$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: WF8B5ssWkXJxpl+T54Mdp1C4VGwH058K8N831+sybAc= Subject key identifier: C0:A8:09:D8:C8:69:4F:3B:D0:3F:CC:A9:25:A4:C4:06:5C:67:F2:EC Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 14F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 14EB Signing time: Mon 08 Sep 2025 16:51:14 +0000 Manifest this update: Mon 08 Sep 2025 16:51:13 +0000 Manifest next update: Mon 15 Sep 2025 16:51:13 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: ldsfTnyTF++OaM9Dtko+WoV+3x4N0DkrB1yUhDnhMY4=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5364 (0x14f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Sep 8 16:51:13 2025 GMT Not After : Sep 15 16:51:13 2025 GMT Subject: CN=68bf0981-7790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:47:eb:fe:0f:a5:75:fa:ab:11:28:5f:7d: 18:2c:d4:a8:f8:d7:8a:47:bc:a6:6c:0d:69:3d:91: 43:fd:e0:0a:35:62:e4:31:91:81:60:15:08:a0:8e: a5:9b:f8:d6:75:ac:99:90:63:44:52:06:57:fb:e0: 6d:11:ec:d8:d0:1f:3c:97:d3:40:79:08:46:93:db: 48:a4:19:eb:a8:2a:79:a2:2e:ed:79:13:d6:0d:19: ec:cc:7b:ab:3d:1c:9e:ec:c7:a0:1a:3e:95:db:3b: 70:ea:43:b4:c2:e9:f8:e1:55:f7:cc:92:cb:29:78: 1f:86:f5:e6:d3:9d:ef:ce:78:84:96:ab:a1:6e:fe: 27:27:81:23:5e:b2:e2:2c:72:b7:84:70:fa:05:aa: 8f:c5:6e:60:5e:45:18:aa:01:4d:ef:ea:b6:14:ec: bf:b3:8e:3f:ea:de:d4:2b:5f:27:87:b9:5f:89:96: 18:99:75:37:53:9b:30:9c:c5:be:93:64:4a:ec:b9: f6:c9:b5:c2:f7:99:a2:b6:62:ae:0e:92:b9:e3:30: 03:3a:53:b4:d9:00:33:77:fd:2b:9f:f3:01:14:38: 04:8e:3c:6d:51:54:69:c2:86:8a:49:c6:82:a2:7f: 61:68:cf:1a:70:9b:db:70:85:2c:89:5b:f6:1d:cf: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A8:09:D8:C8:69:4F:3B:D0:3F:CC:A9:25:A4:C4:06:5C:67:F2:EC X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:06:c9:ab:05:5a:6a:c0:10:56:48:d5:c5:5f:84:81:a5:d9: f2:91:86:98:19:18:ad:db:8d:1d:35:86:25:6c:fb:9f:ed:8e: d8:b2:fe:46:1e:b4:93:8b:11:4d:db:a0:0a:81:5c:18:63:b1: f0:73:bb:d4:e0:0f:6f:85:0e:5a:0a:ff:83:69:e7:a7:df:3c: 8f:b3:64:fa:4a:0c:0e:69:8b:89:63:00:a6:6c:6e:b5:1a:47: 74:e6:90:16:20:4e:87:28:9c:7d:6e:2e:ea:11:e6:4d:88:26: 5c:3b:79:3d:53:ee:55:b2:b6:47:5d:e2:ce:9a:47:a6:7a:71: 86:e7:b8:98:09:67:25:06:91:3a:2c:59:c4:6a:38:fa:fd:d0: 1e:18:b8:1f:50:25:81:43:44:43:9d:97:78:06:2c:41:00:5b: 82:65:f1:fd:2d:10:87:64:69:12:aa:2c:4b:eb:d4:5e:f1:9f: db:3a:57:69:53:f8:33:cb:a3:8a:62:da:31:fa:50:71:97:c8: bd:e2:aa:d6:aa:fa:b6:11:0e:55:49:b6:32:d4:f0:45:fa:12: 96:37:d4:eb:0b:75:80:09:f1:b7:18:eb:52:a3:a9:d9:1f:38: 42:07:ad:52:45:50:94:57:57:62:50:4f:e9:c6:30:32:70:77: 9a:4d:5e:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwOTA4MTY1MTEzWhcNMjUwOTE1MTY1MTEzWjAYMRYwFAYD VQQDEw02OGJmMDk4MS03NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKVH6/4PpXX6qxEoX30YLNSo+NeKR7ymbA1pPZFD/eAKNWLkMZGBYBUIoI6l m/jWdayZkGNEUgZX++BtEezY0B88l9NAeQhGk9tIpBnrqCp5oi7teRPWDRnszHur PRye7MegGj6V2ztw6kO0wun44VX3zJLLKXgfhvXm053vzniElquhbv4nJ4EjXrLi LHK3hHD6BaqPxW5gXkUYqgFN7+q2FOy/s44/6t7UK18nh7lfiZYYmXU3U5swnMW+ k2RK7Ln2ybXC95mitmKuDpK54zADOlO02QAzd/0rn/MBFDgEjjxtUVRpwoaKScaC on9haM8acJvbcIUsiVv2Hc/Z0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCoCdjI aU870D/MqSWkxAZcZ/LsMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5BsmrBVpqwBBWSNXFX4SBpdnykYaYGRit240dNYYlbPuf7Y7Ysv5G HrSTixFN26AKgVwYY7Hwc7vU4A9vhQ5aCv+Daeen3zyPs2T6SgwOaYuJYwCmbG61 Gkd05pAWIE6HKJx9bi7qEeZNiCZcO3k9U+5VsrZHXeLOmkemenGG57iYCWclBpE6 LFnEajj6/dAeGLgfUCWBQ0RDnZd4BixBAFuCZfH9LRCHZGkSqixL69Re8Z/bOldp U/gzy6OKYtox+lBxl8i94qrWqvq2EQ5VSbYy1PBF+hKWN9TrC3WACfG3GOtSo6nZ HzhCB61SRVCUV1diUE/pxjAycHeaTV6m -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:51 2025 by rpki-client