$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: csaznMtMnp/K09jScipcVr8Oh5nI+l96gWFB7TgA1bY= Subject key identifier: 34:CC:38:B7:BE:E9:E9:48:4A:B1:91:54:82:DA:91:C5:1B:5B:4E:B6 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 019B Signing time: Sat 23 Aug 2025 02:38:38 +0000 Manifest this update: Sat 23 Aug 2025 02:38:38 +0000 Manifest next update: Sat 30 Aug 2025 02:38:38 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: RI08FUCOHwyCqBiaNQzNc1K7BmhLN8/VJDH2oE4JRzQ=) 2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: QotOqnglA46ODcG/lG9E8XyvCGo9HnekdR3etzUrE4c=) 3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: 4KMF0OCYbNDwaW3aLIgUQJgQPdi1cw9YHAWu6imOU70=) 4: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: ezxJgBFw2tKKcU962PajWcu+NU//ODot2RyjD71Fn24=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: vvnk4u9DNse+nnNTrLADNzPvSMLhalyiJs4z4ddnMBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Aug 23 02:38:38 2025 GMT Not After : Aug 30 02:38:38 2025 GMT Subject: CN=68a929ae-d664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:53:b3:95:d5:99:a8:4a:b5:ff:75:ed:eb: 12:09:93:b3:39:01:71:e1:30:07:d1:ad:4b:b4:5b: 90:dd:dd:e3:4e:d5:7f:36:14:4e:2a:0c:48:df:1f: 1e:3c:1b:d8:23:92:cf:e0:5d:66:12:5f:5f:37:24: 60:eb:22:a4:56:d9:95:31:72:9a:2b:6f:8f:f6:79: 8e:85:4f:1c:56:4c:bc:f9:7a:98:29:4f:77:89:07: 59:d1:10:f1:0f:5a:33:eb:60:ee:26:db:b6:07:e0: 85:50:f0:ca:83:4b:4b:52:24:45:cd:83:00:e5:05: 27:21:7f:d3:a3:42:75:a3:d7:42:88:6b:0a:ac:1e: c3:39:f8:16:5e:cc:36:45:01:8a:56:07:25:6b:d9: 9e:91:2a:44:13:2f:b8:24:c3:19:3a:a3:4f:30:c7: 85:13:82:d6:6a:cc:f4:5b:59:94:d2:7d:58:24:b8: a5:e3:e6:9e:77:22:31:9e:e3:9f:0b:10:2a:e5:43: 05:3a:61:ad:21:74:55:ad:c7:b0:45:b8:c1:80:9e: 34:6c:e3:70:e2:5a:dc:a8:f4:8c:75:fc:67:06:72: 60:b1:bc:33:e0:35:7f:1f:43:7a:d0:e2:48:d6:b8: d3:5f:a4:3b:26:b4:75:60:34:47:74:e9:25:7d:a9: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:38:B7:BE:E9:E9:48:4A:B1:91:54:82:DA:91:C5:1B:5B:4E:B6 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:b6:00:85:4e:e8:34:6a:e6:d8:90:35:d8:33:4f:79:bb:fc: 85:29:a6:75:ff:03:af:a0:a1:8d:bd:93:a2:c2:1a:76:67:e4: 7c:15:2c:3c:34:ed:74:9a:1a:54:8f:ca:27:17:d9:ca:2b:a5: b3:2a:67:5f:51:2f:92:84:76:b7:f1:27:8e:e9:6d:11:ce:10: b9:53:0a:a3:c3:17:20:63:a1:1e:f2:45:45:8a:7b:75:c1:4c: 94:96:b9:3b:a4:84:06:df:31:d4:cf:c2:f6:39:67:79:22:cb: 36:10:3f:08:20:39:d6:0a:77:be:3e:5e:66:74:a4:a1:85:7f: 83:90:36:d1:e7:7a:7e:0d:00:8a:40:ec:d4:8e:d6:59:a5:9a: e9:da:f4:00:6b:b2:8d:ce:5a:d3:77:04:4b:6b:52:81:71:81: 0f:f8:9b:04:7d:74:4e:e1:07:65:df:58:21:87:45:80:e3:d7: 44:33:55:e2:82:38:d6:16:65:e5:63:a6:64:9f:48:be:57:27: a9:ef:2d:af:98:36:80:cb:d0:cc:9d:68:7e:36:a8:d3:61:8d: 0c:2a:8f:b4:33:2e:a8:51:3c:56:fe:95:c8:e9:e6:a6:89:40: 40:55:ec:48:14:f5:f4:d0:ac:26:0c:6a:28:ee:0e:70:f3:f6: 80:f6:78:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUwODIzMDIzODM4WhcNMjUwODMwMDIzODM4WjAYMRYwFAYD VQQDEw02OGE5MjlhZS1kNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowJTs5XVmahKtf917esSCZOzOQFx4TAH0a1LtFuQ3d3jTtV/NhROKgxI3x8e PBvYI5LP4F1mEl9fNyRg6yKkVtmVMXKaK2+P9nmOhU8cVky8+XqYKU93iQdZ0RDx D1oz62DuJtu2B+CFUPDKg0tLUiRFzYMA5QUnIX/To0J1o9dCiGsKrB7DOfgWXsw2 RQGKVgcla9mekSpEEy+4JMMZOqNPMMeFE4LWasz0W1mU0n1YJLil4+aedyIxnuOf CxAq5UMFOmGtIXRVrcewRbjBgJ40bONw4lrcqPSMdfxnBnJgsbwz4DV/H0N60OJI 1rjTX6Q7JrR1YDRHdOklfalKPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTMOLe+ 6elISrGRVILakcUbW062MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDStgCFTug0aubYkDXYM095u/yFKaZ1/wOvoKGNvZOiwhp2Z+R8FSw8 NO10mhpUj8onF9nKK6WzKmdfUS+ShHa38SeO6W0RzhC5UwqjwxcgY6Ee8kVFint1 wUyUlrk7pIQG3zHUz8L2OWd5Iss2ED8IIDnWCne+Pl5mdKShhX+DkDbR53p+DQCK QOzUjtZZpZrp2vQAa7KNzlrTdwRLa1KBcYEP+JsEfXRO4Qdl31ghh0WA49dEM1Xi gjjWFmXlY6Zkn0i+Vyep7y2vmDaAy9DMnWh+NqjTYY0MKo+0My6oUTxW/pXI6eam iUBAVexIFPX00KwmDGoo7g5w8/aA9njk -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:26 2025 by rpki-client