$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: APYBAphaiKInF6MJIODHJU3iOrFC20nseMf2MsmCAis= Subject key identifier: B3:DA:7B:EB:08:15:0A:6E:5C:E8:D1:68:9F:F3:83:76:65:3B:9B:F2 Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 14C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 14B7 Signing time: Fri 30 May 2025 17:02:22 +0000 Manifest this update: Fri 30 May 2025 17:02:22 +0000 Manifest next update: Fri 06 Jun 2025 17:02:22 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: OCMsX/6PqImrDs16iYtuuqJVoMSYBr7Z3+vmUeF+0ag=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5312 (0x14c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: May 30 17:02:22 2025 GMT Not After : Jun 6 17:02:22 2025 GMT Subject: CN=6839e49e-e991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:64:d1:d8:02:c4:c6:64:a5:c5:09:7d:20: c9:7e:eb:b9:99:cf:88:49:c8:a6:74:dd:b9:38:60: 72:e6:8f:5b:bc:1f:e6:6c:b3:ab:f4:2c:67:17:bd: a0:4e:da:2b:a1:fc:af:20:48:4e:16:f3:73:71:d8: dc:fe:f1:6e:c8:e0:2f:b8:d3:ef:73:e1:51:b3:62: 77:bb:b7:73:1d:99:1c:70:1c:51:03:6b:64:cf:a2: c0:38:44:35:44:64:40:72:33:d4:1b:49:b4:6e:8a: 86:4d:67:50:6f:27:a5:8e:a2:4e:72:95:ec:c3:97: 83:4a:f0:6b:2f:16:a0:bc:dc:2d:1e:13:f7:78:85: ed:a1:28:2a:d8:be:4d:4c:74:e7:4a:c0:13:d9:c4: 1c:78:c6:7b:f4:04:50:27:57:4d:6c:11:88:8e:5c: 44:cc:ba:9c:32:1f:42:92:2e:02:7b:70:a5:26:31: 52:8b:11:63:a1:78:b2:a8:3a:19:b6:7e:bb:78:70: 80:4b:02:8e:47:96:8e:da:72:cc:f6:f6:86:18:3a: e2:aa:4d:6d:3a:8d:45:8a:78:ea:81:0c:e0:83:cd: 2d:11:36:94:41:03:39:25:d3:39:35:ab:7e:90:04: ed:ed:eb:f3:77:cb:f9:c4:aa:a9:33:ca:bb:bd:d2: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:7B:EB:08:15:0A:6E:5C:E8:D1:68:9F:F3:83:76:65:3B:9B:F2 X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ef:20:71:c3:87:94:68:61:10:e0:e6:d2:3e:d8:f2:91:37: 0d:b8:82:15:db:8c:7c:6c:d9:cd:4e:34:01:e3:b6:b1:58:e9: 1e:7d:91:28:93:16:07:0e:40:08:2f:c6:da:c1:86:ab:70:69: 65:89:75:21:da:ca:51:17:00:df:1a:a4:0f:06:62:fa:b8:21: af:ee:ad:13:cc:39:82:35:df:06:89:e5:a9:90:19:14:35:3f: 4d:29:ab:20:a0:bd:95:2c:14:2c:15:17:6c:61:b7:7b:51:61: b5:74:1e:61:d7:c5:0e:14:44:53:5a:d6:36:c2:50:6e:56:80: a1:6e:9b:93:a3:db:25:d1:ab:ce:c7:d1:a5:2c:32:3d:63:10: 87:3a:26:60:23:e8:d7:fb:50:4d:1c:96:65:0a:bf:e8:5b:2d: 73:a7:e6:5a:69:4b:81:3f:2c:eb:e2:2a:15:d0:e8:fc:3d:4e: eb:70:7c:78:68:3f:52:a7:23:87:51:5d:8d:fc:76:e4:71:29: 84:ff:b1:8b:5f:34:d4:94:3f:3b:fe:0a:00:5a:ec:26:0c:d7: 06:1b:06:b1:d3:a5:2c:67:41:4a:33:3c:ef:7a:6e:6d:e7:58: eb:0f:19:0f:96:9f:5e:2d:08:79:8e:b8:09:47:fa:cc:b0:a8: 85:f7:3c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwNTMwMTcwMjIyWhcNMjUwNjA2MTcwMjIyWjAYMRYwFAYD VQQDEw02ODM5ZTQ5ZS1lOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2clk0dgCxMZkpcUJfSDJfuu5mc+IScimdN25OGBy5o9bvB/mbLOr9CxnF72g TtorofyvIEhOFvNzcdjc/vFuyOAvuNPvc+FRs2J3u7dzHZkccBxRA2tkz6LAOEQ1 RGRAcjPUG0m0boqGTWdQbyeljqJOcpXsw5eDSvBrLxagvNwtHhP3eIXtoSgq2L5N THTnSsAT2cQceMZ79ARQJ1dNbBGIjlxEzLqcMh9Cki4Ce3ClJjFSixFjoXiyqDoZ tn67eHCASwKOR5aO2nLM9vaGGDriqk1tOo1FinjqgQzgg80tETaUQQM5JdM5Nat+ kATt7evzd8v5xKqpM8q7vdKb2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPae+sI FQpuXOjRaJ/zg3ZlO5vyMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj7yBxw4eUaGEQ4ObSPtjykTcNuIIV24x8bNnNTjQB47axWOkefZEo kxYHDkAIL8bawYarcGlliXUh2spRFwDfGqQPBmL6uCGv7q0TzDmCNd8GieWpkBkU NT9NKasgoL2VLBQsFRdsYbd7UWG1dB5h18UOFERTWtY2wlBuVoChbpuTo9sl0avO x9GlLDI9YxCHOiZgI+jX+1BNHJZlCr/oWy1zp+ZaaUuBPyzr4ioV0Oj8PU7rcHx4 aD9SpyOHUV2N/HbkcSmE/7GLXzTUlD87/goAWuwmDNcGGwax06UsZ0FKMzzvem5t 51jrDxkPlp9eLQh5jrgJR/rMsKiF9zz1 -----END CERTIFICATE-----Generated at Sat May 31 17:34:25 2025 by rpki-client