$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: 33MfMaXkRW2SiSFchsv6gGFKYjussCknXXWPzjXxqmA= Subject key identifier: CD:35:D2:27:8C:B1:D5:64:41:C9:E3:BB:9A:87:A9:2F:F6:3E:8E:60 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: FA Signing time: Sat 07 Jun 2025 04:43:01 +0000 Manifest this update: Sat 07 Jun 2025 04:43:01 +0000 Manifest next update: Sat 14 Jun 2025 04:43:01 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: mMUc1ur6ty3heFeK8eGN8tSrdj0w/uRXhTuw1OINLnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: Jun 7 04:43:01 2025 GMT Not After : Jun 14 04:43:01 2025 GMT Subject: CN=6843c355-db5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:3d:fd:1d:59:dd:bd:2e:db:76:39:2b:c5: d2:2f:ab:d3:0a:df:6a:72:83:31:8c:41:6b:34:24: a4:10:5d:4c:7c:26:55:a9:b3:72:0b:3c:4d:95:d6: a9:8a:d1:57:8d:c3:b7:fa:62:c0:a8:5f:c8:66:9d: 61:cb:b1:47:6a:94:be:5b:75:6d:2a:57:3c:87:36: da:83:88:c1:b0:ce:85:98:0a:3c:f3:fa:b6:e4:d0: d8:3c:b3:e8:d4:60:50:ae:8e:07:fa:ac:ca:e4:4b: 40:0d:77:27:e8:e8:30:97:8d:0c:ff:11:a9:4b:7d: 0a:b4:5f:3d:df:44:4e:a7:b6:cf:4e:87:3f:a1:99: a2:0e:95:f8:9b:95:c9:54:8c:12:13:5e:78:26:f4: 22:ca:36:7d:6b:95:75:06:90:57:b6:47:e0:48:f2: cf:d1:d1:ee:29:59:83:a7:22:d0:59:c3:87:ec:f2: 47:25:34:75:59:0c:cc:80:8f:be:0c:9e:c4:60:37: 37:ab:e9:98:a3:3f:12:cb:d1:7c:7a:97:26:7e:7e: 5d:84:bf:c4:b9:70:22:59:c7:8c:fb:94:b1:da:c9: 08:61:00:67:a1:ad:87:3f:32:69:a1:95:ec:17:6a: d2:da:83:70:19:01:7c:5b:72:5a:9e:8f:1d:bb:9a: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:35:D2:27:8C:B1:D5:64:41:C9:E3:BB:9A:87:A9:2F:F6:3E:8E:60 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a9:95:84:54:fe:0a:70:2d:14:d7:30:85:06:d5:5d:f8:d7: ec:c0:9c:61:5b:6a:5a:7c:aa:73:64:6e:16:94:ad:64:5b:5a: 46:af:dd:39:be:84:c7:49:c2:4e:f0:5e:24:d9:38:f0:5d:8d: 22:eb:e6:8e:a9:21:0c:29:06:a8:2e:99:d1:8a:ce:21:53:e5: 85:4c:22:3e:48:61:eb:ca:8b:7e:67:91:77:77:f5:dc:7a:96: b2:f3:c7:c1:4d:59:28:ec:fd:45:df:37:2d:2e:ec:db:1d:a1: 69:89:e4:ec:1f:ac:a6:a9:1c:34:3c:ca:26:99:c9:30:14:5a: ab:df:83:66:7e:c3:20:fb:fc:d8:3b:3d:87:67:11:7e:60:e5: 5e:da:3e:60:29:4f:f6:09:0f:89:5e:65:90:a0:4d:4a:87:32: 92:13:66:e1:e4:43:8d:35:9f:84:c5:b6:5d:69:87:ba:40:21: 9e:b7:a5:dc:ab:2c:47:4c:91:63:85:99:04:c3:38:b9:0e:38: c9:69:c2:04:bc:95:ea:07:5d:d8:19:83:51:c3:f6:fb:6d:8c: fd:64:79:43:b8:03:f9:74:7a:75:c5:06:d5:21:73:6b:a2:6d: b5:bf:17:fb:5f:fd:37:94:10:89:e1:3d:e7:4a:fc:18:cb:70: c8:aa:21:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUwNjA3MDQ0MzAxWhcNMjUwNjE0MDQ0MzAxWjAYMRYwFAYD VQQDEw02ODQzYzM1NS1kYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl89/R1Z3b0u23Y5K8XSL6vTCt9qcoMxjEFrNCSkEF1MfCZVqbNyCzxNldap itFXjcO3+mLAqF/IZp1hy7FHapS+W3VtKlc8hzbag4jBsM6FmAo88/q25NDYPLPo 1GBQro4H+qzK5EtADXcn6Ogwl40M/xGpS30KtF8930ROp7bPToc/oZmiDpX4m5XJ VIwSE154JvQiyjZ9a5V1BpBXtkfgSPLP0dHuKVmDpyLQWcOH7PJHJTR1WQzMgI++ DJ7EYDc3q+mYoz8Sy9F8epcmfn5dhL/EuXAiWceM+5Sx2skIYQBnoa2HPzJpoZXs F2rS2oNwGQF8W3Jano8du5pXAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM010ieM sdVkQcnju5qHqS/2Po5gMB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRqZWEVP4KcC0U1zCFBtVd+NfswJxhW2pafKpzZG4WlK1kW1pGr905 voTHScJO8F4k2TjwXY0i6+aOqSEMKQaoLpnRis4hU+WFTCI+SGHryot+Z5F3d/Xc epay88fBTVko7P1F3zctLuzbHaFpieTsH6ymqRw0PMommckwFFqr34NmfsMg+/zY Oz2HZxF+YOVe2j5gKU/2CQ+JXmWQoE1KhzKSE2bh5EONNZ+ExbZdaYe6QCGet6Xc qyxHTJFjhZkEwzi5DjjJacIEvJXqB13YGYNRw/b7bYz9ZHlDuAP5dHp1xQbVIXNr om21vxf7X/03lBCJ4T3nSvwYy3DIqiHD -----END CERTIFICATE-----Generated at Sat Jun 7 15:24:33 2025 by rpki-client