$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: nat4Ozz+/34v3WEEHvb0s58tsc85VMvz7ohHpcTMei4= Subject key identifier: 61:B5:7C:24:60:4F:4F:8B:A5:64:01:C4:48:A9:44:24:BA:B5:6F:DC Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 020E Signing time: Thu 07 Aug 2025 02:37:08 +0000 Manifest this update: Thu 07 Aug 2025 02:37:08 +0000 Manifest next update: Thu 14 Aug 2025 02:37:08 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: m+NMYJq9SUk1RDvEt8F+hHoIyw/+/VqkT76BIkFj9bA=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Aug 7 02:37:08 2025 GMT Not After : Aug 14 02:37:08 2025 GMT Subject: CN=68941154-a70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:9a:b1:42:33:1f:dc:58:39:64:ac:7c:c8: 29:96:1e:b1:6c:4c:9e:73:2b:26:fe:51:37:6a:e5: 5e:7d:5e:6c:33:d2:ab:f4:97:c3:91:37:9b:a4:97: 34:df:ac:4d:ba:40:59:d2:85:b7:63:82:8c:45:bd: 3b:27:c9:b8:31:34:bc:55:03:23:d5:d9:82:85:b9: c3:eb:0b:a1:f9:1b:98:b8:eb:e3:d7:77:d9:33:25: c3:da:2e:f6:d5:ca:db:f5:7f:f0:67:7c:15:16:a4: 9c:33:9b:f5:59:0c:51:7c:68:3d:e0:c4:01:1f:a1: ec:3c:09:f5:83:ba:eb:c7:e6:88:a7:07:78:78:2a: 8c:0d:db:fe:86:16:d9:44:d4:d7:e4:69:79:a3:59: 9e:9c:bf:fb:54:23:52:48:90:11:06:ca:0f:f8:1b: 1e:64:39:82:09:3d:eb:6e:24:06:36:6e:c9:18:16: f7:27:f8:c7:d0:fa:17:e1:68:80:d0:de:e5:7f:03: d9:8d:9b:75:35:d7:97:41:f1:3d:c4:a4:88:3f:02: fb:d4:fd:5a:71:de:fe:15:dd:66:4e:83:3f:0c:52: 05:77:12:71:f7:13:00:05:ab:c6:85:fc:27:10:ef: 73:fb:51:98:67:ac:ba:56:b2:74:f1:04:f3:90:94: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B5:7C:24:60:4F:4F:8B:A5:64:01:C4:48:A9:44:24:BA:B5:6F:DC X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e5:73:75:aa:16:f5:d7:47:0e:de:2f:3e:d1:2f:6d:b3:97: 67:23:45:de:bb:fe:8b:4f:be:25:e8:10:15:ec:c1:0a:ae:29: ba:55:bb:30:68:01:b3:ad:a1:34:b6:f4:8e:e6:d9:15:4a:cc: 5a:f4:44:88:d4:19:7d:5a:f6:f7:67:3a:dd:92:47:d5:5b:f1: 2b:6b:44:bf:06:92:3b:f0:1e:61:02:5b:69:20:ff:a0:e4:d8: d7:66:c6:30:d0:d1:b8:c2:ec:26:8b:07:24:95:a6:43:e7:2a: 60:72:31:d0:74:6b:3f:da:2f:bf:9d:74:40:84:05:cb:64:59: 74:fd:63:fd:d7:30:8b:3e:98:4d:55:94:55:c3:5d:58:40:ae: 8f:90:09:00:94:29:b7:85:64:1b:40:c5:7f:27:f3:cf:10:99: ac:93:6d:ae:b7:d5:f4:95:d6:7d:58:12:47:59:a6:13:14:75: 85:de:d7:b7:80:64:28:92:38:39:63:0f:e0:19:d3:94:ce:1b: 5f:9f:b7:03:7a:fd:89:d8:a3:e2:7e:70:e9:65:02:56:30:01: ad:2a:a3:2e:77:66:fa:fc:7d:7b:7c:2f:8f:9b:f8:07:e2:2c: 49:b3:9f:e3:ec:49:6e:86:69:38:65:d6:70:a1:4c:4c:c3:ea: d4:67:dc:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUwODA3MDIzNzA4WhcNMjUwODE0MDIzNzA4WjAYMRYwFAYD VQQDEw02ODk0MTE1NC1hNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2SasUIzH9xYOWSsfMgplh6xbEyecysm/lE3auVefV5sM9Kr9JfDkTebpJc0 36xNukBZ0oW3Y4KMRb07J8m4MTS8VQMj1dmChbnD6wuh+RuYuOvj13fZMyXD2i72 1crb9X/wZ3wVFqScM5v1WQxRfGg94MQBH6HsPAn1g7rrx+aIpwd4eCqMDdv+hhbZ RNTX5Gl5o1menL/7VCNSSJARBsoP+BseZDmCCT3rbiQGNm7JGBb3J/jH0PoX4WiA 0N7lfwPZjZt1NdeXQfE9xKSIPwL71P1acd7+Fd1mToM/DFIFdxJx9xMABavGhfwn EO9z+1GYZ6y6VrJ08QTzkJQ+7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG1fCRg T0+LpWQBxEipRCS6tW/cMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5XN1qhb110cO3i8+0S9ts5dnI0Xeu/6LT74l6BAV7MEKrim6Vbsw aAGzraE0tvSO5tkVSsxa9ESI1Bl9Wvb3ZzrdkkfVW/Era0S/BpI78B5hAltpIP+g 5NjXZsYw0NG4wuwmiwcklaZD5ypgcjHQdGs/2i+/nXRAhAXLZFl0/WP91zCLPphN VZRVw11YQK6PkAkAlCm3hWQbQMV/J/PPEJmsk22ut9X0ldZ9WBJHWaYTFHWF3te3 gGQokjg5Yw/gGdOUzhtfn7cDev2J2KPifnDpZQJWMAGtKqMud2b6/H17fC+Pm/gH 4ixJs5/j7Eluhmk4ZdZwoUxMw+rUZ9ym -----END CERTIFICATE-----Generated at Sat Aug 9 01:07:15 2025 by rpki-client