$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: 2gw4kazU6qlw97cZZvR15MmoDa9eVFVdvetwHvA96Tg= Subject key identifier: 22:24:0D:5A:A6:18:4D:07:8C:F6:B8:AF:97:3B:77:EC:1B:09:5F:AB Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 14D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 14D0 Signing time: Fri 18 Jul 2025 16:58:24 +0000 Manifest this update: Fri 18 Jul 2025 16:58:23 +0000 Manifest next update: Fri 25 Jul 2025 16:58:23 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: 9q2do934dfwQZV7UJyM9/Fi+IIrS5kTFSf5+tBt+o6U=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5337 (0x14d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Jul 18 16:58:23 2025 GMT Not After : Jul 25 16:58:23 2025 GMT Subject: CN=687a7d2f-3a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:2e:19:4c:1c:b4:73:1e:0c:ee:e5:92:1b: a9:aa:d0:eb:3b:fa:04:3c:f6:1a:f2:55:b5:4b:a0: b2:20:fe:57:35:41:cc:b3:25:ae:92:6d:1b:c5:f7: 9b:a3:1e:29:16:64:f6:32:63:93:fa:8d:c7:1b:6e: 8f:b8:c0:8c:8a:b5:9a:ab:51:31:1d:f0:40:eb:45: d1:08:ec:0b:2a:9c:30:76:29:87:5f:44:88:51:65: 05:d9:ea:67:2c:b5:06:ba:00:bf:91:b5:47:fd:33: de:c8:e4:7e:bc:e1:cc:2a:77:48:cb:4d:b3:b5:09: 33:5e:cf:6d:ed:e4:44:ff:75:30:48:a5:e9:e1:a8: 18:c7:3a:5c:52:ee:62:52:23:dc:07:ef:f4:ad:cc: f8:cd:b5:79:b0:9f:3c:73:9f:31:fd:7e:5e:dd:0c: 40:14:87:b2:f3:2c:3a:8b:3a:fa:da:e8:60:2c:14: ca:ff:3a:e8:3e:e9:28:32:ad:fc:3b:19:77:30:1e: 09:a5:cc:0a:81:c3:4c:a5:e1:4b:57:ce:6c:7b:84: a3:18:13:55:fc:97:ab:b0:77:a2:11:6d:b4:7e:8c: 8a:67:2c:bf:ea:de:14:95:44:d1:e1:96:ea:ba:0a: b2:07:9f:84:31:41:49:96:3f:0f:78:eb:94:aa:11: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:24:0D:5A:A6:18:4D:07:8C:F6:B8:AF:97:3B:77:EC:1B:09:5F:AB X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:0e:26:9d:bc:5f:43:93:81:80:b9:fc:d5:7d:c5:c3:46:eb: 21:e1:47:2a:7c:48:23:48:3e:2e:31:d6:1f:6e:a2:18:f5:2b: 37:76:30:dc:0f:25:97:31:24:83:b9:8c:8d:18:ad:ea:28:b5: 08:7c:f7:da:5a:72:50:53:a6:2e:5e:eb:ca:b5:13:ff:35:96: d8:87:d6:97:0f:e4:54:e7:34:f4:d7:35:4f:f6:3b:0f:e9:be: 1e:df:18:bc:76:19:08:2e:14:11:fb:d6:72:94:86:18:74:71: ef:37:85:a9:1f:1a:6d:fe:26:b9:c4:d5:91:8e:7f:0b:63:74: fb:b4:77:7e:58:8b:88:ce:db:79:26:f8:8b:ee:61:20:06:a2: 16:43:ad:27:b6:97:73:76:14:e9:3b:8e:76:1a:00:26:0f:25: c3:80:bb:f7:0c:29:6b:c3:46:77:15:2b:fe:9d:f3:62:cc:7c: c9:75:93:fa:dc:a4:6f:07:db:5d:0c:23:94:bc:76:bf:6c:f2: 42:51:1d:22:37:d5:19:14:50:3f:fe:85:2f:6e:da:ac:ab:58: 4d:41:fa:43:5f:e9:f3:37:d9:84:76:31:d0:26:e5:60:22:c1: 6c:66:f2:7c:55:c5:17:9a:37:cc:ba:c6:ab:10:30:c4:b3:97: 15:1c:aa:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwNzE4MTY1ODIzWhcNMjUwNzI1MTY1ODIzWjAYMRYwFAYD VQQDEw02ODdhN2QyZi0zYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj8uGUwctHMeDO7lkhupqtDrO/oEPPYa8lW1S6CyIP5XNUHMsyWukm0bxfeb ox4pFmT2MmOT+o3HG26PuMCMirWaq1ExHfBA60XRCOwLKpwwdimHX0SIUWUF2epn LLUGugC/kbVH/TPeyOR+vOHMKndIy02ztQkzXs9t7eRE/3UwSKXp4agYxzpcUu5i UiPcB+/0rcz4zbV5sJ88c58x/X5e3QxAFIey8yw6izr62uhgLBTK/zroPukoMq38 Oxl3MB4JpcwKgcNMpeFLV85se4SjGBNV/JersHeiEW20foyKZyy/6t4UlUTR4Zbq ugqyB5+EMUFJlj8PeOuUqhFdYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIkDVqm GE0HjPa4r5c7d+wbCV+rMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJDiadvF9Dk4GAufzVfcXDRush4UcqfEgjSD4uMdYfbqIY9Ss3djDc DyWXMSSDuYyNGK3qKLUIfPfaWnJQU6YuXuvKtRP/NZbYh9aXD+RU5zT01zVP9jsP 6b4e3xi8dhkILhQR+9ZylIYYdHHvN4WpHxpt/ia5xNWRjn8LY3T7tHd+WIuIztt5 JviL7mEgBqIWQ60ntpdzdhTpO452GgAmDyXDgLv3DClrw0Z3FSv+nfNizHzJdZP6 3KRvB9tdDCOUvHa/bPJCUR0iN9UZFFA//oUvbtqsq1hNQfpDX+nzN9mEdjHQJuVg IsFsZvJ8VcUXmjfMusarEDDEs5cVHKps -----END CERTIFICATE-----Generated at Sun Jul 20 07:15:48 2025 by rpki-client