$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: wgbW9LSRdzPtOD56Ot4hOg8XBEyjR6a+zTRk+4IdJbE= Subject key identifier: 04:C0:74:BA:A0:EC:C4:49:DE:DF:F4:BA:97:68:94:C8:84:B8:78:A6 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 022C Signing time: Wed 17 Sep 2025 02:24:09 +0000 Manifest this update: Wed 17 Sep 2025 02:24:08 +0000 Manifest next update: Wed 24 Sep 2025 02:24:08 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: COXZ4o19aKSlMLBb8Akj7WfxZ6g8lH/2wmEuDklnk2Y=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Sep 17 02:24:08 2025 GMT Not After : Sep 24 02:24:08 2025 GMT Subject: CN=68ca1bc8-60e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:1b:5f:d3:69:dc:42:0c:b3:b5:a8:cb:24: 23:8f:68:2a:f7:93:0e:a5:98:8d:57:10:1a:31:2a: fc:58:79:46:64:67:01:5e:47:d4:2d:c4:8a:79:fc: 37:7f:50:68:f4:91:78:af:f0:3b:43:7b:ad:9c:47: 39:f0:73:11:b2:19:27:ad:4b:8f:f5:c2:80:53:fe: 9a:3a:b2:3e:81:d0:15:51:86:3a:b2:0d:df:2d:76: 20:84:1a:11:22:c3:50:87:ed:0c:19:e5:26:32:e2: 74:17:2f:bd:05:3e:e1:6b:4d:01:2e:e8:a1:38:bb: 9a:ad:fe:61:50:58:05:ac:de:b9:de:8d:3d:ce:a1: 12:53:65:1d:61:fd:24:8c:b2:23:56:95:9b:50:1f: b0:dc:c5:99:18:cc:c2:77:56:68:d4:2f:53:1d:d8: 5c:3b:05:e2:94:ca:e1:12:6d:f1:5c:49:31:ff:cc: 28:dc:00:3c:c8:2d:ee:e2:94:40:86:ce:87:2c:a8: dd:76:b3:43:2d:d4:9b:a7:0b:b2:73:61:b3:02:52: ff:2c:f0:63:ca:93:0a:ee:b5:d1:3b:27:16:fa:3f: c1:84:52:5e:e6:59:43:7e:12:ed:0d:fd:47:83:f8: 2c:c5:50:29:81:07:12:fa:35:0d:fc:c5:64:dd:ad: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:74:BA:A0:EC:C4:49:DE:DF:F4:BA:97:68:94:C8:84:B8:78:A6 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:42:b7:b0:74:2c:69:a3:a2:e5:33:39:e8:fb:f1:64:cd:9b: e4:96:2d:f5:5c:89:71:9b:c1:fb:da:14:37:35:69:a9:0b:67: df:02:64:47:3c:fb:70:af:24:c2:0e:f8:a7:c9:87:e2:94:1e: d0:37:f4:b1:fb:d9:1e:7c:66:5c:0a:59:16:e6:f5:6c:a8:1e: d2:65:61:97:57:bc:cf:1e:c1:ce:5e:ea:fa:c1:6c:a6:6f:21: 72:28:9e:3f:3c:51:6c:a3:0b:f8:39:fe:d2:d1:92:47:02:50: 71:ab:07:33:66:36:df:40:06:6c:d1:98:3e:cf:b4:c1:d2:e4: 52:11:45:59:cc:ad:90:fa:e9:4b:8a:d0:0c:99:f1:7c:6d:53: 87:ae:9f:60:1d:72:28:38:a3:15:29:19:e0:8b:ac:90:5c:08: d3:a7:a8:dd:14:10:40:5c:43:61:0c:e5:b5:28:ad:d3:8b:d0: a5:7e:10:2d:c0:fd:b2:a7:3c:1a:02:40:eb:88:d1:d1:44:8c: 1e:b0:5c:4f:f2:c3:1e:48:00:76:8d:4b:6c:24:ff:a6:26:44: 99:37:3b:71:f4:e2:02:e2:70:67:35:92:b6:8a:e3:4b:46:1f: 48:c5:af:19:3a:30:b5:13:cd:2f:45:9b:60:4f:7a:aa:25:ae: 3c:2f:34:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwOTE3MDIyNDA4WhcNMjUwOTI0MDIyNDA4WjAYMRYwFAYD VQQDEw02OGNhMWJjOC02MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1twbX9Np3EIMs7WoyyQjj2gq95MOpZiNVxAaMSr8WHlGZGcBXkfULcSKefw3 f1Bo9JF4r/A7Q3utnEc58HMRshknrUuP9cKAU/6aOrI+gdAVUYY6sg3fLXYghBoR IsNQh+0MGeUmMuJ0Fy+9BT7ha00BLuihOLuarf5hUFgFrN653o09zqESU2UdYf0k jLIjVpWbUB+w3MWZGMzCd1Zo1C9THdhcOwXilMrhEm3xXEkx/8wo3AA8yC3u4pRA hs6HLKjddrNDLdSbpwuyc2GzAlL/LPBjypMK7rXROycW+j/BhFJe5llDfhLtDf1H g/gsxVApgQcS+jUN/MVk3a1PlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATAdLqg 7MRJ3t/0updolMiEuHimMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGQrewdCxpo6LlMzno+/FkzZvkli31XIlxm8H72hQ3NWmpC2ffAmRH PPtwryTCDvinyYfilB7QN/Sx+9kefGZcClkW5vVsqB7SZWGXV7zPHsHOXur6wWym byFyKJ4/PFFsowv4Of7S0ZJHAlBxqwczZjbfQAZs0Zg+z7TB0uRSEUVZzK2Q+ulL itAMmfF8bVOHrp9gHXIoOKMVKRngi6yQXAjTp6jdFBBAXENhDOW1KK3Ti9ClfhAt wP2ypzwaAkDriNHRRIwesFxP8sMeSAB2jUtsJP+mJkSZNztx9OIC4nBnNZK2iuNL Rh9Ixa8ZOjC1E80vRZtgT3qqJa48LzSC -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:10 2025 by rpki-client