$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: DZ0bHR9ytypmnAWvc5Dtzk1bgl6ACaE8pP1JbKz5xb8= Subject key identifier: BD:91:46:D5:C3:35:5D:FB:0E:8B:E8:D8:D7:C7:79:E3:78:66:9C:4A Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 14EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 14E2 Signing time: Fri 22 Aug 2025 16:57:59 +0000 Manifest this update: Fri 22 Aug 2025 16:57:59 +0000 Manifest next update: Fri 29 Aug 2025 16:57:59 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: S6PKrgOxBMmiGNQfMj8DmJNa30nLcLRQqrn275MFaAw=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5355 (0x14eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Aug 22 16:57:59 2025 GMT Not After : Aug 29 16:57:59 2025 GMT Subject: CN=68a8a197-2a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3c:e9:56:7d:ca:f4:9f:0b:dd:06:66:95:d6: 09:2a:b1:78:58:0b:c8:4d:e7:a6:0c:74:54:ea:f0: fc:7d:bd:94:47:71:eb:e0:fe:f4:c8:ac:a1:3e:64: 0c:60:95:4d:7b:48:16:1a:36:7a:68:41:53:4d:8c: 29:bf:d2:a1:4b:b3:95:4c:47:68:e9:30:a5:bb:2c: c2:5b:f2:0e:95:c0:af:79:85:d8:5e:64:2e:dd:f0: 90:32:5f:00:1c:72:94:96:7e:62:20:d5:80:2e:e1: 97:a3:8a:f7:9e:57:52:b1:df:3f:4b:f4:5d:27:5a: 99:c6:c0:28:4e:8e:a4:11:6d:96:d4:70:bb:8e:f2: 87:86:da:8d:d3:09:9a:26:c6:8a:bc:34:ff:67:02: 7f:8e:9f:8d:34:88:b5:bf:e0:f4:e1:0a:6a:a2:85: 62:be:9d:66:82:a8:94:65:61:0a:d0:d3:b3:9f:e8: 73:b1:60:00:ee:97:5f:f1:e7:ff:2e:0d:85:6b:6d: 99:21:f9:47:f6:ca:f9:63:43:07:94:37:8d:bc:d4: e0:03:cc:35:72:52:69:35:b2:c7:d1:a4:9b:6d:ee: fc:be:f9:17:4b:ef:ac:a9:74:a9:cf:fd:99:85:7b: 68:48:e7:cc:48:91:b1:70:08:ca:34:93:cc:da:05: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:91:46:D5:C3:35:5D:FB:0E:8B:E8:D8:D7:C7:79:E3:78:66:9C:4A X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:f0:fa:73:f6:d0:bb:f2:7b:c5:ff:5b:3f:95:00:cb:f1:3e: 99:c3:e8:61:f3:2b:b7:85:58:6e:c0:02:ce:0f:c5:16:a2:69: 5e:64:39:cb:6e:ca:42:68:6e:7d:e2:ed:89:4a:1f:26:cc:49: 04:0c:f1:74:d4:e1:6d:d0:de:67:d7:f8:53:39:04:27:51:ec: e3:bf:1d:66:76:9f:2c:3e:48:4b:7c:91:e5:bc:51:99:4e:62: 47:1c:b1:ee:a0:1a:03:38:2d:4b:e1:b7:93:30:c4:c7:85:da: e4:00:f4:17:a4:75:13:8e:28:1e:d4:80:06:d0:31:f7:31:3d: d6:79:54:c7:c3:0d:22:08:34:ca:ed:04:a5:78:52:ca:b8:e9: 05:eb:c3:a9:7f:d2:93:c1:49:fb:90:1c:b1:1e:ef:6f:ba:67: de:44:0a:1a:14:98:89:24:1a:34:72:c2:de:30:d6:db:7b:d9: 6a:14:9e:2d:93:5c:fe:78:33:0d:be:9b:cf:81:b0:66:af:9b: fd:5d:06:59:7b:76:78:d9:31:0d:f5:7b:6d:38:a0:b5:6d:c3: 0d:08:67:8c:fb:45:ef:92:44:e1:d9:22:c8:0f:69:9a:6d:f3: 0a:26:9f:6d:c0:25:2a:bd:73:9d:58:b8:a8:7e:93:ba:d6:52: 74:c2:ee:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwODIyMTY1NzU5WhcNMjUwODI5MTY1NzU5WjAYMRYwFAYD VQQDEw02OGE4YTE5Ny0yYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zzpVn3K9J8L3QZmldYJKrF4WAvITeemDHRU6vD8fb2UR3Hr4P70yKyhPmQM YJVNe0gWGjZ6aEFTTYwpv9KhS7OVTEdo6TCluyzCW/IOlcCveYXYXmQu3fCQMl8A HHKUln5iINWALuGXo4r3nldSsd8/S/RdJ1qZxsAoTo6kEW2W1HC7jvKHhtqN0wma JsaKvDT/ZwJ/jp+NNIi1v+D04QpqooVivp1mgqiUZWEK0NOzn+hzsWAA7pdf8ef/ Lg2Fa22ZIflH9sr5Y0MHlDeNvNTgA8w1clJpNbLH0aSbbe78vvkXS++sqXSpz/2Z hXtoSOfMSJGxcAjKNJPM2gUtrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2RRtXD NV37Dovo2NfHeeN4ZpxKMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDe8Ppz9tC78nvF/1s/lQDL8T6Zw+hh8yu3hVhuwALOD8UWomleZDnL bspCaG594u2JSh8mzEkEDPF01OFt0N5n1/hTOQQnUezjvx1mdp8sPkhLfJHlvFGZ TmJHHLHuoBoDOC1L4beTMMTHhdrkAPQXpHUTjige1IAG0DH3MT3WeVTHww0iCDTK 7QSleFLKuOkF68Opf9KTwUn7kByxHu9vumfeRAoaFJiJJBo0csLeMNbbe9lqFJ4t k1z+eDMNvpvPgbBmr5v9XQZZe3Z42TEN9XttOKC1bcMNCGeM+0XvkkTh2SLID2ma bfMKJp9twCUqvXOdWLiofpO61lJ0wu4Q -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:37 2025 by rpki-client