$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json) Hash identifier: P2Be+zlA01ThLkQoh5yjTgJxe+3Y7rv+dZePdvkZCIk= Subject key identifier: E5:52:40:AE:76:6B:A8:FA:50:77:75:A5:6A:AD:7F:D6:A0:9C:A9:E5 Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft Manifest number: 18 Signing time: Sat 23 Aug 2025 08:11:41 +0000 Manifest this update: Sat 23 Aug 2025 08:11:41 +0000 Manifest next update: Sat 30 Aug 2025 08:11:41 +0000 Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: mMgD3uk63w6FOq6/mP8UJBa9fx+LT2ScNS+sVixatUs=) 2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: jbmHjCRldQebtcE9n4Zv2veO89dDLab7PzgfvTloAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Validity Not Before: Aug 23 08:11:41 2025 GMT Not After : Aug 30 08:11:41 2025 GMT Subject: CN=68a977bd-08a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:19:f4:80:d6:55:57:9c:18:91:cc:cc:8f: 55:25:ee:c6:ab:47:77:b2:93:92:08:d1:ec:a5:4e: 52:56:ad:94:4b:ba:f5:64:d4:c0:63:a2:d8:83:17: 9c:8b:98:5a:19:de:41:b7:8d:21:f8:79:b6:2b:56: b0:b4:e7:6a:a3:d4:60:b8:86:b1:1d:fe:dd:8d:77: b4:e9:f3:ec:05:f3:33:5f:98:19:a1:5a:04:87:56: 8f:a5:47:26:65:2d:2a:fc:69:b8:bc:41:5e:26:f2: df:0b:6e:c0:ab:86:de:7c:9f:9c:20:33:30:ff:14: dd:d4:20:af:18:f5:ae:1f:68:2c:ff:ba:7e:0d:e0: 08:f5:99:72:1d:79:7e:ea:a4:16:5d:13:3b:10:03: 5a:2e:99:b3:82:5a:4e:84:48:fe:8e:4c:66:b3:4e: 42:54:5e:ba:18:df:60:d1:17:98:65:b5:c8:64:86: 21:cb:2f:12:16:44:31:cd:35:c7:5b:1b:71:25:88: cd:06:05:0c:b8:3a:1b:cc:65:fd:33:94:2f:ff:2c: 30:18:0b:60:3c:1c:79:ed:75:2b:2f:b5:8d:d2:5a: e0:b7:c3:65:ac:d8:41:f0:1e:49:56:92:63:89:f8: 92:bc:70:9c:2f:24:1d:7b:c6:e1:e1:2d:d0:45:b9: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:52:40:AE:76:6B:A8:FA:50:77:75:A5:6A:AD:7F:D6:A0:9C:A9:E5 X509v3 Authority Key Identifier: keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c5:46:49:58:04:53:b4:14:f5:1d:c2:60:7f:ac:d6:c5:04: 38:67:c6:2b:6e:27:11:8c:f8:a5:05:64:01:cf:76:3d:a4:27: bf:1c:bb:e0:05:e3:a5:f7:d0:ba:58:bd:38:71:12:25:07:73: 94:09:dc:e9:0d:7f:52:9e:17:f4:6e:0d:d7:ba:c9:02:7a:6e: 28:95:30:8d:73:70:47:91:6a:b2:bc:62:b4:71:a7:a9:d3:87: 46:f5:81:d6:fe:99:7b:4a:4b:bc:39:90:df:b5:59:a7:f7:3a: 41:49:a3:89:5b:e4:85:65:5e:37:f4:f3:6b:2e:56:53:b0:89: bf:d5:b9:18:49:b8:b1:3f:d4:e3:e0:69:09:0a:5a:ba:3e:ea: 62:82:e5:28:53:e0:22:6b:44:8e:9f:d0:f6:3a:c0:dd:d3:e1: df:be:01:5c:7b:53:32:02:53:85:5e:5b:4c:6b:cd:a7:d4:b8: 39:c5:0f:a1:79:5f:35:98:94:24:d6:73:44:0f:3c:c6:8f:a5: d2:b0:0b:e7:ae:12:b8:65:e7:70:de:cf:47:b9:6a:e6:24:cd: cb:78:b7:17:9c:8c:1f:84:49:2f:cc:66:7b:f2:36:50:fa:11: d4:06:ec:27:ba:0f:3c:56:aa:43:04:0e:15:35:c9:05:5f:53: 28:be:b3:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODQyRTExMC8GA1UEBRMoMTlBMDQzODE5OUZERkUyNERDRjg1NjYyQTQ4QkRCNTc1 MUUxQjVEOTAeFw0yNTA4MjMwODExNDFaFw0yNTA4MzAwODExNDFaMBgxFjAUBgNV BAMTDTY4YTk3N2JkLTA4YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwPBn0gNZVV5wYkczMj1Ul7sarR3eyk5II0eylTlJWrZRLuvVk1MBjotiDF5yL mFoZ3kG3jSH4ebYrVrC052qj1GC4hrEd/t2Nd7Tp8+wF8zNfmBmhWgSHVo+lRyZl LSr8abi8QV4m8t8LbsCrht58n5wgMzD/FN3UIK8Y9a4faCz/un4N4Aj1mXIdeX7q pBZdEzsQA1oumbOCWk6ESP6OTGazTkJUXroY32DRF5hltchkhiHLLxIWRDHNNcdb G3EliM0GBQy4OhvMZf0zlC//LDAYC2A8HHntdSsvtY3SWuC3w2Ws2EHwHklWkmOJ +JK8cJwvJB17xuHhLdBFuQYXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5VJArnZr qPpQd3Wlaq1/1qCcqeUwHwYDVR0jBBgwFoAUGaBDgZn9/iTc+FZipIvbV1Hhtdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NDJFLzYxOTlCRDU0NURF RTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2FCRGdabjlfaVRjLUZaaXBJdmJWMUhodGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NDJFLzYxOTlCRDU0NURFRTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lU Yy1GWmlwSXZiVjFIaHRkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnFRklYBFO0FPUdwmB/rNbFBDhnxituJxGM+KUFZAHPdj2kJ78cu+AF 46X30LpYvThxEiUHc5QJ3OkNf1KeF/RuDde6yQJ6biiVMI1zcEeRarK8YrRxp6nT h0b1gdb+mXtKS7w5kN+1Waf3OkFJo4lb5IVlXjf082suVlOwib/VuRhJuLE/1OPg aQkKWro+6mKC5ShT4CJrRI6f0PY6wN3T4d++AVx7UzICU4VeW0xrzafUuDnFD6F5 XzWYlCTWc0QPPMaPpdKwC+euErhl53Dez0e5auYkzct4txecjB+ESS/MZnvyNlD6 EdQG7Ce6DzxWqkMEDhU1yQVfUyi+s3c= -----END CERTIFICATE-----Generated at Sat Aug 23 19:29:07 2025 by rpki-client