$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: 1NoJ9QJlCIByjJeefCp625dWkOxTJx0sqosTzv4dNXw= Subject key identifier: 53:AB:0A:06:51:1B:19:D0:4B:B8:F0:DE:A7:3D:0C:80:0D:00:25:AA Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 89 Signing time: Mon 03 Nov 2025 06:35:24 +0000 Manifest this update: Mon 03 Nov 2025 06:35:23 +0000 Manifest next update: Mon 10 Nov 2025 06:35:23 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: 5qiIelxmSmjZNbcAPCoL0LS1FnT7R4hz5O+KiH5fqjI=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Nov 3 06:35:23 2025 GMT Not After : Nov 10 06:35:23 2025 GMT Subject: CN=69084d2c-a97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:50:d7:38:0c:6c:90:0a:cb:f6:38:86:56:1e: 4f:c6:dd:e3:fb:85:fd:5e:d2:75:0d:45:b1:93:ba: 7f:0b:dc:e8:c4:e1:b4:b5:5e:81:32:e2:36:60:e3: 6b:d1:0e:89:d0:8e:8e:98:f1:2e:cb:e8:31:c9:ab: cf:69:91:87:94:96:98:86:29:91:63:6b:fe:fd:e7: dc:ab:30:18:36:1e:93:95:e9:dc:a6:58:9f:6a:00: 23:44:ca:3d:32:83:6e:28:dd:6e:b9:32:f8:21:00: be:88:42:f3:82:8a:ba:a1:d0:97:fa:11:41:36:49: ee:1a:4b:36:23:d9:ce:a1:d5:71:7b:e5:c0:78:b7: 86:a4:1a:1d:ed:cc:7d:a8:ef:0e:6a:40:5d:d4:97: 0e:33:4d:93:15:07:a4:f8:a1:a6:13:58:0c:12:4a: 3e:8e:70:40:16:70:e3:8f:9d:e4:7b:a1:80:4e:24: 50:7b:83:fc:51:f4:e6:23:e5:ba:8f:e3:33:9a:f0: 0c:20:e3:74:d5:96:3b:56:10:d0:a3:9b:7b:f4:58: b7:06:f1:f9:e3:1c:e5:38:6c:fc:dc:34:9f:44:37: 9f:2a:91:f8:1d:8c:aa:b0:dc:22:1c:45:50:4e:37: 62:a4:80:b6:bc:52:20:8b:89:6f:f3:53:cd:b5:10: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:0A:06:51:1B:19:D0:4B:B8:F0:DE:A7:3D:0C:80:0D:00:25:AA X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:8d:0f:ac:67:cb:2e:69:b0:34:b9:19:4e:37:7a:40:e0: aa:85:d6:40:b6:35:35:47:f0:a6:6c:6f:51:dd:57:5b:33:e2: 63:78:73:49:47:00:ec:aa:5a:b8:2b:0c:9c:d2:9f:ea:d3:b4: b9:93:57:5e:ac:b9:28:69:f5:6d:62:3a:4d:3a:97:c5:89:f7: dc:ec:ab:3f:50:60:4e:0b:8d:29:cd:2e:09:1a:df:2d:06:f9: 6a:18:39:94:a6:4e:92:41:75:9d:f9:29:c1:66:d0:c6:1b:6d: 63:44:62:3f:48:1a:12:6f:b3:06:6a:af:9f:d9:89:15:8e:d7: c3:15:ff:99:fb:7d:d7:2e:2f:b5:9a:c6:41:00:f1:5a:2b:9d: d7:2c:fa:ec:17:d9:fb:33:45:11:6a:e7:15:0b:70:e7:a6:ff: ba:58:95:f0:3a:22:ae:74:90:7b:fc:27:99:a0:77:20:0d:98: 6f:16:cf:86:13:4b:24:cd:78:8b:e4:9b:48:b8:5b:47:91:53: 4e:35:f4:75:32:2d:1d:31:c9:33:36:00:0f:0e:e2:f2:e9:47: 49:49:5e:d8:68:83:f3:ee:52:55:e5:e1:2b:64:35:39:16:66: f5:e3:cc:e7:e5:ee:19:0c:d6:75:21:58:dd:64:4a:50:49:c4: 83:de:b3:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRENTgxMTAvBgNVBAUTKDE4MTAxQ0I4NDU4NzAxMjM1QzNGMTMzMzlBRTVBOURC M0M3NUIyNDAwHhcNMjUxMTAzMDYzNTIzWhcNMjUxMTEwMDYzNTIzWjAYMRYwFAYD VQQDEw02OTA4NGQyYy1hOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VDXOAxskArL9jiGVh5Pxt3j+4X9XtJ1DUWxk7p/C9zoxOG0tV6BMuI2YONr 0Q6J0I6OmPEuy+gxyavPaZGHlJaYhimRY2v+/efcqzAYNh6TlencplifagAjRMo9 MoNuKN1uuTL4IQC+iELzgoq6odCX+hFBNknuGks2I9nOodVxe+XAeLeGpBod7cx9 qO8OakBd1JcOM02TFQek+KGmE1gMEko+jnBAFnDjj53ke6GATiRQe4P8UfTmI+W6 j+MzmvAMION01ZY7VhDQo5t79Fi3BvH54xzlOGz83DSfRDefKpH4HYyqsNwiHEVQ TjdipIC2vFIgi4lv81PNtRAkqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOrCgZR GxnQS7jw3qc9DIANACWqMB8GA1UdIwQYMBaAFBgQHLhFhwEjXD8TM5rlqds8dbJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEQ1OC80NEM3M0ZENkU4 MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFTTmNQeE16bXVXcDJ6eDFz a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEQ1OC80NEM3M0ZENkU4MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFT TmNQeE16bXVXcDJ6eDFza0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAK40PrGfLLmmwNLkZTjd6QOCqhdZAtjU1R/CmbG9R3VdbM+JjeHNJ RwDsqlq4Kwyc0p/q07S5k1derLkoafVtYjpNOpfFiffc7Ks/UGBOC40pzS4JGt8t BvlqGDmUpk6SQXWd+SnBZtDGG21jRGI/SBoSb7MGaq+f2YkVjtfDFf+Z+33XLi+1 msZBAPFaK53XLPrsF9n7M0URaucVC3Dnpv+6WJXwOiKudJB7/CeZoHcgDZhvFs+G E0skzXiL5JtIuFtHkVNONfR1Mi0dMckzNgAPDuLy6UdJSV7YaIPz7lJV5eErZDU5 Fmb148zn5e4ZDNZ1IVjdZEpQScSD3rMN -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:57 2025 by rpki-client