$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: wHsc6nUiLuiUygzl0tRiqB7+gMkRv2OO0dMNQP4Yu50= Subject key identifier: 1D:C2:37:CA:BF:68:B0:3F:67:56:91:6B:D3:48:C1:57:91:3F:B9:28 Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 06C7 Signing time: Fri 22 Aug 2025 20:46:27 +0000 Manifest this update: Fri 22 Aug 2025 20:46:27 +0000 Manifest next update: Fri 29 Aug 2025 20:46:27 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: L8fiJ5WRdkXsyhN3gFWRjq1gxD0J+sDOTHSNXg8f6Ds=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: IN0gc9PJxJ33qBabtfsH0oOyy1CZdnLejFeFWz0Ut3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Aug 22 20:46:27 2025 GMT Not After : Aug 29 20:46:27 2025 GMT Subject: CN=68a8d723-23cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:d3:f0:93:b3:df:6c:46:b8:56:3e:7a:0e: 52:75:1c:05:c7:04:9b:c7:5e:b9:4a:3e:77:53:9e: 53:6d:b0:1a:02:66:df:02:3d:aa:13:79:b7:8c:48: 84:ac:4f:70:3f:6e:f4:2d:79:ea:50:f6:fe:59:9c: 3c:fb:90:bb:71:f4:3b:28:6c:55:e7:6c:38:18:4d: 8a:76:24:53:49:9d:4e:b1:e6:1f:f6:8f:39:0e:6e: 31:5a:bb:fe:e5:7e:cd:e8:58:06:dd:d6:5a:09:2f: f7:37:2b:32:dd:68:8d:84:95:a6:82:75:c4:81:40: 63:ac:e8:89:1a:b0:57:7e:d1:a8:ed:ae:98:e4:73: ea:92:91:d8:84:0c:3f:ee:95:93:70:19:b5:08:4e: b8:e7:ee:07:cb:82:ef:90:c7:32:c1:ed:c2:1e:a6: 5b:e3:5f:87:7b:75:18:da:87:47:34:a9:b2:2b:b8: 83:52:33:95:d9:fb:23:81:53:19:59:f3:df:90:50: 89:57:e0:ef:00:96:27:3d:59:06:7c:a5:0a:a1:65: 82:58:67:8d:66:d2:bf:23:38:f2:68:53:34:01:84: a6:40:32:60:72:56:74:94:64:fb:9f:7a:f4:af:8c: 88:12:29:3e:1b:1f:d8:d4:29:a3:85:42:7c:7e:0d: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:37:CA:BF:68:B0:3F:67:56:91:6B:D3:48:C1:57:91:3F:B9:28 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:01:ad:0d:2f:52:a9:37:53:ed:17:5d:a7:9e:e4:6c:51:25: 31:e3:43:c2:78:2c:a3:75:de:7d:72:f7:27:91:a0:a4:d4:2a: 1e:39:47:b6:65:50:60:62:be:14:3d:76:6d:07:85:6c:86:97: 52:56:06:83:44:81:e8:4a:b7:7c:26:6c:08:2d:cb:54:ae:50: f9:25:ad:cc:fc:6b:2c:bf:ac:76:d9:85:37:78:b1:7b:5c:86: 0f:04:41:ba:4a:45:c9:23:0e:c0:d6:5b:25:3c:64:04:c6:20: fb:87:c2:11:af:f3:a6:aa:a4:32:18:f4:a6:3e:aa:34:7c:59: fb:07:2a:50:e7:7a:84:33:be:4f:62:71:81:67:75:44:bb:00: dd:37:88:d3:69:0b:63:53:a5:0a:d1:aa:e7:a9:ee:6c:0e:a3: 7b:3b:09:39:6c:c7:41:36:f7:56:76:fd:d0:fe:12:f4:e7:50: e2:f2:6d:b2:32:8a:9a:e7:4b:21:4a:a8:01:b5:79:23:b5:01: 25:a0:3c:4e:e5:29:82:6b:1d:6e:cc:0f:80:49:97:91:92:11: b3:74:c7:e6:a0:8d:fb:80:98:d0:46:17:ee:3d:d6:cf:69:09: 66:1d:fb:ab:57:af:f5:e2:ec:12:9b:48:39:fc:28:08:47:4f: 76:7a:f0:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUwODIyMjA0NjI3WhcNMjUwODI5MjA0NjI3WjAYMRYwFAYD VQQDEw02OGE4ZDcyMy0yM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnITT8JOz32xGuFY+eg5SdRwFxwSbx165Sj53U55TbbAaAmbfAj2qE3m3jEiE rE9wP270LXnqUPb+WZw8+5C7cfQ7KGxV52w4GE2KdiRTSZ1OseYf9o85Dm4xWrv+ 5X7N6FgG3dZaCS/3Nysy3WiNhJWmgnXEgUBjrOiJGrBXftGo7a6Y5HPqkpHYhAw/ 7pWTcBm1CE645+4Hy4LvkMcywe3CHqZb41+He3UY2odHNKmyK7iDUjOV2fsjgVMZ WfPfkFCJV+DvAJYnPVkGfKUKoWWCWGeNZtK/IzjyaFM0AYSmQDJgclZ0lGT7n3r0 r4yIEik+Gx/Y1CmjhUJ8fg0UYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3CN8q/ aLA/Z1aRa9NIwVeRP7koMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Aa0NL1KpN1PtF12nnuRsUSUx40PCeCyjdd59cvcnkaCk1CoeOUe2 ZVBgYr4UPXZtB4VshpdSVgaDRIHoSrd8JmwILctUrlD5Ja3M/Gssv6x22YU3eLF7 XIYPBEG6SkXJIw7A1lslPGQExiD7h8IRr/OmqqQyGPSmPqo0fFn7BypQ53qEM75P YnGBZ3VEuwDdN4jTaQtjU6UK0arnqe5sDqN7Owk5bMdBNvdWdv3Q/hL051Di8m2y Moqa50shSqgBtXkjtQEloDxO5SmCax1uzA+ASZeRkhGzdMfmoI37gJjQRhfuPdbP aQlmHfurV6/14uwSm0g5/CgIR092evBr -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:25 2025 by rpki-client