$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: CXm1w87bC2TRygqmk0Jij8kBHzYQw9dKgzmnsXx5dMM= Subject key identifier: A5:AF:05:24:13:30:1B:B7:06:DD:DD:4E:33:EC:A8:B8:E9:C5:77:0E Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 03C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03BE Signing time: Tue 01 Jul 2025 01:14:23 +0000 Manifest this update: Tue 01 Jul 2025 01:14:23 +0000 Manifest next update: Tue 08 Jul 2025 01:14:23 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: edtmPf+Am13UsqyONlqf52l+DliKe1d9l7hoaTDg/Nk=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Jul 1 01:14:23 2025 GMT Not After : Jul 8 01:14:23 2025 GMT Subject: CN=6863366f-536b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:12:1a:84:18:13:6b:59:8b:ff:42:0d:36: e6:49:c2:33:69:c6:e9:94:94:75:ab:13:ae:5f:f0: 33:29:ae:40:aa:e0:32:6c:20:27:11:a4:3c:6b:0d: 53:81:ae:1d:50:93:be:12:ab:ce:b3:c1:64:21:05: 10:08:b9:dc:ba:cc:65:a3:0e:3a:22:54:96:83:be: 15:73:c2:8b:d4:ba:50:28:a5:79:8a:25:52:2d:60: 9e:17:f6:5d:ea:37:b1:c8:6d:98:82:b3:cc:ee:44: 55:11:69:f9:8c:b3:21:cc:26:20:f3:e0:98:1f:04: c7:24:71:ba:dd:72:22:e4:c2:b4:61:56:d5:a0:98: ff:cc:be:bb:9f:a4:66:5c:21:b0:a6:a1:c1:39:5e: a4:97:dc:2a:46:57:b8:2c:61:16:28:24:a6:4f:d5: 2a:5b:58:94:b4:32:f8:36:91:14:bd:8b:7c:4c:b5: 97:7f:ff:18:01:f8:04:42:78:39:71:ce:3a:0e:b9: b7:fc:f8:35:fc:94:65:93:a0:46:ca:2a:ec:03:fd: d2:e2:99:19:fc:0b:4a:40:65:c6:a9:b1:7f:ac:aa: ad:d4:e6:5f:db:dc:d9:34:da:1c:ef:47:01:59:b6: 8e:bd:55:79:08:68:b6:0b:62:cf:20:8f:6b:23:d6: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AF:05:24:13:30:1B:B7:06:DD:DD:4E:33:EC:A8:B8:E9:C5:77:0E X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:aa:9d:b1:83:4c:39:2e:87:29:a9:a2:61:2f:c4:f6:21:5d: 44:17:9d:ff:32:df:72:d9:14:54:03:47:77:d4:cd:39:58:c9: 3a:d4:9b:95:c2:8e:43:4e:e1:a1:9e:72:ff:22:90:79:31:a2: 16:15:7b:c5:e0:46:f7:11:52:a6:84:be:9b:58:c7:d2:8f:f7: 72:71:fd:ac:c6:ce:e2:a7:a5:83:ba:b5:42:01:09:24:b2:f4: da:00:69:6d:49:4e:0e:50:9d:44:be:ba:f3:57:00:c0:f9:d9: 8f:ef:b4:4d:11:d3:ee:9e:7a:54:7d:1b:ac:33:ea:e3:0c:48: 21:e6:78:92:da:bb:e0:a0:6a:78:7a:15:5c:5a:f5:1d:3f:9a: a7:0b:44:d9:ed:16:d6:53:70:79:a9:fe:98:00:cc:51:9f:55: f4:9a:19:0b:88:f1:1a:dd:02:e1:b8:76:7f:60:7b:14:b0:c4: ef:cd:f0:75:59:90:4a:3b:5b:9c:20:e0:4f:eb:91:41:6b:b1: b5:74:53:a7:01:55:de:7b:66:89:11:31:a4:fb:09:63:1f:e2: 52:00:92:6f:18:e7:b9:02:01:df:2a:82:05:63:2b:af:fc:60: 70:2d:19:1d:23:c9:38:47:fa:fb:0b:a9:87:ba:cd:e9:b7:4f: 17:00:e1:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUwNzAxMDExNDIzWhcNMjUwNzA4MDExNDIzWjAYMRYwFAYD VQQDEw02ODYzMzY2Zi01MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKYSGoQYE2tZi/9CDTbmScIzacbplJR1qxOuX/AzKa5AquAybCAnEaQ8aw1T ga4dUJO+EqvOs8FkIQUQCLncusxlow46IlSWg74Vc8KL1LpQKKV5iiVSLWCeF/Zd 6jexyG2YgrPM7kRVEWn5jLMhzCYg8+CYHwTHJHG63XIi5MK0YVbVoJj/zL67n6Rm XCGwpqHBOV6kl9wqRle4LGEWKCSmT9UqW1iUtDL4NpEUvYt8TLWXf/8YAfgEQng5 cc46Drm3/Pg1/JRlk6BGyirsA/3S4pkZ/AtKQGXGqbF/rKqt1OZf29zZNNoc70cB WbaOvVV5CGi2C2LPII9rI9bv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWvBSQT MBu3Bt3dTjPsqLjpxXcOMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmqp2xg0w5LocpqaJhL8T2IV1EF53/Mt9y2RRUA0d31M05WMk61JuV wo5DTuGhnnL/IpB5MaIWFXvF4Eb3EVKmhL6bWMfSj/dycf2sxs7ip6WDurVCAQkk svTaAGltSU4OUJ1EvrrzVwDA+dmP77RNEdPunnpUfRusM+rjDEgh5niS2rvgoGp4 ehVcWvUdP5qnC0TZ7RbWU3B5qf6YAMxRn1X0mhkLiPEa3QLhuHZ/YHsUsMTvzfB1 WZBKO1ucIOBP65FBa7G1dFOnAVXee2aJETGk+wljH+JSAJJvGOe5AgHfKoIFYyuv /GBwLRkdI8k4R/r7C6mHus3pt08XAOEm -----END CERTIFICATE-----Generated at Wed Jul 2 06:11:19 2025 by rpki-client