$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: WUdd7CxQ1sNVmhXK/Zj5CqqQLElbig0pt4eVf0DPHvM= Subject key identifier: 59:98:36:CF:A1:5C:F2:0F:D5:EF:C6:56:5B:EE:58:40:00:5C:2A:C6 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 01A3 Signing time: Sun 07 Sep 2025 02:48:06 +0000 Manifest this update: Sun 07 Sep 2025 02:48:05 +0000 Manifest next update: Sun 14 Sep 2025 02:48:05 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: WR3z0wIODLyHrS74tlQNxoGRqVPiiHp01MyfFMRJyds=) 2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: QotOqnglA46ODcG/lG9E8XyvCGo9HnekdR3etzUrE4c=) 3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: 4KMF0OCYbNDwaW3aLIgUQJgQPdi1cw9YHAWu6imOU70=) 4: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: ezxJgBFw2tKKcU962PajWcu+NU//ODot2RyjD71Fn24=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: vvnk4u9DNse+nnNTrLADNzPvSMLhalyiJs4z4ddnMBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Sep 7 02:48:05 2025 GMT Not After : Sep 14 02:48:05 2025 GMT Subject: CN=68bcf266-c420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:00:dd:3a:10:7b:9a:3e:4c:e1:01:b3:e4: 88:d3:ca:4c:ac:b9:30:9b:30:49:70:66:7b:60:04: a1:1c:4b:97:58:42:0d:9d:9a:b0:41:00:ad:0d:ab: 9b:e2:b7:3c:0e:35:c3:af:83:9e:81:26:c6:92:ca: b1:78:f7:92:1b:5b:99:f0:d9:4a:41:4e:4e:8d:61: 2b:70:d4:ec:14:f0:9d:2b:7a:12:b4:44:75:4e:ee: d3:0c:a8:7d:10:0d:8e:db:ae:1c:04:9f:8b:93:1e: f5:b2:d6:6d:6d:eb:c5:ba:96:13:fb:95:ab:aa:03: ce:2f:b6:90:b4:ee:b7:3e:27:a5:d7:c9:7f:a5:75: 7e:f1:9f:07:e9:6f:ac:96:0d:fd:14:3c:90:82:1c: d0:dc:2c:15:35:fe:c9:38:0e:5c:20:e1:d8:e7:a4: 24:e0:c2:29:51:02:fb:cd:3b:7f:15:0f:f0:b3:d1: 96:24:2d:9f:2d:32:b7:90:e1:60:90:ee:65:7f:14: 64:98:31:be:c4:8f:b3:73:fa:e9:c2:80:86:5a:ee: 3a:76:b5:94:32:24:38:1a:98:fc:f1:2e:41:38:57: 31:ec:21:6c:bd:f9:5e:3f:f4:87:10:05:31:59:95: d8:ed:3f:77:b9:38:96:d3:da:88:4e:6b:b5:1c:e6: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:98:36:CF:A1:5C:F2:0F:D5:EF:C6:56:5B:EE:58:40:00:5C:2A:C6 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:02:e6:78:c3:b9:46:ac:3b:c4:5a:bc:29:2c:43:45:a2: d2:ec:da:1b:ea:47:d6:3b:06:74:28:f8:0c:18:7d:c7:58:b9: 5e:c4:4b:7f:9b:c3:d4:49:ab:09:ca:aa:02:0d:a3:e8:5d:56: b9:b2:bf:a7:66:40:19:74:93:f7:64:8a:30:94:5b:0f:4d:e7: aa:c9:b0:f5:de:c3:32:48:b7:e5:71:a8:91:15:6a:d9:05:f6: c2:30:f8:42:b4:be:b2:6f:08:f6:35:35:88:63:2f:2e:24:90: e4:06:dc:67:4c:3a:b8:58:de:d0:95:ad:ac:f5:49:fd:68:14: 3d:cf:52:b5:51:34:7a:c3:7a:8d:0c:eb:d3:70:a5:5d:03:bd: c4:40:ce:fd:e0:63:d4:5b:19:58:06:f4:11:7a:b5:15:a5:f5: a1:8f:9a:20:61:c2:a1:9c:c6:f5:fc:dc:91:45:ab:25:c2:e3: a5:53:6b:c9:41:ff:bc:ae:a5:e2:7e:11:24:2e:c8:d4:9f:37: 85:f1:e9:13:92:f5:35:df:cc:84:23:83:51:ab:99:18:e5:ea: 2b:21:33:88:24:5e:e1:c5:81:1d:c6:88:70:8d:7c:e1:74:e7: 11:a2:e3:3e:9f:64:0b:5e:f8:e4:36:cc:55:ae:7f:ba:85:78: d0:8b:dd:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUwOTA3MDI0ODA1WhcNMjUwOTE0MDI0ODA1WjAYMRYwFAYD VQQDEw02OGJjZjI2Ni1jNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRUA3ToQe5o+TOEBs+SI08pMrLkwmzBJcGZ7YAShHEuXWEINnZqwQQCtDaub 4rc8DjXDr4OegSbGksqxePeSG1uZ8NlKQU5OjWErcNTsFPCdK3oStER1Tu7TDKh9 EA2O264cBJ+Lkx71stZtbevFupYT+5WrqgPOL7aQtO63Piel18l/pXV+8Z8H6W+s lg39FDyQghzQ3CwVNf7JOA5cIOHY56Qk4MIpUQL7zTt/FQ/ws9GWJC2fLTK3kOFg kO5lfxRkmDG+xI+zc/rpwoCGWu46drWUMiQ4Gpj88S5BOFcx7CFsvfleP/SHEAUx WZXY7T93uTiW09qITmu1HOaiywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmYNs+h XPIP1e/GVlvuWEAAXCrGMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgeALmeMO5Rqw7xFq8KSxDRaLS7Nob6kfWOwZ0KPgMGH3HWLlexEt/ m8PUSasJyqoCDaPoXVa5sr+nZkAZdJP3ZIowlFsPTeeqybD13sMySLflcaiRFWrZ BfbCMPhCtL6ybwj2NTWIYy8uJJDkBtxnTDq4WN7Qla2s9Un9aBQ9z1K1UTR6w3qN DOvTcKVdA73EQM794GPUWxlYBvQRerUVpfWhj5ogYcKhnMb1/NyRRaslwuOlU2vJ Qf+8rqXifhEkLsjUnzeF8ekTkvU138yEI4NRq5kY5eorITOIJF7hxYEdxohwjXzh dOcRouM+n2QLXvjkNsxVrn+6hXjQi92Y -----END CERTIFICATE-----Generated at Sun Sep 7 14:39:48 2025 by rpki-client