$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: Be7yOpWgruKUQCX1Xyd5QgcR9rgJfNsqwoQJisnFiGs= Subject key identifier: 8C:F4:EF:9F:D0:CA:52:FB:7C:D8:FC:0C:24:5B:9B:05:7E:86:A7:A6 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 72 Signing time: Wed 17 Sep 2025 07:34:52 +0000 Manifest this update: Wed 17 Sep 2025 07:34:52 +0000 Manifest next update: Wed 24 Sep 2025 07:34:52 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: CUF/kLGj+eZk8Gw6NoSfbYrcPHv8ETytr/QpLqPZW/Y=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Sep 17 07:34:52 2025 GMT Not After : Sep 24 07:34:52 2025 GMT Subject: CN=68ca649c-279e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4d:46:ca:90:89:68:a8:32:7b:b6:51:31:35: 3b:b9:f3:3b:19:98:91:c0:9b:dd:a1:24:4b:ec:56: 40:5f:ec:34:28:61:50:3f:3a:21:88:aa:fb:f6:7e: d3:6d:ca:6f:a5:5b:7a:c3:1e:04:f3:46:28:8f:b4: c6:b2:93:40:76:a6:ce:b3:60:cf:53:b2:fa:9b:3e: d4:6e:94:61:79:ae:a0:82:6c:62:d0:f8:6e:d4:f5: f0:6b:18:62:58:e5:61:47:d4:bf:47:b3:01:47:30: 7a:6d:df:42:74:b8:8d:e8:82:09:cb:67:75:36:7a: fe:f5:1a:85:c9:14:28:67:80:88:bb:f9:17:41:fb: 8b:b7:b3:89:2b:71:11:f4:2d:7f:b1:6d:2e:bb:8c: 1c:07:6f:63:c0:ab:97:79:f8:f5:50:d1:14:9d:cd: ee:3b:be:a3:ea:2c:26:6c:ee:32:87:e7:89:e9:03: 3a:6f:30:c1:75:fe:8c:3c:98:f8:6b:34:02:d1:ab: 66:be:c6:b1:d5:c3:71:de:39:b0:18:a3:5e:10:3e: e3:42:a4:9b:eb:55:65:9a:61:03:3d:aa:a1:38:7c: 52:dc:39:31:fd:60:09:cd:50:df:1e:11:15:44:20: c0:80:fd:e6:ba:f9:3e:04:82:24:78:ab:69:9c:b0: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:EF:9F:D0:CA:52:FB:7C:D8:FC:0C:24:5B:9B:05:7E:86:A7:A6 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:81:2a:96:e3:f5:d8:ae:ef:9a:f6:7b:2b:cc:af:b6:21:02: b2:d3:a9:07:81:7e:45:ed:c2:c2:af:f4:c8:14:d7:b0:37:3c: 92:67:e3:91:1a:87:90:53:8e:79:32:9d:33:80:dd:9c:87:fa: 01:2d:82:57:b7:48:99:76:53:e2:33:da:a4:71:2f:f9:b2:9b: 77:ba:83:a7:c0:87:20:8d:0d:4f:73:82:14:1a:e9:f3:18:2e: 44:7e:41:3d:65:6e:12:79:b0:cb:d1:70:7a:1c:a1:3e:9f:3f: 1f:31:f0:12:de:78:a7:d6:e1:00:83:b1:14:00:35:63:27:4b: c7:be:ad:3d:dc:97:99:6d:a8:2c:b1:84:dc:f1:13:ac:8f:8d: 72:ce:4d:3e:7d:d3:82:84:87:fd:a7:e8:e9:ea:ca:78:4c:2f: 4c:a9:40:b8:39:91:8d:54:8c:5b:28:9f:15:6c:f4:4d:63:82: 12:96:38:aa:60:48:d9:a1:ca:41:06:18:6f:0a:35:44:1f:4a: 85:20:11:d3:0e:35:94:ac:a0:4d:6c:c4:a0:a2:27:6a:33:e1: 0d:1e:2b:0d:61:29:6b:01:aa:5e:16:b1:89:bd:db:d0:1f:c6: 87:07:ef:ce:05:b9:87:04:93:08:1a:c2:05:2c:9e:00:f0:ed: 74:e2:67:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA5MTcwNzM0NTJaFw0yNTA5MjQwNzM0NTJaMBgxFjAUBgNV BAMTDTY4Y2E2NDljLTI3OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOTUbKkIloqDJ7tlExNTu58zsZmJHAm92hJEvsVkBf7DQoYVA/OiGIqvv2ftNt ym+lW3rDHgTzRiiPtMayk0B2ps6zYM9TsvqbPtRulGF5rqCCbGLQ+G7U9fBrGGJY 5WFH1L9HswFHMHpt30J0uI3oggnLZ3U2ev71GoXJFChngIi7+RdB+4u3s4krcRH0 LX+xbS67jBwHb2PAq5d5+PVQ0RSdze47vqPqLCZs7jKH54npAzpvMMF1/ow8mPhr NALRq2a+xrHVw3HeObAYo14QPuNCpJvrVWWaYQM9qqE4fFLcOTH9YAnNUN8eERVE IMCA/ea6+T4EgiR4q2mcsNVnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjPTvn9DK Uvt82PwMJFubBX6Gp6YwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIyBKpbj9diu75r2eyvMr7YhArLTqQeBfkXtwsKv9MgU17A3PJJn45Ea h5BTjnkynTOA3ZyH+gEtgle3SJl2U+Iz2qRxL/mym3e6g6fAhyCNDU9zghQa6fMY LkR+QT1lbhJ5sMvRcHocoT6fPx8x8BLeeKfW4QCDsRQANWMnS8e+rT3cl5ltqCyx hNzxE6yPjXLOTT5904KEh/2n6OnqynhML0ypQLg5kY1UjFsonxVs9E1jghKWOKpg SNmhykEGGG8KNUQfSoUgEdMONZSsoE1sxKCiJ2oz4Q0eKw1hKWsBql4WsYm929Af xocH784FuYcEkwgawgUsngDw7XTiZ8E= -----END CERTIFICATE-----Generated at Thu Sep 18 23:51:25 2025 by rpki-client