$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json) Hash identifier: ysfWLHhXq8HWSlh3PtXmTp/tlF+//fRotwUVrmw/OII= Subject key identifier: 63:D0:D1:3B:BB:DF:B3:D9:DB:38:55:06:D0:13:C6:8A:79:2B:2D:F0 Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft Manifest number: 0468 Signing time: Mon 11 Aug 2025 00:18:48 +0000 Manifest this update: Mon 11 Aug 2025 00:18:48 +0000 Manifest next update: Mon 18 Aug 2025 00:18:48 +0000 Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: IbhSlv9twKrPc+gXhWgTIovDb3+Yi384zthMQJuOtvw=) 2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: xFL3ypsjaivEwLZovLg7QH0r6iiczksBr1MYMN2w3rQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Validity Not Before: Aug 11 00:18:48 2025 GMT Not After : Aug 18 00:18:48 2025 GMT Subject: CN=689936e8-0f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:04:7c:f1:8f:9c:77:66:ee:13:9e:57:d3: a4:da:e4:e2:bb:31:de:3c:0e:86:e3:bc:de:fa:88: ed:35:c7:b3:a9:59:91:6b:7c:62:2f:d7:ce:c7:5e: 43:23:7b:62:73:8a:34:ce:53:ef:69:80:1d:90:5c: a6:bf:33:2b:60:d2:25:f0:64:23:f5:48:80:dc:e9: 0d:64:c3:76:1e:a8:85:97:da:c6:48:e7:82:28:ab: 02:6b:8d:ba:97:15:a9:8b:00:92:bf:6a:4f:1f:05: 2d:8b:84:a4:e3:66:de:7b:a3:09:d2:18:18:9f:c8: 54:30:35:08:cd:8e:b6:6d:f2:cc:e8:8d:61:d0:29: 6b:eb:91:5a:e3:3e:5e:b8:83:95:1d:d8:1f:c6:e6: a7:7c:97:3d:40:ce:34:86:50:a6:86:d7:e0:9e:60: 86:06:ec:5c:90:d0:ea:ee:31:2e:ea:0c:79:7c:5c: 0e:3b:96:88:d5:de:15:4f:6a:5e:40:86:58:6f:a5: 58:33:0c:ae:29:5f:52:da:3a:e6:61:fb:cb:03:34: 8d:65:4f:45:f9:11:94:71:8d:10:9d:76:2c:4e:48: 31:fe:5b:5d:53:63:40:18:2f:b8:f0:3e:a0:3d:03: fd:ec:4f:d2:d4:97:87:c4:ef:b0:fa:c4:ed:e9:47: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D0:D1:3B:BB:DF:B3:D9:DB:38:55:06:D0:13:C6:8A:79:2B:2D:F0 X509v3 Authority Key Identifier: keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9d:ee:89:f8:52:40:b6:84:b3:65:f5:08:8d:52:f7:3a:1f: f2:1e:1b:8c:3e:17:81:a6:5d:4d:a5:63:46:37:10:38:e6:17: 46:aa:17:2d:e0:3b:e8:1f:00:1e:c8:ca:85:20:b9:6b:09:77: f0:7d:72:89:ab:9a:e2:19:a3:37:05:6d:e7:f7:12:9c:6c:07: bb:b0:da:bd:48:ee:67:e2:7e:de:67:f5:3a:6f:7d:55:0b:41: 01:27:42:d2:64:ea:f5:19:bc:64:8b:1b:84:fe:04:1b:0a:b9: 5a:6c:c2:8e:3b:e9:91:a6:34:89:c6:c8:80:df:98:70:ac:1a: 5a:9e:5d:dd:f7:69:7e:bb:a5:2b:06:7d:d1:52:d7:7b:4d:84: f3:09:ed:af:94:a1:2c:56:78:9f:61:bf:08:34:37:7c:86:13: 38:ab:21:aa:79:26:15:c8:a2:2b:7b:4a:ca:25:bc:c5:ae:4f: af:0c:75:d4:23:2c:31:0b:74:79:9a:24:02:b4:f5:a2:b4:75: 7f:c7:ae:79:b4:45:da:5c:ab:68:06:72:1d:c9:74:7f:d6:59: 6e:1a:ee:03:39:b9:49:4e:0f:9b:ba:e5:67:d8:25:3b:21:c4: 72:55:3f:7f:96:f1:f0:f5:4e:c4:38:33:b9:3d:cb:9c:90:3a: 0b:2e:17:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx MjU2MTQxM0MwHhcNMjUwODExMDAxODQ4WhcNMjUwODE4MDAxODQ4WjAYMRYwFAYD VQQDEw02ODk5MzZlOC0wZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt0EfPGPnHdm7hOeV9Ok2uTiuzHePA6G47ze+ojtNcezqVmRa3xiL9fOx15D I3tic4o0zlPvaYAdkFymvzMrYNIl8GQj9UiA3OkNZMN2HqiFl9rGSOeCKKsCa426 lxWpiwCSv2pPHwUti4Sk42bee6MJ0hgYn8hUMDUIzY62bfLM6I1h0Clr65Fa4z5e uIOVHdgfxuanfJc9QM40hlCmhtfgnmCGBuxckNDq7jEu6gx5fFwOO5aI1d4VT2pe QIZYb6VYMwyuKV9S2jrmYfvLAzSNZU9F+RGUcY0QnXYsTkgx/ltdU2NAGC+48D6g PQP97E/S1JeHxO+w+sTt6Uf0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPQ0Tu7 37PZ2zhVBtATxop5Ky3wMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5 N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i dUJFVjZDdjl5VlFTVmhRVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvne6J+FJAtoSzZfUIjVL3Oh/yHhuMPheBpl1NpWNGNxA45hdGqhct 4DvoHwAeyMqFILlrCXfwfXKJq5riGaM3BW3n9xKcbAe7sNq9SO5n4n7eZ/U6b31V C0EBJ0LSZOr1GbxkixuE/gQbCrlabMKOO+mRpjSJxsiA35hwrBpanl3d92l+u6Ur Bn3RUtd7TYTzCe2vlKEsVnifYb8INDd8hhM4qyGqeSYVyKIre0rKJbzFrk+vDHXU IywxC3R5miQCtPWitHV/x655tEXaXKtoBnIdyXR/1lluGu4DOblJTg+buuVn2CU7 IcRyVT9/lvHw9U7EODO5PcuckDoLLhfd -----END CERTIFICATE-----Generated at Mon Aug 11 10:51:30 2025 by rpki-client