$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: 0XJ9fvLAkSSII3fMAdVyaK6qftpnpPxWpBpmnzam/Po= Subject key identifier: A0:0C:5A:D2:3D:F6:1E:A0:FB:8A:B4:24:D1:30:17:00:8E:13:45:69 Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 016D Signing time: Sat 23 Aug 2025 03:56:42 +0000 Manifest this update: Sat 23 Aug 2025 03:56:41 +0000 Manifest next update: Sat 30 Aug 2025 03:56:41 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: Kt4Q0BWNB1s8+nFA9Y0o9W61awPloDx46Hpat88ETOs=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: LEXF9HRhajbu2nLL2GIh97gP542YxXzyNibweT+ZgSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Aug 23 03:56:41 2025 GMT Not After : Aug 30 03:56:41 2025 GMT Subject: CN=68a93bf9-6e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:96:80:4c:b2:14:b6:e2:c7:46:e1:37:dd: 73:ba:30:bc:8d:49:b3:dc:67:84:1e:3a:84:21:f4: 34:fd:54:3b:59:cf:cf:ec:d9:a5:60:f8:14:0d:d6: 54:31:98:b8:58:3e:8f:51:f9:d1:5c:72:b3:90:3a: d3:f2:26:3c:01:e5:f9:e9:a4:54:9d:ee:b4:0f:ef: 1e:73:d3:5a:68:56:d0:f1:70:5c:41:e3:c0:b5:38: 5c:8d:da:d2:06:2c:27:b1:30:1a:b7:85:a2:3b:92: f7:2f:73:fb:76:da:97:bf:22:c1:e1:ee:81:cb:6e: 36:df:f1:63:28:81:30:d6:a0:85:ff:e6:9c:f8:1f: c9:9a:64:37:bb:59:a8:28:55:1f:b6:ce:07:ad:a7: 2d:49:a8:a6:f1:42:ff:c8:5c:0c:96:f5:39:95:36: 39:72:46:04:28:9c:e4:76:47:65:18:df:fc:6c:fa: f6:be:c2:23:16:59:37:ee:77:fa:f5:2b:61:22:b7: 5a:d1:91:ae:b8:15:cc:1c:66:17:f0:d4:f9:b2:ab: 84:16:12:f3:72:d4:b4:4f:d9:b9:fe:ba:3f:b6:74: 22:2d:56:c5:fc:78:a6:1c:1a:4f:d9:b8:e5:82:7b: f6:f9:7f:ab:b3:67:2b:38:d0:8d:53:d4:86:83:25: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:5A:D2:3D:F6:1E:A0:FB:8A:B4:24:D1:30:17:00:8E:13:45:69 X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ea:17:34:e2:c5:8d:e5:48:71:b5:6a:20:24:6f:10:75:d2: e3:8d:9d:8e:c4:47:0e:88:28:12:43:61:40:9b:76:80:fb:fb: b3:7c:44:2d:bb:34:e0:57:0a:5e:70:d5:c2:52:ad:7a:e1:b0: 36:a7:6a:4d:af:b7:40:ad:4f:6d:a2:df:12:27:5f:f9:a5:fa: 27:5a:01:33:e8:b4:ec:c7:47:e2:25:8e:d6:37:f3:e1:f4:9e: b6:87:14:76:d6:ae:b2:69:21:06:3d:77:05:c2:78:22:f8:77: c2:6a:dd:f2:7a:c1:c4:09:ef:3d:e1:ab:e0:b5:fc:b4:ea:7b: 34:5f:c2:99:96:8b:1f:31:3c:3a:20:13:09:44:01:d5:7d:d8: b9:6a:b2:07:3d:c5:69:8a:b1:f9:54:e2:ab:b3:fc:ff:54:b2: 4a:d3:2a:bc:7a:e9:20:ef:aa:37:07:cf:ac:17:cf:85:96:f6: 1d:42:45:96:20:ea:1d:f7:f5:3c:e5:ed:57:ec:15:ad:73:aa: 4d:16:a1:ce:3e:ed:85:a1:8c:17:7a:19:ac:5e:24:c6:33:75: 81:d1:27:01:b5:11:3f:ad:19:fd:8d:4b:38:85:f4:3f:17:9d: b4:e5:7c:77:aa:bc:d7:9c:0d:c3:28:34:16:56:31:26:be:ba: fa:91:e7:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUwODIzMDM1NjQxWhcNMjUwODMwMDM1NjQxWjAYMRYwFAYD VQQDEw02OGE5M2JmOS02ZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11+WgEyyFLbix0bhN91zujC8jUmz3GeEHjqEIfQ0/VQ7Wc/P7NmlYPgUDdZU MZi4WD6PUfnRXHKzkDrT8iY8AeX56aRUne60D+8ec9NaaFbQ8XBcQePAtThcjdrS BiwnsTAat4WiO5L3L3P7dtqXvyLB4e6By2423/FjKIEw1qCF/+ac+B/JmmQ3u1mo KFUfts4HractSaim8UL/yFwMlvU5lTY5ckYEKJzkdkdlGN/8bPr2vsIjFlk37nf6 9SthIrda0ZGuuBXMHGYX8NT5squEFhLzctS0T9m5/ro/tnQiLVbF/HimHBpP2bjl gnv2+X+rs2crONCNU9SGgyVFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAMWtI9 9h6g+4q0JNEwFwCOE0VpMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA46hc04sWN5UhxtWogJG8QddLjjZ2OxEcOiCgSQ2FAm3aA+/uzfEQt uzTgVwpecNXCUq164bA2p2pNr7dArU9tot8SJ1/5pfonWgEz6LTsx0fiJY7WN/Ph 9J62hxR21q6yaSEGPXcFwngi+HfCat3yesHECe894avgtfy06ns0X8KZlosfMTw6 IBMJRAHVfdi5arIHPcVpirH5VOKrs/z/VLJK0yq8eukg76o3B8+sF8+FlvYdQkWW IOod9/U85e1X7BWtc6pNFqHOPu2FoYwXehmsXiTGM3WB0ScBtRE/rRn9jUs4hfQ/ F5205Xx3qrzXnA3DKDQWVjEmvrr6kedM -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:19 2025 by rpki-client