$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: 4rsCVbZ7NmineXtFS9KELHNVUkmziq09V2mLYRCsJLo= Subject key identifier: 0F:F6:EA:D6:52:37:87:68:3F:3A:6A:1E:B7:AF:B1:5C:0E:74:E9:AC Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 06CE Signing time: Thu 04 Sep 2025 20:51:29 +0000 Manifest this update: Thu 04 Sep 2025 20:51:29 +0000 Manifest next update: Thu 11 Sep 2025 20:51:29 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: rFu0dnYqLjIifrEmc2Y1tRs0pcR1aBHopmGtjp1+YXE=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: IN0gc9PJxJ33qBabtfsH0oOyy1CZdnLejFeFWz0Ut3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Sep 4 20:51:29 2025 GMT Not After : Sep 11 20:51:29 2025 GMT Subject: CN=68b9fbd1-5629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:0c:11:1b:ce:f8:d7:22:35:57:23:14:ae: d8:85:06:dc:9b:87:dd:a2:f5:49:81:4b:1d:c8:e1: 13:e2:41:85:d9:35:9a:e4:29:96:bf:ce:af:39:72: 34:8a:4d:4f:e1:ad:ec:b9:d0:3b:92:e8:13:11:da: 92:66:4c:8c:50:2b:08:b3:01:8d:15:d2:95:00:bb: c8:54:ea:d8:51:5b:71:58:4d:8d:b0:95:9d:7c:bb: 84:d6:4f:96:5a:b3:fb:c6:df:2c:a2:39:67:56:81: 22:bf:26:fc:fc:3b:15:16:ce:97:98:4b:73:57:5f: f9:88:2c:e6:44:26:b1:f0:20:e7:23:4f:30:50:90: 41:d2:32:51:b1:c3:04:3e:5e:e2:10:77:38:92:8a: da:97:e9:0f:fe:b5:ad:40:26:69:16:0f:b0:a4:f5: c7:71:5d:60:61:65:2c:d4:a8:f7:17:1a:e7:d0:4b: 9c:7c:0d:6f:b3:83:c4:57:ca:96:cc:de:12:b5:eb: 90:c1:d8:48:2c:dd:bd:28:cc:0b:b8:84:48:9a:fc: 93:35:f6:3c:0e:fa:d4:2b:98:6a:3f:09:47:51:b7: c3:fe:25:01:f4:4a:e2:0b:6a:ce:5f:ec:2f:68:34: 0b:50:c4:e6:0c:97:d2:03:e8:f3:00:4b:2c:da:37: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:EA:D6:52:37:87:68:3F:3A:6A:1E:B7:AF:B1:5C:0E:74:E9:AC X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:e5:e0:c6:09:fc:62:e8:1f:48:c3:db:78:73:6b:89:41: f3:ac:3e:3c:7b:f4:4f:6d:5d:7b:76:22:7a:76:c9:ed:60:08: 0b:a0:b6:fd:0e:1e:72:6c:ad:43:76:55:cb:87:f6:c7:96:ff: d1:c2:13:1e:f0:08:4f:e3:b3:ca:64:27:41:6d:7e:f5:8f:79: 64:45:c0:8d:b9:e2:76:d7:1c:20:7d:dc:5d:cd:47:c5:af:f3: 39:d6:ca:c5:b1:b2:a4:42:6c:52:ce:d5:80:3d:52:84:d1:31: 08:fe:6d:e6:e7:04:5f:4e:10:ef:da:90:73:30:ee:1b:82:6f: 4f:02:5a:a7:c1:47:37:28:ba:c8:18:1c:f8:06:cb:94:fd:c5: 55:df:d4:57:57:93:46:5e:61:d3:8a:c4:97:06:c6:26:c0:71: 3f:b4:8a:7e:9b:04:da:32:90:51:95:72:7f:11:51:76:ba:8c: ac:3b:d1:d0:79:46:63:d7:15:e3:2b:dd:08:d1:0d:a6:b9:36: b9:b5:66:b7:de:b0:77:2c:00:18:25:25:48:37:66:90:e8:dc: 61:f9:2e:a0:eb:1d:0f:ed:01:cb:aa:fc:39:a5:19:0e:d8:92: 13:50:ec:dd:1d:fd:46:24:cc:d8:b0:78:41:ae:18:c0:c0:99: e2:4c:35:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUwOTA0MjA1MTI5WhcNMjUwOTExMjA1MTI5WjAYMRYwFAYD VQQDEw02OGI5ZmJkMS01NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvukMERvO+NciNVcjFK7YhQbcm4fdovVJgUsdyOET4kGF2TWa5CmWv86vOXI0 ik1P4a3sudA7kugTEdqSZkyMUCsIswGNFdKVALvIVOrYUVtxWE2NsJWdfLuE1k+W WrP7xt8sojlnVoEivyb8/DsVFs6XmEtzV1/5iCzmRCax8CDnI08wUJBB0jJRscME Pl7iEHc4koral+kP/rWtQCZpFg+wpPXHcV1gYWUs1Kj3Fxrn0EucfA1vs4PEV8qW zN4SteuQwdhILN29KMwLuIRImvyTNfY8DvrUK5hqPwlHUbfD/iUB9EriC2rOX+wv aDQLUMTmDJfSA+jzAEss2jdG+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/26tZS N4doPzpqHrevsVwOdOmsMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4qOXgxgn8YugfSMPbeHNriUHzrD48e/RPbV17diJ6dsntYAgLoLb9 Dh5ybK1DdlXLh/bHlv/RwhMe8AhP47PKZCdBbX71j3lkRcCNueJ21xwgfdxdzUfF r/M51srFsbKkQmxSztWAPVKE0TEI/m3m5wRfThDv2pBzMO4bgm9PAlqnwUc3KLrI GBz4BsuU/cVV39RXV5NGXmHTisSXBsYmwHE/tIp+mwTaMpBRlXJ/EVF2uoysO9HQ eUZj1xXjK90I0Q2muTa5tWa33rB3LAAYJSVIN2aQ6Nxh+S6g6x0P7QHLqvw5pRkO 2JITUOzdHf1GJMzYsHhBrhjAwJniTDWa -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:46 2025 by rpki-client