$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft File: GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json) Hash identifier: R+s0UsuQYWeTbvTuhntBKNNnniuoJcqDzEL4Mh54AGs= Subject key identifier: 8A:2A:A2:A7:04:1F:E3:AB:6D:B3:E7:21:F5:A0:56:DF:DC:1B:92:AC Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A Certificate issuer: /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft Manifest number: 68 Signing time: Thu 21 Aug 2025 07:10:39 +0000 Manifest this update: Thu 21 Aug 2025 07:10:38 +0000 Manifest next update: Thu 28 Aug 2025 07:10:38 +0000 Files and hashes: 1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: C9iH23zddAXmeNKxhZMZSXqVed7axMH0bFJV4URmEMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A Validity Not Before: Aug 21 07:10:38 2025 GMT Not After : Aug 28 07:10:38 2025 GMT Subject: CN=68a6c66f-e1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:b5:c6:b3:33:1b:9d:1c:0c:d7:3f:f9:5c: 39:5c:df:04:3d:e5:3a:f0:17:fa:e2:42:58:59:76: 0c:4b:fe:db:f2:ba:55:ec:15:b8:e0:10:e7:bc:62: 30:ff:e6:8c:03:87:c3:62:27:cf:a8:9c:12:14:11: 77:64:57:df:16:92:67:85:59:fd:1b:ee:80:4f:8b: 8c:33:23:c2:d3:9c:4f:f4:dc:55:79:7d:30:a3:01: ca:46:e2:fd:20:93:b2:45:25:16:20:d7:97:48:00: 70:55:4d:73:41:a4:1a:6a:6e:d8:8a:41:d0:c2:9c: 56:c4:62:b6:7d:b2:cf:f4:1c:21:e3:41:d6:4e:98: bc:95:92:f4:35:3a:39:02:66:a5:52:2a:05:7f:71: 6b:71:74:3a:fc:f0:d4:fa:a6:3f:fe:f1:35:63:52: b4:68:be:f9:12:74:d2:95:4f:c6:01:0d:f6:61:9e: cf:fa:53:86:7b:55:16:75:cc:85:a5:44:fb:72:e4: 7a:f3:88:3d:ef:e2:d8:6c:72:7c:13:3c:d1:c5:af: 86:c5:95:4a:48:7f:82:24:f9:54:3f:86:17:95:6d: b0:24:41:8d:9e:35:47:d9:cc:de:7b:7a:36:c0:5c: b8:40:24:6d:f1:db:fd:6d:99:ad:46:41:37:99:d9: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:A2:A7:04:1F:E3:AB:6D:B3:E7:21:F5:A0:56:DF:DC:1B:92:AC X509v3 Authority Key Identifier: keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:e2:65:37:2b:e0:b3:b9:86:2e:1f:61:66:58:82:63:7f:49: af:6b:d3:57:50:e1:48:86:dc:7c:d2:7e:e1:60:f5:22:29:51: 02:70:e5:b8:26:93:98:fa:66:8a:7b:30:d7:7c:ae:b2:3c:7e: 62:03:b3:a0:9e:58:e0:30:25:09:7c:e6:73:a9:b8:30:16:e2: d8:4d:17:45:ed:8c:44:ec:86:a0:37:5b:61:9d:5b:b4:88:b1: 62:22:95:c3:1b:17:7d:34:e7:bc:43:60:ce:61:54:f9:0d:6d: 9f:06:67:28:19:35:4c:ca:8f:88:a1:6d:dc:be:b8:43:f0:57: ef:1c:d9:da:6d:ed:0d:60:4a:ba:15:43:2c:74:8d:1e:82:a7: 28:22:1e:3d:b2:63:86:8b:43:03:48:5d:b4:7d:6b:e1:d4:d9: f3:13:d8:92:00:44:61:1d:94:ed:45:1b:30:0e:24:b6:e2:df: 50:bb:be:69:7a:4c:6f:20:e9:53:c5:85:7d:a3:13:25:52:ce: 38:8a:81:16:5d:2f:65:b0:0f:57:1e:87:06:e1:b3:43:7d:8c: 09:ff:75:c5:3d:f9:76:a8:3d:51:57:f5:3c:f9:11:31:9e:ee: fc:36:87:c1:0e:01:cc:78:02:31:81:4f:7b:96:eb:5e:77:88: 66:3f:8a:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODM1NzExMC8GA1UEBRMoMTgwQTM1MjJFMjA1MEM1RjFFMDg3MzUzOUIxMkQ2RDIz MTJBMjAxQTAeFw0yNTA4MjEwNzEwMzhaFw0yNTA4MjgwNzEwMzhaMBgxFjAUBgNV BAMTDTY4YTZjNjZmLWUxYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHibXGszMbnRwM1z/5XDlc3wQ95TrwF/riQlhZdgxL/tvyulXsFbjgEOe8YjD/ 5owDh8NiJ8+onBIUEXdkV98WkmeFWf0b7oBPi4wzI8LTnE/03FV5fTCjAcpG4v0g k7JFJRYg15dIAHBVTXNBpBpqbtiKQdDCnFbEYrZ9ss/0HCHjQdZOmLyVkvQ1OjkC ZqVSKgV/cWtxdDr88NT6pj/+8TVjUrRovvkSdNKVT8YBDfZhns/6U4Z7VRZ1zIWl RPty5HrziD3v4thscnwTPNHFr4bFlUpIf4Ik+VQ/hheVbbAkQY2eNUfZzN57ejbA XLhAJG3x2/1tma1GQTeZ2W8DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiiqipwQf 46tts+ch9aBW39wbkqwwHwYDVR0jBBgwFoAUGAo1IuIFDF8eCHNTmxLW0jEqIBow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzU3LzFEQTVDQzU2REY4 QTExRUY4NzQ3MkI3NEM0RjlBRTAyL0dBbzFJdUlGREY4ZUNITlRteExXMGpFcUlC by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0FvMUl1SUZERjhlQ0hOVG14TFcwakVxSUJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MzU3LzFEQTVDQzU2REY4QTExRUY4NzQ3MkI3NEM0RjlBRTAyL0dBbzFJdUlGREY4 ZUNITlRteExXMGpFcUlCby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALziZTcr4LO5hi4fYWZYgmN/Sa9r01dQ4UiG3HzSfuFg9SIpUQJw5bgm k5j6Zop7MNd8rrI8fmIDs6CeWOAwJQl85nOpuDAW4thNF0XtjETshqA3W2GdW7SI sWIilcMbF30057xDYM5hVPkNbZ8GZygZNUzKj4ihbdy+uEPwV+8c2dpt7Q1gSroV Qyx0jR6CpygiHj2yY4aLQwNIXbR9a+HU2fMT2JIARGEdlO1FGzAOJLbi31C7vml6 TG8g6VPFhX2jEyVSzjiKgRZdL2WwD1cehwbhs0N9jAn/dcU9+XaoPVFX9Tz5ETGe 7vw2h8EOAcx4AjGBT3uW6153iGY/itU= -----END CERTIFICATE-----Generated at Fri Aug 22 16:17:03 2025 by rpki-client