$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: ZFfHMJzk8rW3ate7DROInE5JoiatTEtfH1QWtzo52rw= Subject key identifier: A0:7D:6E:66:3B:0B:80:BA:30:65:F3:72:83:B9:0A:AE:E9:15:1E:C5 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 09 Signing time: Sat 23 Aug 2025 08:22:35 +0000 Manifest this update: Sat 23 Aug 2025 08:22:35 +0000 Manifest next update: Sat 30 Aug 2025 08:22:35 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: 1XafWBbbd5sgUkAntBE02nC1cqeJoDYbjfxhYf3ppVs=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Aug 23 08:22:35 2025 GMT Not After : Aug 30 08:22:35 2025 GMT Subject: CN=68a97a4b-497f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:22:20:c4:5a:96:8c:69:f8:f2:70:c4:e3:0d: 32:ff:85:19:9b:73:38:31:fa:df:c9:85:88:ef:17: 90:79:a8:f6:b2:ab:a3:a9:ba:21:09:23:cb:16:a8: 35:e5:c1:92:15:c7:eb:c4:7b:0a:dc:5e:b9:31:7c: 93:05:ae:0f:fd:b9:08:8f:f4:16:cd:7e:85:8a:24: 3c:3e:05:45:0f:d9:3d:17:9a:af:ed:98:bf:7a:c0: 3c:83:4b:d1:4f:bd:83:09:34:fe:8c:4c:20:fc:e4: 89:4b:40:7a:6d:c6:ea:70:b5:de:89:38:89:b5:bf: bd:03:8a:73:26:be:70:ac:cd:82:a0:32:32:86:5f: c9:af:26:4d:3e:b1:8f:33:90:ee:f0:95:b0:5a:78: 98:12:64:23:71:b9:91:f5:b8:d2:df:85:b4:96:04: 86:c3:b4:f1:4a:b8:37:cb:f9:86:58:75:b3:1f:83: 0e:76:f7:f7:d7:3d:c8:91:83:92:7b:34:b9:f6:97: 79:42:b2:f4:93:2c:ee:75:a5:e8:ad:ce:bd:e9:90: c0:c5:c9:6f:0d:40:2f:8e:bc:5a:5b:0f:c6:97:d5: 4f:ba:ab:58:8f:b9:84:c6:9a:6a:4d:a0:ec:f3:8c: be:b6:b8:01:40:3c:a9:10:90:16:50:05:02:ae:73: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7D:6E:66:3B:0B:80:BA:30:65:F3:72:83:B9:0A:AE:E9:15:1E:C5 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f8:ee:f3:89:a6:8a:b8:bf:f9:4b:d9:21:f4:61:74:15:d3: 7a:55:5f:18:df:13:25:07:a9:69:9d:16:a5:ff:72:7d:95:a0: 30:dc:04:b7:28:92:ac:28:04:2a:cc:49:dc:c7:5e:07:c0:45: ea:bc:fe:7a:ce:f4:82:ae:e4:8e:94:45:a2:60:f3:f2:5f:2b: 2a:f8:a9:da:cc:b0:2e:69:e8:30:26:78:2e:0b:fe:9a:d2:b7: 61:f2:69:fc:8c:5d:aa:88:22:2c:e6:cc:df:34:30:86:e4:d7: 9d:94:86:32:8e:16:00:ed:35:f5:54:92:ef:b8:66:42:4f:40: 71:d5:24:b3:42:82:e6:bc:7e:fb:c8:6d:52:36:dd:0f:14:e9: ed:97:57:43:9c:cd:14:ed:fc:ba:03:db:0d:4a:28:d5:57:e1: 0d:f6:01:24:30:e5:c2:33:de:30:f3:5d:0a:28:21:ca:63:ef: 86:db:03:fa:67:db:a3:ad:9d:ab:24:aa:4a:ea:d6:bf:09:cd: b8:37:53:84:23:f7:95:30:bc:df:ea:3b:b6:08:19:10:52:f2: bb:ea:9f:62:ec:e1:e6:46:fc:7a:7b:f0:6a:5d:6f:83:60:fe: 82:93:f6:46:3b:0f:fd:dd:ea:4a:6f:23:44:c5:cc:d4:2c:8d: 6e:08:53:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNTA4MjMwODIyMzVaFw0yNTA4MzAwODIyMzVaMBgxFjAUBgNV BAMTDTY4YTk3YTRiLTQ5N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaIiDEWpaMafjycMTjDTL/hRmbczgx+t/JhYjvF5B5qPayq6OpuiEJI8sWqDXl wZIVx+vEewrcXrkxfJMFrg/9uQiP9BbNfoWKJDw+BUUP2T0Xmq/tmL96wDyDS9FP vYMJNP6MTCD85IlLQHptxupwtd6JOIm1v70DinMmvnCszYKgMjKGX8mvJk0+sY8z kO7wlbBaeJgSZCNxuZH1uNLfhbSWBIbDtPFKuDfL+YZYdbMfgw529/fXPciRg5J7 NLn2l3lCsvSTLO51peitzr3pkMDFyW8NQC+OvFpbD8aX1U+6q1iPuYTGmmpNoOzz jL62uAFAPKkQkBZQBQKuc/L3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoH1uZjsL gLowZfNyg7kKrukVHsUwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFb47vOJpoq4v/lL2SH0YXQV03pVXxjfEyUHqWmdFqX/cn2VoDDcBLco kqwoBCrMSdzHXgfAReq8/nrO9IKu5I6URaJg8/JfKyr4qdrMsC5p6DAmeC4L/prS t2HyafyMXaqIIizmzN80MIbk152UhjKOFgDtNfVUku+4ZkJPQHHVJLNCgua8fvvI bVI23Q8U6e2XV0OczRTt/LoD2w1KKNVX4Q32ASQw5cIz3jDzXQooIcpj74bbA/pn 26Otnaskqkrq1r8Jzbg3U4Qj95UwvN/qO7YIGRBS8rvqn2Ls4eZG/Hp78Gpdb4Ng /oKT9kY7D/3d6kpvI0TFzNQsjW4IU+Y= -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:27 2025 by rpki-client