c1:3e:7c:24:e6: cc:57:42:34:a7:82:f6:51:1a:30:75:65:a2:25:ea:8f:72:93: 5e:d4:a2:61:11:25:68:7b:fd:e0:46:83:b0:6a:c2:bd:e3:5e: 38:c3:70:11:62:52:f2:f7:4a:7f:86:a2:ba:f4:44:0b:70:19: 48:dc:d6:e2:62:2d:96:ac:93:70:3e:c2:ec:0f:0c:ab:52:1f: 97:a6:70:36:97:9a:9d:dc:87:b5:3c:bc:76:f1:10:40:28:79: be:15:04:07:f3:b6:86:87:b6:7f:e9:32:1d:3a:c1:ba:39:a7: c9:3a:46:67:5f:8a:e5:ce:0d:03:49:50:6c:d0:04:9a:69:c0: 02:b4:82:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwODIzMDIxMDMxWhcNMjUwODMwMDIxMDMxWjAYMRYwFAYD VQQDEw02OGE5MjMxNy03ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNzRNbuJU1jUGgiYfAGEPHua26+F1rgoVujkrzdgPhcKX4XEF5TGnDffc8wf yltj1nqQJGPfArOfOtf6+nLmme1+0XuQchSmfGJNEKVJtXjmfVP1w0BLof8Nkvd2 JExYChQc7XRWmRqy35ScM0oKk1i3uxYfH/4mP/3BJOVHRzZpxNcvHTnc+Lna6SXm aU3tCNNx1HY5esRQdPsC2apJhrhqy3+TBrN5a1DXWridrnaoCuK+tztcUgwLjBuS 5q0ncde5vvMonF8UjiJ6temaugbOhZjV67XqWgh5cfPlU90qlN0CctF3Ezhn7khD zWHxRZqAPTY+lOvMN40JJvba6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIaf403 XrwRWT9/oxbZRyJOJaY5MB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqlTA8rbMWufcI8Rf0eJO9J4mT9Z23gaTAi9aCr8T1h3XryKGDQ3X9 Hj/zQyxvZ8q/3AbTVIFjt3jfDNU8IBlOvhhqeX1glKgoFB9focv9zo/O3q/PXzOI PbndxWXhDst8MhDkCkBLnmPnUIvB3aNzc/n5p4laRvEqwT58JObMV0I0p4L2URow dWWiJeqPcpNe1KJhESVoe/3gRoOwasK94144w3ARYlLy90p/hqK69EQLcBlI3Nbi Yi2WrJNwPsLsDwyrUh+XpnA2l5qd3Ie1PLx28RBAKHm+FQQH87aGh7Z/6TIdOsG6 OafJOkZnX4rlzg0DSVBs0ASaacACtIIH -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:27 2025 by rpki-client