$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: SRX21sMzJ3ZQSNwlsqaaxZfLfuUo6r5wqoGub3HpXvw= Subject key identifier: 63:16:1A:CE:87:18:06:7D:C7:66:F7:F3:85:37:B7:4B:45:B0:FA:40 Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: CD Signing time: Sat 23 Aug 2025 05:51:10 +0000 Manifest this update: Sat 23 Aug 2025 05:51:09 +0000 Manifest next update: Sat 30 Aug 2025 05:51:09 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: dxBZY0hcXdc7zUwIowZuQ5Kv7ly9tvsK80KPk4O+MWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Aug 23 05:51:09 2025 GMT Not After : Aug 30 05:51:09 2025 GMT Subject: CN=68a956ce-203a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:0b:6b:9a:64:e7:66:d4:34:4d:aa:3d:53: 92:69:3b:28:fc:da:19:3d:99:5f:a1:38:a2:b6:31: 5f:bf:44:5a:8c:00:43:7c:2b:e3:af:e1:8e:df:cf: db:46:02:00:fb:6e:1c:bd:0a:e4:a9:d2:01:dd:82: f7:69:b1:95:39:c1:9e:40:92:b6:ff:df:0f:d7:3b: d1:7e:f5:32:c0:4e:59:f1:9a:53:aa:a7:24:c0:ba: 44:0c:38:f2:75:ab:2f:e4:06:e4:c4:5b:e7:55:dc: 54:f5:1a:9f:15:b4:f9:77:29:c2:d8:74:37:3d:4a: 05:ad:08:2a:fa:34:42:c6:72:ea:2f:bb:8e:3b:d9: 97:72:a2:b6:4e:fd:ea:0e:56:fe:43:7b:54:98:c7: 22:47:b6:cb:2a:87:22:c6:c6:b4:4f:4b:78:70:cd: 99:97:29:20:9f:25:99:ff:19:9a:3f:a5:7a:a6:5f: 7a:5f:b6:0f:52:b7:0c:eb:73:43:78:bc:14:80:2f: bb:ce:e5:3d:ec:40:0b:0e:6f:1e:0f:f6:ab:6d:f0: 06:23:3d:26:3f:8e:ae:56:85:66:5d:d8:d9:85:c5: 8d:a2:29:b7:e7:40:7c:5e:91:39:de:c6:68:7f:e5: 53:7f:72:39:40:0f:97:de:94:69:43:76:19:5e:35: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:16:1A:CE:87:18:06:7D:C7:66:F7:F3:85:37:B7:4B:45:B0:FA:40 X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4f:99:00:9e:a8:02:14:f7:d2:53:95:6b:ee:4a:42:8f:e8: 47:98:e6:54:f4:46:44:49:8d:48:b7:d1:da:fe:fc:a6:df:a2: 19:c4:4b:e0:a8:ba:ab:da:36:e5:0b:db:6d:7d:38:25:24:4d: c7:bb:0e:ad:57:a1:44:73:ef:f7:a1:2d:cf:d3:a3:0d:56:de: ae:09:cc:83:a5:6f:13:c2:7f:7e:6b:e9:68:a9:77:b9:be:fa: de:6f:49:78:89:19:e3:1a:06:86:16:fb:9a:47:f6:9b:10:6a: 7a:da:ab:e2:00:a1:e9:26:c3:5b:64:3e:57:bd:d3:ed:ee:b7: 9c:5c:72:e6:48:16:f5:b1:ca:18:d4:76:15:9e:5f:a7:29:a0: ee:d8:d1:b0:cf:f7:ce:18:b2:98:11:19:1b:1a:c1:98:5e:5a: 7c:bc:0a:7d:89:80:f0:a1:53:f4:ab:78:57:83:97:0e:a0:73: 10:ab:bf:28:f1:1f:cc:b3:52:a7:f6:70:93:05:bb:18:e0:13: 61:0c:25:85:38:1a:f6:49:d5:71:b4:89:83:2e:a3:9b:90:f6: 3d:7a:24:4a:9b:b7:c4:c0:ae:69:aa:e1:0a:59:94:8c:b6:1b: bf:e3:04:df:cb:25:d9:d5:ac:1a:e1:6e:62:1e:42:b9:c4:d7: 79:28:56:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjUwODIzMDU1MTA5WhcNMjUwODMwMDU1MTA5WjAYMRYwFAYD VQQDEw02OGE5NTZjZS0yMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFULa5pk52bUNE2qPVOSaTso/NoZPZlfoTiitjFfv0RajABDfCvjr+GO38/b RgIA+24cvQrkqdIB3YL3abGVOcGeQJK2/98P1zvRfvUywE5Z8ZpTqqckwLpEDDjy dasv5AbkxFvnVdxU9RqfFbT5dynC2HQ3PUoFrQgq+jRCxnLqL7uOO9mXcqK2Tv3q Dlb+Q3tUmMciR7bLKocixsa0T0t4cM2ZlykgnyWZ/xmaP6V6pl96X7YPUrcM63ND eLwUgC+7zuU97EALDm8eD/arbfAGIz0mP46uVoVmXdjZhcWNoim350B8XpE53sZo f+VTf3I5QA+X3pRpQ3YZXjVgTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMWGs6H GAZ9x2b384U3t0tFsPpAMB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeT5kAnqgCFPfSU5Vr7kpCj+hHmOZU9EZESY1It9Ha/vym36IZxEvg qLqr2jblC9ttfTglJE3Huw6tV6FEc+/3oS3P06MNVt6uCcyDpW8Twn9+a+loqXe5 vvreb0l4iRnjGgaGFvuaR/abEGp62qviAKHpJsNbZD5XvdPt7recXHLmSBb1scoY 1HYVnl+nKaDu2NGwz/fOGLKYERkbGsGYXlp8vAp9iYDwoVP0q3hXg5cOoHMQq78o 8R/Ms1Kn9nCTBbsY4BNhDCWFOBr2SdVxtImDLqObkPY9eiRKm7fEwK5pquEKWZSM thu/4wTfyyXZ1awa4W5iHkK5xNd5KFbu -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:06 2025 by rpki-client