$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: D6MEi8CZbfZzyls7HYcyU5COTOtO01BixkP5s0BIkiw= Subject key identifier: 0E:08:BF:25:72:1D:48:E5:C3:27:F6:7F:64:BA:A5:43:68:A8:C4:00 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 020D Signing time: Sat 19 Jul 2025 02:25:52 +0000 Manifest this update: Sat 19 Jul 2025 02:25:52 +0000 Manifest next update: Sat 26 Jul 2025 02:25:52 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: WG12Fha+79b4fEy9s26gIm6CFEgWFjH8vVbkucs2/6c=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Jul 19 02:25:52 2025 GMT Not After : Jul 26 02:25:52 2025 GMT Subject: CN=687b0230-443e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:da:0a:38:af:f1:ab:ca:8e:df:c1:a1:87: e1:d8:bb:2b:0e:bc:b4:11:57:a1:21:6b:89:03:6d: ad:11:16:47:ec:da:a4:95:99:f5:cf:e7:71:33:fa: 18:3c:1c:52:b8:69:6c:89:35:be:50:7a:00:2e:cc: 85:e8:c6:47:8e:8a:66:1c:0d:1b:ab:60:b5:da:36: 80:19:21:82:df:e2:58:68:18:3a:1b:6c:84:80:db: 11:e5:76:59:03:b9:fe:85:90:7f:97:47:29:62:62: e3:c9:37:6c:18:dd:a7:8c:ca:24:0f:0e:6a:42:f2: 41:64:c5:b6:01:06:38:38:19:23:fe:7b:53:3c:86: 9b:d6:63:b2:d4:60:c8:a9:9f:3b:10:0b:53:72:68: 42:44:5d:47:10:6f:53:fb:df:6a:ce:ba:42:c0:95: 77:d3:54:4d:b4:18:d1:39:50:5b:98:d5:59:bc:7c: c9:cf:ec:24:41:a5:85:53:00:55:19:2d:1e:9b:29: 2c:6d:94:83:f4:e7:96:26:c6:91:a4:e6:2e:e5:78: 26:2d:ae:0f:d5:be:28:21:31:b5:20:d0:aa:d2:16: 6f:3c:00:15:0c:df:69:84:ac:32:66:c5:57:b9:d1: 61:b1:93:01:09:4f:ca:5a:42:55:6b:69:81:21:74: fc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:08:BF:25:72:1D:48:E5:C3:27:F6:7F:64:BA:A5:43:68:A8:C4:00 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c3:fb:3d:74:10:b1:ee:78:7d:7b:84:35:d0:9b:45:37:72: be:8c:4e:82:fb:f2:d5:01:63:f2:69:91:de:91:be:78:42:95: 1f:29:76:96:40:d6:cd:83:f6:37:5b:28:73:98:2c:67:e4:69: 82:3b:bf:92:ed:ef:76:c5:1b:d5:86:d2:a6:cf:0f:74:a2:03: 56:6e:ef:cc:4f:5d:3c:3b:19:19:57:f5:fd:aa:a7:26:d6:b5: f4:f9:e6:2e:78:01:06:38:51:a8:d2:b3:61:a9:92:82:c4:10: f5:96:dc:81:fe:dd:73:78:55:89:ca:48:bd:79:76:d5:e7:fa: 74:71:20:75:0d:f3:30:b6:04:34:a2:94:5c:8e:b5:68:23:6e: e2:df:3e:4c:85:5e:c1:7f:c1:ed:39:7b:e2:66:73:6c:3f:04: 19:22:ec:8a:0b:16:74:a8:6d:f0:89:29:41:38:8c:94:f5:fd: 6b:24:be:ab:d7:8d:9f:ea:98:66:a8:1c:c9:e2:8d:83:62:46: 7c:2b:5a:c2:61:ec:14:60:6b:e3:ee:27:1f:46:e3:67:56:66: b2:4f:74:1c:37:97:5b:ae:c6:59:d1:f7:85:38:a3:19:67:a3: 76:89:a6:90:5e:62:fb:c6:0c:ab:12:8e:d7:e3:c8:26:e6:42: 66:e9:84:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwNzE5MDIyNTUyWhcNMjUwNzI2MDIyNTUyWjAYMRYwFAYD VQQDEw02ODdiMDIzMC00NDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSHaCjiv8avKjt/BoYfh2LsrDry0EVehIWuJA22tERZH7NqklZn1z+dxM/oY PBxSuGlsiTW+UHoALsyF6MZHjopmHA0bq2C12jaAGSGC3+JYaBg6G2yEgNsR5XZZ A7n+hZB/l0cpYmLjyTdsGN2njMokDw5qQvJBZMW2AQY4OBkj/ntTPIab1mOy1GDI qZ87EAtTcmhCRF1HEG9T+99qzrpCwJV301RNtBjROVBbmNVZvHzJz+wkQaWFUwBV GS0emyksbZSD9OeWJsaRpOYu5XgmLa4P1b4oITG1INCq0hZvPAAVDN9phKwyZsVX udFhsZMBCU/KWkJVa2mBIXT8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4IvyVy HUjlwyf2f2S6pUNoqMQAMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAww/s9dBCx7nh9e4Q10JtFN3K+jE6C+/LVAWPyaZHekb54QpUfKXaW QNbNg/Y3WyhzmCxn5GmCO7+S7e92xRvVhtKmzw90ogNWbu/MT108OxkZV/X9qqcm 1rX0+eYueAEGOFGo0rNhqZKCxBD1ltyB/t1zeFWJyki9eXbV5/p0cSB1DfMwtgQ0 opRcjrVoI27i3z5MhV7Bf8HtOXviZnNsPwQZIuyKCxZ0qG3wiSlBOIyU9f1rJL6r 142f6phmqBzJ4o2DYkZ8K1rCYewUYGvj7icfRuNnVmayT3QcN5dbrsZZ0feFOKMZ Z6N2iaaQXmL7xgyrEo7X48gm5kJm6YSf -----END CERTIFICATE-----Generated at Sun Jul 20 07:39:42 2025 by rpki-client