$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: IV4r0haDf56KWuewFo90KffADnKG4brd4Jmg2nxbEvI= Subject key identifier: 17:60:D6:00:56:72:08:3F:CC:A6:23:FE:63:7A:A5:40:91:EC:11:8D Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03D9 Signing time: Sat 23 Aug 2025 00:48:32 +0000 Manifest this update: Sat 23 Aug 2025 00:48:32 +0000 Manifest next update: Sat 30 Aug 2025 00:48:32 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: BG1xIA1KGdvX1Zh99hgDZQPWjFPV9P9jbrLfXaAyFrA=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Aug 23 00:48:32 2025 GMT Not After : Aug 30 00:48:32 2025 GMT Subject: CN=68a90fe0-9132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:94:2e:2b:cc:d7:6b:88:e4:3c:fa:6a:31: 8a:78:b0:7c:e6:26:8c:2c:cf:48:91:7e:22:21:91: f4:a2:75:7e:4c:52:de:6d:f7:2c:80:b3:46:0c:52: 7d:24:ce:79:b3:65:de:93:6e:e2:75:f8:77:f5:2b: c6:e9:00:ae:19:fc:c6:ec:41:8c:cc:f6:63:fe:ac: d3:db:57:30:5a:2b:af:ac:b1:9a:18:0b:79:2e:40: 62:04:9b:69:90:16:1c:2c:dd:cd:bb:6f:b3:f7:d8: fb:e1:92:98:86:25:6f:18:b1:33:c8:ef:b9:0d:82: 02:7e:87:1b:e4:4c:6d:5c:be:b8:01:b6:7d:53:1c: 03:72:15:20:9a:51:b7:f5:7a:d0:36:43:fd:23:12: 12:d9:4c:97:e5:31:e4:e7:ee:f2:8e:17:03:07:6c: fc:4e:89:28:d0:52:66:5e:d2:e0:05:ef:bd:6c:f6: f8:ef:f5:be:c6:65:1e:0e:0a:7f:27:2b:45:6b:50: 31:94:1e:9c:7b:31:d4:a8:d9:58:41:bb:c7:34:4c: 7f:67:9a:32:46:00:f3:f5:cf:3a:72:7f:5c:da:e9: 08:e8:44:0f:ab:02:ba:bb:9f:53:b5:4b:71:bf:b0: dd:f8:60:39:82:14:aa:28:4c:8f:c8:2a:e6:56:12: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:60:D6:00:56:72:08:3F:CC:A6:23:FE:63:7A:A5:40:91:EC:11:8D X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:4a:cd:c4:c0:7a:d4:c9:75:58:d9:93:f0:b5:f3:a6:c9:a9: 4d:5c:de:40:91:ba:ed:99:5d:b6:db:28:ca:99:0e:cc:8b:61: 11:4c:3c:25:a2:20:8c:8d:f7:09:34:21:fc:b3:39:cb:c5:ad: 4a:4d:62:80:44:b2:f4:13:86:bb:5a:91:85:d1:a8:b8:6d:c8: d3:99:3a:94:8a:2c:f2:2b:5f:15:a0:43:f5:25:a8:83:2f:18: a6:57:80:f7:c5:6e:de:2a:15:ab:48:37:75:6c:09:e9:fc:aa: 85:de:8d:cc:a8:a3:07:8f:a1:89:a5:d4:58:c3:87:f6:bb:2c: 23:21:71:18:7c:91:ed:bf:d3:ce:ee:3e:78:54:e7:60:05:bc: c4:fb:a5:2b:dc:28:3f:1e:95:f1:17:c9:b6:04:a8:f9:4d:5b: ef:b4:10:e4:4e:24:51:3e:51:e3:1d:91:f5:e0:51:26:32:de: a4:5b:fa:30:2c:3c:a6:c2:61:c9:28:f6:9c:6b:b7:97:b9:78: 65:2f:1e:ac:62:d9:28:d3:72:82:75:df:b8:91:02:e9:88:16: c3:f7:b1:15:78:bc:aa:aa:6a:df:10:03:ad:41:3f:e0:65:be: 99:68:7e:91:48:51:8e:e7:0f:eb:8f:fc:fd:a0:e3:ab:e6:4e: b1:f9:b7:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUwODIzMDA0ODMyWhcNMjUwODMwMDA0ODMyWjAYMRYwFAYD VQQDEw02OGE5MGZlMC05MTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1yULivM12uI5Dz6ajGKeLB85iaMLM9IkX4iIZH0onV+TFLebfcsgLNGDFJ9 JM55s2Xek27idfh39SvG6QCuGfzG7EGMzPZj/qzT21cwWiuvrLGaGAt5LkBiBJtp kBYcLN3Nu2+z99j74ZKYhiVvGLEzyO+5DYICfocb5ExtXL64AbZ9UxwDchUgmlG3 9XrQNkP9IxIS2UyX5THk5+7yjhcDB2z8Toko0FJmXtLgBe+9bPb47/W+xmUeDgp/ JytFa1AxlB6cezHUqNlYQbvHNEx/Z5oyRgDz9c86cn9c2ukI6EQPqwK6u59TtUtx v7Dd+GA5ghSqKEyPyCrmVhJTEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdg1gBW cgg/zKYj/mN6pUCR7BGNMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiSs3EwHrUyXVY2ZPwtfOmyalNXN5AkbrtmV222yjKmQ7Mi2ERTDwl oiCMjfcJNCH8sznLxa1KTWKARLL0E4a7WpGF0ai4bcjTmTqUiizyK18VoEP1JaiD LximV4D3xW7eKhWrSDd1bAnp/KqF3o3MqKMHj6GJpdRYw4f2uywjIXEYfJHtv9PO 7j54VOdgBbzE+6Ur3Cg/HpXxF8m2BKj5TVvvtBDkTiRRPlHjHZH14FEmMt6kW/ow LDymwmHJKPaca7eXuXhlLx6sYtko03KCdd+4kQLpiBbD97EVeLyqqmrfEAOtQT/g Zb6ZaH6RSFGO5w/rj/z9oOOr5k6x+beb -----END CERTIFICATE-----Generated at Sat Aug 23 16:39:17 2025 by rpki-client