$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: B9DonPPNPdHNe63QSK3BrD0Ar3DSk5mrP5+1O8MlbmQ= Subject key identifier: CF:5F:D4:5C:D5:04:F2:42:F2:4B:AE:26:73:66:2D:CE:41:77:D5:FC Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 27E0 Signing time: Wed 20 Aug 2025 16:00:53 +0000 Manifest this update: Wed 20 Aug 2025 16:00:53 +0000 Manifest next update: Wed 27 Aug 2025 16:00:53 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: 6KFHIgIJnJ9xUFuQeMlZ3b6y32NJuLd249dvFyaX+8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: Aug 20 16:00:53 2025 GMT Not After : Aug 27 16:00:53 2025 GMT Subject: CN=68a5f135-32d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:ab:21:dd:27:37:2d:a6:ab:9a:72:48:0a: 3b:54:56:53:72:81:53:ab:96:e9:b9:cb:02:7d:47: fe:75:f5:d8:02:3d:56:81:0d:3f:91:b6:e2:e2:b2: 26:91:05:db:f1:e5:93:bc:08:33:3c:f5:8f:06:d3: ed:d9:9d:a0:d6:f3:30:93:d8:5b:c6:b0:69:7b:86: 2e:c1:da:bd:17:96:b2:32:e3:bf:b5:fc:a3:68:02: 09:b8:73:71:1f:bc:a4:7c:1d:e4:53:69:4d:fb:1e: 5a:8c:d2:63:94:11:5d:2e:8c:b0:8f:a2:2a:5b:3d: 5e:12:40:8e:52:06:b2:d7:14:4f:7f:eb:0c:1d:e0: d2:16:9f:72:e8:dc:bd:6a:40:8b:77:79:bf:bb:9b: d4:e0:d5:47:57:f9:24:26:38:8a:6a:df:45:22:57: 94:04:2d:45:c8:83:b8:7f:0b:ff:5a:cc:94:e5:13: 53:df:60:b1:d6:4d:ae:e9:69:ed:b5:f1:69:ca:21: 4c:3e:06:6b:6c:3a:97:1c:2b:b8:f8:7f:40:49:2a: 9d:45:46:5c:35:50:37:ef:5a:7d:c9:27:2a:89:e3: 32:7b:57:ed:d7:62:0a:26:d9:85:3a:30:a0:23:57: 55:06:17:4b:df:f4:22:dd:a3:c0:a8:7a:89:45:10: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:D4:5C:D5:04:F2:42:F2:4B:AE:26:73:66:2D:CE:41:77:D5:FC X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:90:32:41:71:a8:9c:0c:3a:ee:11:0e:5e:51:2f:cc:f1:51: cd:7f:8d:6a:2c:44:f0:26:d9:90:28:94:f5:27:ee:00:d8:d6: 4b:0f:d6:ce:44:6b:e8:16:7e:90:46:07:5a:d0:ea:44:f9:bf: 0b:bb:37:63:2c:5a:4d:59:4f:fc:17:af:6b:ed:85:31:bf:21: b7:ff:b1:59:19:69:8f:9c:f5:67:80:9f:95:4b:1a:f4:26:c0: 1b:b7:ca:c6:7e:db:7b:d6:af:8e:5c:33:19:f0:48:fb:6f:9d: 15:ad:2f:ae:11:99:71:7f:9b:e0:4e:b5:0d:38:93:50:37:98: 62:cf:b1:56:5c:f0:84:0d:07:86:2d:67:00:8e:4d:56:c2:43: 35:ab:16:99:fe:9d:a3:6b:50:da:ea:c8:98:bb:1d:fc:dc:97: 9c:49:e2:7a:29:5f:ff:c1:8e:bb:b6:fa:90:2c:21:a1:15:89: 72:86:a5:e8:c0:a4:11:da:81:b3:1c:a7:49:86:64:1d:1b:8f: dd:f5:d7:1c:78:f2:40:ef:8a:b1:4a:03:53:e4:0c:a3:bf:0f: 2d:e9:8f:40:29:e4:90:1e:3d:67:1c:08:62:e4:43:4a:b5:73: 39:92:20:dc:fb:9c:9b:11:d5:19:bc:3d:22:56:2f:7e:a2:a4: 39:82:33:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjUwODIwMTYwMDUzWhcNMjUwODI3MTYwMDUzWjAYMRYwFAYD VQQDEw02OGE1ZjEzNS0zMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c6rId0nNy2mq5pySAo7VFZTcoFTq5bpucsCfUf+dfXYAj1WgQ0/kbbi4rIm kQXb8eWTvAgzPPWPBtPt2Z2g1vMwk9hbxrBpe4Yuwdq9F5ayMuO/tfyjaAIJuHNx H7ykfB3kU2lN+x5ajNJjlBFdLoywj6IqWz1eEkCOUgay1xRPf+sMHeDSFp9y6Ny9 akCLd3m/u5vU4NVHV/kkJjiKat9FIleUBC1FyIO4fwv/WsyU5RNT32Cx1k2u6Wnt tfFpyiFMPgZrbDqXHCu4+H9ASSqdRUZcNVA371p9yScqieMye1ft12IKJtmFOjCg I1dVBhdL3/Qi3aPAqHqJRRBnLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9f1FzV BPJC8kuuJnNmLc5Bd9X8MB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUkDJBcaicDDruEQ5eUS/M8VHNf41qLETwJtmQKJT1J+4A2NZLD9bO RGvoFn6QRgda0OpE+b8LuzdjLFpNWU/8F69r7YUxvyG3/7FZGWmPnPVngJ+VSxr0 JsAbt8rGftt71q+OXDMZ8Ej7b50VrS+uEZlxf5vgTrUNOJNQN5hiz7FWXPCEDQeG LWcAjk1WwkM1qxaZ/p2ja1Da6siYux383JecSeJ6KV//wY67tvqQLCGhFYlyhqXo wKQR2oGzHKdJhmQdG4/d9dccePJA74qxSgNT5Ayjvw8t6Y9AKeSQHj1nHAhi5ENK tXM5kiDc+5ybEdUZvD0iVi9+oqQ5gjNC -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:12 2025 by rpki-client