$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: MZeMU0hGFFNydIdlHYEwPjJAGlnysifebAcdEuwz+l0= Subject key identifier: 2F:6D:A2:71:82:15:E3:03:E1:A7:7C:9F:6F:B3:D1:59:3F:E5:84:91 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 10 Signing time: Fri 05 Sep 2025 08:34:02 +0000 Manifest this update: Fri 05 Sep 2025 08:34:01 +0000 Manifest next update: Fri 12 Sep 2025 08:34:01 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: ddNVHfyuzMBdrF04SzcyX1ct/ZjJZ8fbDrbKP6gav8k=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Sep 5 08:34:01 2025 GMT Not After : Sep 12 08:34:01 2025 GMT Subject: CN=68baa07a-034a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:da:24:01:16:c2:d8:92:0e:82:b6:db:1e: 91:13:07:e6:42:4a:c4:b8:ab:11:98:fd:d1:71:ed: ce:8d:f4:60:3c:0f:71:db:52:66:e9:7e:de:9b:03: f8:84:98:a2:a0:42:b0:de:ce:e1:f1:6b:0d:80:5e: 39:6c:1e:18:a5:a4:b8:6c:d0:d5:77:6c:c6:4a:5d: 2f:56:4f:0f:66:de:3a:52:2b:9f:37:1e:90:73:6c: e8:ed:1d:01:1c:44:a2:6e:d3:b0:d5:b7:be:fc:b6: 66:ba:32:f6:84:9f:72:f9:be:1e:66:0d:81:b5:8e: 37:c9:04:9b:c7:2e:32:d3:5b:58:95:38:55:f1:3b: 0d:7d:da:6f:33:31:0f:00:13:14:a0:c5:ff:d0:e4: 31:36:55:02:c9:fb:12:2e:10:31:66:96:7b:ae:50: 0e:de:27:78:3d:57:6c:59:5d:1d:d2:b2:64:2d:2b: 41:2a:4a:07:6a:dd:1f:df:10:c6:d6:63:62:49:b1: 3b:e0:fd:94:a6:53:16:a7:71:9e:d0:a4:cd:38:28: 4e:12:cb:b7:94:3f:c6:08:48:c3:9d:66:ab:12:9c: 5d:47:d3:a6:8f:ef:50:80:74:14:25:26:8f:47:26: 3e:0d:cd:50:09:74:cd:c2:e5:ad:96:27:18:93:3f: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6D:A2:71:82:15:E3:03:E1:A7:7C:9F:6F:B3:D1:59:3F:E5:84:91 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a2:a8:0a:0f:10:35:05:59:fc:d2:1c:04:c6:6d:31:79:bd: 8b:b9:0a:9e:d6:f5:e4:a2:e9:2d:d4:8a:17:98:b4:b1:33:21: 2f:ae:b4:32:d1:68:59:bf:d3:44:1f:9e:6f:77:bd:ea:7f:93: 2f:36:21:97:6b:17:f5:1c:70:32:63:06:cd:9b:60:55:86:4a: 79:98:c0:84:13:ce:9c:6f:ba:fc:6d:49:8c:57:5a:38:4d:0f: 9c:9a:0e:5c:73:da:8b:34:75:30:af:b7:6d:ae:58:6c:af:15: e2:5d:83:28:2b:3c:44:62:5a:2d:0b:5e:3f:e1:97:53:6a:e4: 32:e7:d1:77:45:3b:09:8f:e9:4f:e4:a0:14:86:09:55:35:30: 45:a4:0b:19:59:d4:61:c0:dd:91:eb:ab:b4:03:bc:b9:cf:78: a7:9b:e8:7d:81:d5:8b:d6:ec:28:3f:60:29:40:18:c4:8c:bc: cb:54:11:bc:14:1e:4c:f9:84:ec:43:73:57:9b:d0:29:f9:60: 18:39:fe:da:d8:27:f6:fc:9f:8c:1f:8b:09:6a:68:6a:b0:89: 36:d9:65:1d:c7:2a:c2:2b:eb:90:79:d8:75:4f:e3:8a:93:a1: 2f:3d:64:85:1e:ad:a5:b8:49:ae:1e:8b:e2:72:e2:a3:90:3e: 29:35:19:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNTA5MDUwODM0MDFaFw0yNTA5MTIwODM0MDFaMBgxFjAUBgNV BAMTDTY4YmFhMDdhLTAzNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4y9okARbC2JIOgrbbHpETB+ZCSsS4qxGY/dFx7c6N9GA8D3HbUmbpft6bA/iE mKKgQrDezuHxaw2AXjlsHhilpLhs0NV3bMZKXS9WTw9m3jpSK583HpBzbOjtHQEc RKJu07DVt778tma6MvaEn3L5vh5mDYG1jjfJBJvHLjLTW1iVOFXxOw192m8zMQ8A ExSgxf/Q5DE2VQLJ+xIuEDFmlnuuUA7eJ3g9V2xZXR3SsmQtK0EqSgdq3R/fEMbW Y2JJsTvg/ZSmUxancZ7QpM04KE4Sy7eUP8YISMOdZqsSnF1H06aP71CAdBQlJo9H Jj4NzVAJdM3C5a2WJxiTP/ShAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL22icYIV 4wPhp3yfb7PRWT/lhJEwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2iqAoPEDUFWfzSHATGbTF5vYu5Cp7W9eSi6S3UiheYtLEzIS+utDLR aFm/00Qfnm93vep/ky82IZdrF/UccDJjBs2bYFWGSnmYwIQTzpxvuvxtSYxXWjhN D5yaDlxz2os0dTCvt22uWGyvFeJdgygrPERiWi0LXj/hl1Nq5DLn0XdFOwmP6U/k oBSGCVU1MEWkCxlZ1GHA3ZHrq7QDvLnPeKeb6H2B1YvW7Cg/YClAGMSMvMtUEbwU Hkz5hOxDc1eb0Cn5YBg5/trYJ/b8n4wfiwlqaGqwiTbZZR3HKsIr65B52HVP44qT oS89ZIUeraW4Sa4ei+Jy4qOQPik1GXA= -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:03 2025 by rpki-client