$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json) Hash identifier: Ae9TRx5d48DCjxmK79nRZ3DQ+foft0gTfoNBU/iYGQc= Subject key identifier: F3:EC:19:34:C8:75:15:73:C8:94:81:51:5E:9F:24:5D:95:3A:66:55 Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft Manifest number: 25 Signing time: Wed 17 Sep 2025 08:32:48 +0000 Manifest this update: Wed 17 Sep 2025 08:32:47 +0000 Manifest next update: Wed 24 Sep 2025 08:32:47 +0000 Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: vapPNqF7dpHLqmnOlc5ZiWafTyPcmqQ7Ze94xDTmvtM=) 2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: jbmHjCRldQebtcE9n4Zv2veO89dDLab7PzgfvTloAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Validity Not Before: Sep 17 08:32:47 2025 GMT Not After : Sep 24 08:32:47 2025 GMT Subject: CN=68ca7230-1911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:b6:00:e7:dc:a2:80:d2:83:1d:c2:86:ea: 56:48:c8:0c:ae:c0:07:7a:37:88:63:48:a1:db:de: a0:0f:d2:4a:ec:f2:13:8e:8c:d8:09:08:2c:dc:a6: bf:08:58:04:8e:8c:91:8b:95:b0:8c:fa:80:80:aa: aa:22:16:bc:8d:48:19:32:95:bc:2d:18:e8:bf:11: d4:7e:5a:02:d4:e4:8a:e6:6a:95:50:20:6f:f3:ea: cd:d9:c9:22:33:c0:5e:41:33:af:6d:17:9c:73:7f: 99:41:67:e9:30:61:d4:4d:12:5f:29:18:c6:24:96: a6:39:77:ba:b5:58:4c:24:2a:90:94:6f:64:ef:21: 6f:f2:00:a1:bb:d7:d4:d6:32:8b:bd:b6:ae:84:7d: 2f:73:a8:fd:4d:11:77:06:ec:c8:40:1e:4a:f4:57: 98:23:cd:01:77:22:a4:ff:59:c9:5b:e2:51:ca:9f: bc:17:c9:99:21:fd:e8:d3:36:7d:89:b4:1c:aa:1a: 7f:9c:17:3a:c1:44:21:2a:e7:1f:4c:94:67:0b:01: dd:3a:d0:da:98:62:5b:a5:02:e2:e0:41:7e:f2:2d: 8b:03:b9:b0:a8:21:40:98:1f:19:dc:6a:c9:b8:ed: ea:47:e4:8d:1c:cb:2f:e6:a7:b4:2a:f8:16:0e:93: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EC:19:34:C8:75:15:73:C8:94:81:51:5E:9F:24:5D:95:3A:66:55 X509v3 Authority Key Identifier: keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a9:fe:00:16:8f:e8:10:60:3f:ca:80:16:d8:ef:eb:ef:72: c9:d6:a3:18:0b:69:44:ec:3d:92:b2:6b:11:cd:2e:4f:ff:41: 2a:cf:b6:6a:82:50:69:59:e0:e9:da:7a:02:f7:8f:52:ea:3b: 12:92:5f:0b:e4:32:43:97:c3:b1:b1:8d:d5:f3:0e:55:6d:d8: 8b:91:03:23:1b:49:c3:63:6b:e4:8d:af:59:ca:97:7c:85:6b: 4a:5a:82:72:f1:e3:c2:3c:3f:2f:f9:1b:58:b9:8a:cd:d5:f3: d2:90:d9:9b:f4:a2:b0:c0:26:cf:3b:cf:aa:1b:8b:fc:50:0e: 6a:fe:2e:ef:52:db:60:96:8c:58:97:b4:6c:28:b8:0e:58:1b: 72:b9:b7:26:d7:80:49:fa:16:01:80:91:7e:de:2b:6d:31:0d: cd:a8:7e:49:74:75:94:d6:7d:a5:9d:db:83:9d:c1:6f:17:bf: 5f:41:ad:1b:4c:0e:ff:c4:90:04:a9:0e:91:85:54:a7:2d:5d: 5c:ef:f8:63:0d:bf:31:a6:bf:c6:09:44:bf:4e:5f:ae:a4:38: e7:71:57:90:d6:63:bd:7d:31:95:81:f3:d6:6a:43:30:67:9a: 1a:04:20:ae:5d:12:14:cf:d6:bb:ab:06:e0:f7:9f:d6:d8:48: 21:2a:00:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODQyRTExMC8GA1UEBRMoMTlBMDQzODE5OUZERkUyNERDRjg1NjYyQTQ4QkRCNTc1 MUUxQjVEOTAeFw0yNTA5MTcwODMyNDdaFw0yNTA5MjQwODMyNDdaMBgxFjAUBgNV BAMTDTY4Y2E3MjMwLTE5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtvrYA59yigNKDHcKG6lZIyAyuwAd6N4hjSKHb3qAP0krs8hOOjNgJCCzcpr8I WASOjJGLlbCM+oCAqqoiFryNSBkylbwtGOi/EdR+WgLU5IrmapVQIG/z6s3ZySIz wF5BM69tF5xzf5lBZ+kwYdRNEl8pGMYklqY5d7q1WEwkKpCUb2TvIW/yAKG719TW Mou9tq6EfS9zqP1NEXcG7MhAHkr0V5gjzQF3IqT/Wclb4lHKn7wXyZkh/ejTNn2J tByqGn+cFzrBRCEq5x9MlGcLAd060NqYYlulAuLgQX7yLYsDubCoIUCYHxncasm4 7epH5I0cyy/mp7Qq+BYOk0+NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8+wZNMh1 FXPIlIFRXp8kXZU6ZlUwHwYDVR0jBBgwFoAUGaBDgZn9/iTc+FZipIvbV1Hhtdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NDJFLzYxOTlCRDU0NURF RTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2FCRGdabjlfaVRjLUZaaXBJdmJWMUhodGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NDJFLzYxOTlCRDU0NURFRTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lU Yy1GWmlwSXZiVjFIaHRkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmp/gAWj+gQYD/KgBbY7+vvcsnWoxgLaUTsPZKyaxHNLk//QSrPtmqC UGlZ4OnaegL3j1LqOxKSXwvkMkOXw7GxjdXzDlVt2IuRAyMbScNja+SNr1nKl3yF a0pagnLx48I8Py/5G1i5is3V89KQ2Zv0orDAJs87z6obi/xQDmr+Lu9S22CWjFiX tGwouA5YG3K5tybXgEn6FgGAkX7eK20xDc2ofkl0dZTWfaWd24OdwW8Xv19BrRtM Dv/EkASpDpGFVKctXVzv+GMNvzGmv8YJRL9OX66kOOdxV5DWY719MZWB89ZqQzBn mhoEIK5dEhTP1rurBuD3n9bYSCEqAGs= -----END CERTIFICATE-----Generated at Fri Sep 19 00:52:13 2025 by rpki-client