$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: VeXwrXJTU7BI9YM2qhPnx+TfTtqZ5xkB+K4cCefU9Fw= Subject key identifier: A8:91:45:3C:C9:26:46:90:6D:AE:72:55:5F:6A:1F:1B:9A:1D:13:0D Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 56 Signing time: Fri 25 Jul 2025 07:34:22 +0000 Manifest this update: Fri 25 Jul 2025 07:34:21 +0000 Manifest next update: Fri 01 Aug 2025 07:34:21 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: 4WHsMyXm1MdLND52CLcwpqsF3uUDOYMBVWKQaeL+bbc=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Jul 25 07:34:21 2025 GMT Not After : Aug 1 07:34:21 2025 GMT Subject: CN=6883337d-3aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:a2:73:ab:2e:99:f2:e1:54:95:66:6b:f6: e3:08:d5:62:6e:ce:6d:b7:8c:b2:57:9e:1b:c4:2f: d4:91:c6:dd:ce:15:fb:99:89:bc:7c:14:a0:9a:63: 54:45:1b:e1:77:90:a6:6d:55:d0:23:9e:ee:9c:63: 68:f7:25:ff:14:c9:5a:54:c3:2e:88:0e:e1:ec:02: 49:32:aa:75:11:b0:1d:cf:ce:c6:59:a0:7c:42:83: 50:db:e7:9f:24:93:5a:3f:46:2d:43:7a:d7:d2:5e: e0:b1:f3:ed:49:34:ee:18:3d:5e:c2:87:0a:21:79: e6:5b:2e:72:4f:44:05:93:45:12:3c:5a:7a:5b:40: c6:65:06:50:d5:f5:ad:f3:62:59:f2:ab:c6:3d:92: c0:45:15:2a:2d:36:71:c9:36:c6:95:9f:68:6d:d7: 41:e4:91:00:b6:2d:27:d1:71:16:a9:49:bf:b3:ce: 03:ab:41:c2:40:74:bc:5a:81:d9:9b:b2:09:2d:95: 97:19:72:23:02:93:3e:e8:75:84:82:33:f3:06:03: df:f4:b3:65:b7:56:64:c6:34:26:d3:90:a5:3e:06: 55:66:0f:92:ae:2d:ce:bb:e5:9b:54:f1:1e:ee:ae: 57:5f:13:55:88:03:d8:bf:04:38:64:84:89:bd:fb: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:91:45:3C:C9:26:46:90:6D:AE:72:55:5F:6A:1F:1B:9A:1D:13:0D X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:87:87:d1:34:d9:f1:cf:09:f3:b9:f5:23:65:65:25:47:73: e8:5d:0e:c0:c8:f3:06:d0:3f:be:ce:1e:25:6f:ed:c5:15:66: f0:99:8c:5f:1a:8d:ee:99:73:54:6a:5d:7f:6a:68:41:bf:bf: 90:39:66:88:29:6f:f8:64:e9:e2:11:21:59:aa:a6:39:c5:98: 27:72:28:08:4b:ff:34:ef:1a:b9:16:80:d8:dc:e0:55:5c:50: bf:dd:54:0d:0e:09:f5:ec:58:14:ff:c5:2b:a2:4f:e5:07:dd: b8:d5:62:01:ff:3e:af:15:20:c1:8c:c9:7c:42:6e:04:13:3d: c8:b1:56:f6:37:e1:48:94:d9:38:a2:ee:0c:e8:72:c1:62:4d: 95:16:ac:6a:4d:fb:b4:62:17:6c:c9:1d:74:93:9c:5a:c4:73: f4:05:48:58:57:9f:df:d2:46:57:03:9e:51:13:78:5c:ce:e5: 17:0c:87:02:90:53:bd:f1:c8:a3:b9:cb:af:39:6d:57:f3:37: e6:d6:0f:3d:5c:4f:0d:a3:77:19:d1:27:7a:0d:2f:03:ad:e7: 4e:ab:03:d3:38:62:bb:bf:69:c8:83:d7:24:cd:b0:ae:d9:7b: 03:86:c2:df:2a:42:73:cb:1f:47:62:d4:95:d1:94:1c:f5:d2: db:55:a1:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA3MjUwNzM0MjFaFw0yNTA4MDEwNzM0MjFaMBgxFjAUBgNV BAMTDTY4ODMzMzdkLTNhYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC68aJzqy6Z8uFUlWZr9uMI1WJuzm23jLJXnhvEL9SRxt3OFfuZibx8FKCaY1RF G+F3kKZtVdAjnu6cY2j3Jf8UyVpUwy6IDuHsAkkyqnURsB3PzsZZoHxCg1Db558k k1o/Ri1DetfSXuCx8+1JNO4YPV7ChwoheeZbLnJPRAWTRRI8WnpbQMZlBlDV9a3z Ylnyq8Y9ksBFFSotNnHJNsaVn2ht10HkkQC2LSfRcRapSb+zzgOrQcJAdLxagdmb sgktlZcZciMCkz7odYSCM/MGA9/0s2W3VmTGNCbTkKU+BlVmD5KuLc675ZtU8R7u rldfE1WIA9i/BDhkhIm9+281AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqJFFPMkm RpBtrnJVX2ofG5odEw0wHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKaHh9E02fHPCfO59SNlZSVHc+hdDsDI8wbQP77OHiVv7cUVZvCZjF8a je6Zc1RqXX9qaEG/v5A5Zogpb/hk6eIRIVmqpjnFmCdyKAhL/zTvGrkWgNjc4FVc UL/dVA0OCfXsWBT/xSuiT+UH3bjVYgH/Pq8VIMGMyXxCbgQTPcixVvY34UiU2Tii 7gzocsFiTZUWrGpN+7RiF2zJHXSTnFrEc/QFSFhXn9/SRlcDnlETeFzO5RcMhwKQ U73xyKO5y685bVfzN+bWDz1cTw2jdxnRJ3oNLwOt506rA9M4Yru/aciD1yTNsK7Z ewOGwt8qQnPLH0di1JXRlBz10ttVoTE= -----END CERTIFICATE-----Generated at Fri Jul 25 18:28:53 2025 by rpki-client