$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json) Hash identifier: ItvE1CoIAjw9QZrlC5XOdpF5qmaey6BLUrh8x5KzpJU= Subject key identifier: CC:24:64:55:4C:E3:A7:89:DE:68:87:41:FC:0E:D1:86:98:90:80:A7 Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft Manifest number: 06 Signing time: Sat 23 Aug 2025 08:25:38 +0000 Manifest this update: Sat 23 Aug 2025 08:25:37 +0000 Manifest next update: Sat 30 Aug 2025 08:25:37 +0000 Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: R1Qj7UI3SOn5DRDV+uIqgqxKrcgboHS4NFmz/GXXdYA=) 2: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: wZT27F3LQkOVM0f/2rSyNQsd/VoaPgZq7TdT9xnpo2w=) 3: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: xL/q28ZzTyEq426yDF7Cs7m7+jftmvtET2bmtZZg99Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Validity Not Before: Aug 23 08:25:37 2025 GMT Not After : Aug 30 08:25:37 2025 GMT Subject: CN=68a97b01-371a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:70:8d:5d:00:fc:b6:83:1f:f3:cb:a4:72: 49:e5:4b:97:6e:a4:0d:c8:8e:54:12:ac:d3:07:0a: 11:7a:38:04:96:43:70:38:a8:9c:bf:0d:d4:62:42: 71:72:47:c1:4f:18:9b:61:b3:c4:04:a9:e1:3b:fe: e5:0f:b0:25:91:80:92:f6:23:70:fa:94:0d:26:92: c3:c6:f2:a2:04:57:38:f6:10:24:3e:49:44:7a:c3: 52:9d:f9:2b:7e:99:20:ad:1d:84:a8:9d:4c:75:f3: c1:77:5d:d0:0c:c1:b6:6e:8d:19:df:05:a0:a7:cb: 72:b2:e3:96:8e:4c:4d:47:38:be:b7:2d:01:90:3f: 0c:0b:e5:1f:e5:2b:e0:df:48:31:fa:99:c0:9c:3c: 49:96:ed:e4:d5:54:39:97:ce:76:29:6a:4d:64:31: b2:bb:87:4e:ba:c5:d9:f0:2b:b5:ad:c4:c3:ea:7b: de:21:0c:38:c1:11:33:ef:5a:73:74:aa:91:33:27: 44:f1:6e:cf:cb:fd:25:92:8d:ce:35:f1:4b:e7:2e: ee:d0:be:48:c9:34:19:16:8a:8c:00:c0:e5:8a:8e: c8:8c:8c:07:ee:ec:67:b0:5f:99:48:3e:2c:3b:f7: c2:cf:c0:05:ac:fb:82:33:c2:69:d0:10:ee:cf:8d: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:24:64:55:4C:E3:A7:89:DE:68:87:41:FC:0E:D1:86:98:90:80:A7 X509v3 Authority Key Identifier: keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:06:46:a3:ca:f4:37:f4:74:62:bc:d4:f9:1c:bd:ea:ef: d1:30:91:45:92:d4:3d:a8:ea:cf:e6:7a:07:62:c4:22:b1:2f: c3:d5:89:df:a6:8f:fd:1e:d2:d5:de:a8:d2:90:ba:28:5f:5d: 7f:26:70:8b:95:1f:39:91:c4:dd:fe:90:0d:2d:ae:22:58:7c: c1:90:ca:79:00:9e:e5:03:8e:af:01:c7:a4:fb:e6:ca:45:02: 41:2b:bf:42:c4:2c:4c:76:02:7a:2e:26:bd:fe:54:9f:6d:74: 2d:7e:dc:89:ff:41:d8:3f:fd:d9:bb:3f:b8:a6:fa:10:06:39: 51:1a:29:4c:45:6f:cf:f4:ca:ba:ef:8c:2a:0f:6b:7b:17:60: 16:67:fc:b4:4b:a6:08:47:a3:de:6c:bf:b3:cc:04:b8:87:1d: ad:40:22:60:ff:4e:aa:76:59:f0:2d:9d:b0:63:2d:58:5f:55: bf:e5:9e:ee:47:cf:df:0c:70:ab:1a:7d:4e:26:65:67:df:f6: cd:9c:f4:9c:c1:8c:87:24:fd:ec:54:7f:1c:47:04:fc:c9:7f: 9c:76:d0:a6:2d:d9:80:43:d8:ae:ab:86:f0:42:9c:75:82:84: 21:56:0f:f4:73:55:5d:ff:7b:b0:fa:89:f7:a8:8c:1d:bc:c0: ae:bf:ba:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0Q1ODExMC8GA1UEBRMoMTgzRkE5MERDMzU1NkMxRDE2NTY4RUJFQkIxOEUyRkM1 QTc4MUQ5MzAeFw0yNTA4MjMwODI1MzdaFw0yNTA4MzAwODI1MzdaMBgxFjAUBgNV BAMTDTY4YTk3YjAxLTM3MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+G3CNXQD8toMf88ukcknlS5dupA3IjlQSrNMHChF6OASWQ3A4qJy/DdRiQnFy R8FPGJths8QEqeE7/uUPsCWRgJL2I3D6lA0mksPG8qIEVzj2ECQ+SUR6w1Kd+St+ mSCtHYSonUx188F3XdAMwbZujRnfBaCny3Ky45aOTE1HOL63LQGQPwwL5R/lK+Df SDH6mcCcPEmW7eTVVDmXznYpak1kMbK7h066xdnwK7WtxMPqe94hDDjBETPvWnN0 qpEzJ0Txbs/L/SWSjc418UvnLu7QvkjJNBkWiowAwOWKjsiMjAfu7GewX5lIPiw7 98LPwAWs+4IzwmnQEO7PjcFxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzCRkVUzj p4neaIdB/A7RhpiQgKcwHwYDVR0jBBgwFoAUGD+pDcNVbB0WVo6+uxji/Fp4HZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RDU4LzU5RDA2QTEyN0Yw NjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEha TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0QtcERjTlZiQjBXVm82LXV4amlfRnA0SFpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RDU4LzU5RDA2QTEyN0YwNjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIw V1ZvNi11eGppX0ZwNEhaTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTDBkajyvQ39HRivNT5HL3q79EwkUWS1D2o6s/megdixCKxL8PVid+m j/0e0tXeqNKQuihfXX8mcIuVHzmRxN3+kA0triJYfMGQynkAnuUDjq8Bx6T75spF AkErv0LELEx2AnouJr3+VJ9tdC1+3In/Qdg//dm7P7im+hAGOVEaKUxFb8/0yrrv jCoPa3sXYBZn/LRLpghHo95sv7PMBLiHHa1AImD/Tqp2WfAtnbBjLVhfVb/lnu5H z98McKsafU4mZWff9s2c9JzBjIck/exUfxxHBPzJf5x20KYt2YBD2K6rhvBCnHWC hCFWD/RzVV3/e7D6ifeojB28wK6/usw= -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:52 2025 by rpki-client