$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json) Hash identifier: uneZMe9Fo4MLnYR4gRk/9Zj02wNUhQgPIkoocZ1QVk8= Subject key identifier: CD:04:83:19:1E:CA:76:BC:4B:6E:46:27:C0:16:9D:58:61:2B:D1:9D Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft Manifest number: 06 Signing time: Sat 19 Jul 2025 08:27:24 +0000 Manifest this update: Sat 19 Jul 2025 08:27:24 +0000 Manifest next update: Sat 26 Jul 2025 08:27:24 +0000 Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: 596msiHDgGwG5mOlMEpPMIk9LVGSWBH8qwIa/hokBSY=) 2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: jbmHjCRldQebtcE9n4Zv2veO89dDLab7PzgfvTloAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Validity Not Before: Jul 19 08:27:24 2025 GMT Not After : Jul 26 08:27:24 2025 GMT Subject: CN=687b56ec-6160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:d5:e6:ee:12:6e:9f:a7:50:cb:4b:86:5f: da:fe:ba:d9:cc:9d:97:bd:a4:6d:c9:ea:7d:35:1a: b5:16:f5:1b:4a:7e:32:d1:f4:65:2a:b3:9b:bb:f9: 45:fe:ad:28:60:5e:70:4e:fb:cd:60:fc:8f:d8:4d: 7c:ce:fa:46:8c:37:b6:7a:2b:84:45:d2:f9:9f:7a: 5f:53:7b:a0:f7:bb:d4:4a:80:ad:77:12:9e:a6:67: 68:aa:c1:15:a1:eb:90:12:8d:f3:27:f1:86:d8:91: d5:82:cc:65:78:85:b3:73:4f:b7:79:1a:fb:31:f9: 09:b0:ac:2b:e1:16:c6:6f:86:87:e7:47:f3:2e:3c: c4:51:98:ed:e7:78:73:ce:df:1a:db:e3:88:2e:73: b1:60:86:bc:1c:bb:8c:86:0f:09:b0:c4:e9:62:ef: ca:09:d1:4c:ac:ac:66:22:13:ed:2e:4b:43:8f:52: a0:b9:44:6d:65:4f:c8:62:f2:d7:9f:c8:1c:35:eb: 46:5a:97:e0:49:9f:91:9a:84:f7:72:49:87:6e:54: 23:76:36:bf:51:c2:45:28:6e:38:72:67:4f:28:a2: 3b:f6:b0:cf:da:77:de:f0:33:f6:f8:81:95:ba:6d: 58:6a:e6:37:09:b4:01:b7:02:d4:48:20:03:6e:64: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:83:19:1E:CA:76:BC:4B:6E:46:27:C0:16:9D:58:61:2B:D1:9D X509v3 Authority Key Identifier: keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0e:1c:8f:b8:14:7f:91:bf:46:6d:36:25:34:3b:51:6a:63: 3a:c2:75:5d:50:79:7a:87:17:e7:80:23:6e:e4:45:ea:2d:8c: 76:56:2e:ea:72:5a:55:1e:bf:2b:be:fa:bc:60:fb:b2:26:da: 17:83:6d:4a:7c:9a:e5:c4:e7:1a:44:c1:1c:ac:4e:40:31:50: ad:47:72:9d:11:be:ac:a2:ee:bc:cd:10:27:d3:d6:2e:9a:f0: ce:51:98:be:61:e9:05:4c:65:0b:f7:8a:2d:d3:e4:a4:19:31: 89:af:b2:43:bf:32:84:82:54:ec:70:95:ae:27:66:58:cd:9b: 93:5f:f9:df:91:b9:29:36:14:3c:47:75:96:02:55:4d:dd:19: 69:93:83:c5:2a:30:a7:57:b6:15:e3:2b:72:a8:df:ed:d3:5a: c5:39:41:e1:f9:0f:a0:4d:e0:8e:f3:a3:68:dd:9f:d0:8d:92: 75:e2:9f:6a:fa:a4:a4:61:fa:6e:7a:09:8e:5e:41:c4:34:0b: c5:27:2e:08:4e:69:c3:a5:ae:89:d9:3a:b0:64:3e:43:cf:4c: b4:cc:85:5c:cd:67:0f:00:40:27:06:78:8c:94:13:0d:fc:0b: 60:44:02:45:81:84:31:5c:65:5a:05:0b:98:c2:91:99:15:34: 79:55:4e:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODQyRTExMC8GA1UEBRMoMTlBMDQzODE5OUZERkUyNERDRjg1NjYyQTQ4QkRCNTc1 MUUxQjVEOTAeFw0yNTA3MTkwODI3MjRaFw0yNTA3MjYwODI3MjRaMBgxFjAUBgNV BAMTDTY4N2I1NmVjLTYxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbh9Xm7hJun6dQy0uGX9r+utnMnZe9pG3J6n01GrUW9RtKfjLR9GUqs5u7+UX+ rShgXnBO+81g/I/YTXzO+kaMN7Z6K4RF0vmfel9Te6D3u9RKgK13Ep6mZ2iqwRWh 65ASjfMn8YbYkdWCzGV4hbNzT7d5Gvsx+QmwrCvhFsZvhofnR/MuPMRRmO3neHPO 3xrb44guc7Fghrwcu4yGDwmwxOli78oJ0UysrGYiE+0uS0OPUqC5RG1lT8hi8tef yBw160Zal+BJn5GahPdySYduVCN2Nr9RwkUobjhyZ08oojv2sM/ad97wM/b4gZW6 bVhq5jcJtAG3AtRIIANuZBp3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzQSDGR7K drxLbkYnwBadWGEr0Z0wHwYDVR0jBBgwFoAUGaBDgZn9/iTc+FZipIvbV1Hhtdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NDJFLzYxOTlCRDU0NURF RTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2FCRGdabjlfaVRjLUZaaXBJdmJWMUhodGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NDJFLzYxOTlCRDU0NURFRTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lU Yy1GWmlwSXZiVjFIaHRkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACsOHI+4FH+Rv0ZtNiU0O1FqYzrCdV1QeXqHF+eAI27kReotjHZWLupy WlUevyu++rxg+7Im2heDbUp8muXE5xpEwRysTkAxUK1Hcp0Rvqyi7rzNECfT1i6a 8M5RmL5h6QVMZQv3ii3T5KQZMYmvskO/MoSCVOxwla4nZljNm5Nf+d+RuSk2FDxH dZYCVU3dGWmTg8UqMKdXthXjK3Ko3+3TWsU5QeH5D6BN4I7zo2jdn9CNknXin2r6 pKRh+m56CY5eQcQ0C8UnLghOacOlronZOrBkPkPPTLTMhVzNZw8AQCcGeIyUEw38 C2BEAkWBhDFcZVoFC5jCkZkVNHlVTgg= -----END CERTIFICATE-----Generated at Sun Jul 20 06:10:12 2025 by rpki-client