$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: ofPTqRSb+as4bYNT1tojidKWGVj2N6C6qA1B8bxGbbA= Subject key identifier: F7:DD:F7:34:EE:0E:A9:DC:CA:84:7E:0E:CC:CA:60:74:CB:AC:D3:E5 Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 016D Signing time: Sat 23 Aug 2025 04:01:06 +0000 Manifest this update: Sat 23 Aug 2025 04:01:06 +0000 Manifest next update: Sat 30 Aug 2025 04:01:06 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: wpK+AzDuDPi3rM87xDQ80errgd0jkn+G4/9tJKJ70Pw=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: iKZhrYsqwja6p9Jg0/rXm6hAG4LxSI3ekb53k0lCuBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Aug 23 04:01:06 2025 GMT Not After : Aug 30 04:01:06 2025 GMT Subject: CN=68a93d02-797e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:84:49:9b:c1:24:fb:96:68:64:ab:ca:30: 1c:0e:2a:42:6d:f4:01:54:0f:4f:2f:fe:ea:75:0f: d7:34:9b:09:8f:26:53:fd:5d:f9:e6:2a:19:1a:e1: cc:32:cc:12:60:a9:c4:a9:b6:67:83:63:a0:67:3f: ea:a9:51:7f:75:09:13:96:8c:a3:d3:b2:b0:d7:85: 23:03:d1:2e:89:9a:d1:48:8e:24:81:00:8f:89:97: 84:db:2b:8c:e3:44:7c:3d:16:3e:0f:6b:68:b4:a7: c5:75:ec:ef:15:cb:c0:2b:b3:97:52:3c:c3:d9:e2: 80:b5:df:ee:5b:4f:bf:03:75:95:e0:05:31:a1:30: ec:19:2e:ff:67:56:23:ce:ed:fb:08:fd:c3:ff:61: 2e:e0:84:66:d5:10:6e:a7:00:cc:0d:00:c9:4e:92: eb:52:9c:c1:b1:36:cc:e5:38:80:ee:92:c2:ec:6b: 45:ff:73:be:36:83:39:c2:81:c8:41:d2:4d:e6:07: 07:22:5d:1c:98:e5:c2:5f:9e:52:81:06:77:7e:b4: 27:63:24:53:34:ba:4b:3e:7a:90:ce:a0:ee:94:7c: 06:ab:b4:0e:ad:16:a6:4c:a0:32:20:bf:fd:3c:9e: 63:6f:8b:4e:11:29:eb:db:36:5c:20:6f:f5:1a:2c: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:F7:34:EE:0E:A9:DC:CA:84:7E:0E:CC:CA:60:74:CB:AC:D3:E5 X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e8:97:a0:39:eb:2e:4b:02:35:01:3f:3f:5c:c2:e1:53:11: 8b:5c:c8:82:de:5f:c6:5a:1f:5c:13:b8:a1:c7:3e:f0:80:a3: 48:23:8e:4f:ca:70:a9:a3:e8:52:20:c6:e8:45:b8:32:67:3c: 47:80:50:cc:18:dc:a3:d4:a8:bc:d0:ea:1d:e7:69:db:78:10: 29:c7:9f:9a:4a:44:c8:17:a9:13:b0:db:5f:c4:e9:09:8a:c6: e4:9e:34:c8:71:4f:9a:05:0d:a9:fd:18:11:85:4a:c9:c0:f2: 79:91:d8:67:b3:0d:6b:3c:c4:47:af:31:b3:a6:71:18:89:7e: e4:60:80:3b:3c:c0:e0:5f:4e:2c:1e:7f:4f:d1:fa:12:4c:7e: 58:f9:12:3a:c2:0d:bd:e2:f3:f2:74:43:92:78:b2:db:87:f9: 1a:05:83:e0:73:1b:3b:36:92:2e:85:ca:d5:c4:68:22:8e:1d: 20:af:93:c2:02:18:3b:4f:d0:af:80:df:d5:3a:4d:c7:a9:39: 36:d8:e4:a0:44:00:0a:81:1b:aa:c8:9d:68:ac:63:7b:ab:3e: ff:b4:fe:5e:6f:7c:0d:85:43:20:22:d2:df:15:e5:b2:aa:9c: 69:f0:e7:23:5d:13:6c:c1:ef:6e:e0:63:16:94:ad:ac:3f:0d: 02:b1:c4:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjUwODIzMDQwMTA2WhcNMjUwODMwMDQwMTA2WjAYMRYwFAYD VQQDEw02OGE5M2QwMi03OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5q6ESZvBJPuWaGSryjAcDipCbfQBVA9PL/7qdQ/XNJsJjyZT/V355ioZGuHM MswSYKnEqbZng2OgZz/qqVF/dQkTloyj07Kw14UjA9EuiZrRSI4kgQCPiZeE2yuM 40R8PRY+D2totKfFdezvFcvAK7OXUjzD2eKAtd/uW0+/A3WV4AUxoTDsGS7/Z1Yj zu37CP3D/2Eu4IRm1RBupwDMDQDJTpLrUpzBsTbM5TiA7pLC7GtF/3O+NoM5woHI QdJN5gcHIl0cmOXCX55SgQZ3frQnYyRTNLpLPnqQzqDulHwGq7QOrRamTKAyIL/9 PJ5jb4tOESnr2zZcIG/1GixElwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfd9zTu DqncyoR+DszKYHTLrNPlMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC6JegOesuSwI1AT8/XMLhUxGLXMiC3l/GWh9cE7ihxz7wgKNII45P ynCpo+hSIMboRbgyZzxHgFDMGNyj1Ki80Ood52nbeBApx5+aSkTIF6kTsNtfxOkJ isbknjTIcU+aBQ2p/RgRhUrJwPJ5kdhnsw1rPMRHrzGzpnEYiX7kYIA7PMDgX04s Hn9P0foSTH5Y+RI6wg294vPydEOSeLLbh/kaBYPgcxs7NpIuhcrVxGgijh0gr5PC Ahg7T9CvgN/VOk3HqTk22OSgRAAKgRuqyJ1orGN7qz7/tP5eb3wNhUMgItLfFeWy qpxp8OcjXRNswe9u4GMWlK2sPw0CscRV -----END CERTIFICATE-----Generated at Sat Aug 23 15:44:26 2025 by rpki-client