$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: Do7HZKLiIRldl+jP46Y+l9RlC08qVyZ+PUBJbcWMcLU= Subject key identifier: 30:6C:31:3C:FC:86:8F:7E:87:9A:8C:02:45:51:7E:9F:AC:BC:6B:7A Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 053A Signing time: Sun 02 Nov 2025 23:28:02 +0000 Manifest this update: Sun 02 Nov 2025 23:28:02 +0000 Manifest next update: Sun 09 Nov 2025 23:28:02 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: xhnlYHKK6VqqQiE8LnsptJtaaDBvOUtPiAwNv1R39W4=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Nov 2 23:28:02 2025 GMT Not After : Nov 9 23:28:02 2025 GMT Subject: CN=6907e902-2725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:0b:45:a5:4d:29:95:1a:73:c0:f0:62:03: d9:64:d5:01:f9:e2:c1:24:2c:07:10:1b:3d:b4:c4: 44:03:6e:70:ac:ef:15:d0:a1:a9:c6:a7:40:22:07: ce:94:7c:f8:1e:30:5e:45:97:90:9a:1f:83:e8:7d: e4:e4:5c:18:01:d2:cd:13:19:13:c2:a9:dd:20:a5: 25:cb:43:e5:78:e1:51:b2:81:34:16:7b:03:a9:ad: b8:51:4b:a0:2c:19:31:f3:74:1c:13:b8:e6:00:34: 9b:76:d1:b9:e9:87:da:dd:d0:c5:56:52:5a:59:d9: 96:69:7e:bf:b7:3a:8b:07:d0:81:a8:af:27:46:04: d9:23:d7:f0:d8:2a:ca:a5:47:9d:42:9d:c2:e4:85: 4f:a3:a9:72:0c:28:31:83:07:fb:f3:81:9d:11:66: 58:cf:a9:3f:91:b6:73:f1:2f:7a:c5:cc:50:ad:34: 1c:5d:ac:d8:6d:ad:a5:ec:d5:3d:a0:34:bf:a8:22: 75:c6:6c:d7:67:13:8b:6b:90:61:f0:84:16:ea:8f: c5:6a:a0:65:be:22:fa:a5:b8:ad:c3:a3:90:e2:ac: 7c:84:e2:3d:56:29:cf:77:d2:5d:b1:05:05:ef:a2: e1:46:3f:5b:99:d7:fb:97:ce:67:67:17:e2:79:28: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6C:31:3C:FC:86:8F:7E:87:9A:8C:02:45:51:7E:9F:AC:BC:6B:7A X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:70:80:b1:3c:c5:63:8a:dd:83:de:0a:4f:fd:94:39:b1:0a: d8:69:a6:2f:ed:dc:3a:b5:53:a4:68:d6:91:6c:16:ed:91:69: ed:25:7e:8e:ca:ca:46:74:38:89:25:ad:b4:8f:2d:4d:84:57: d9:1e:00:b2:c7:9c:44:15:91:25:55:3e:23:5e:db:b9:87:38: 12:24:09:4a:82:75:86:fe:54:8c:21:bc:14:4c:6e:be:90:8a: 1d:7e:ea:05:1f:56:e6:9e:bf:a0:29:80:e3:5f:18:4b:6e:6d: cb:9a:37:af:09:8e:79:51:a5:7b:6d:60:36:80:ef:5a:1d:40: 76:ec:cb:e1:0c:0b:75:b9:45:52:fa:fb:06:c5:63:27:e4:95: 64:2d:3b:68:b0:6b:84:9e:7c:4f:c4:4f:22:04:25:d3:d9:45: 2b:42:dd:4c:5a:c2:36:07:24:d4:28:3a:df:3b:74:33:ad:20: 95:43:a5:a2:92:bf:98:db:26:f5:d7:6f:be:9e:5c:dc:70:e6: ba:69:18:14:84:fa:08:bb:dd:8c:6e:2f:cb:e5:46:b6:3d:e8: 8e:bd:50:d2:55:fb:59:84:1d:d9:26:36:8b:92:35:9a:56:b9: 4b:cc:2b:f5:70:30:e2:ad:89:e2:df:40:2d:fc:c5:c6:59:86: 5d:e6:89:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUxMTAyMjMyODAyWhcNMjUxMTA5MjMyODAyWjAYMRYwFAYD VQQDEw02OTA3ZTkwMi0yNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZELRaVNKZUac8DwYgPZZNUB+eLBJCwHEBs9tMREA25wrO8V0KGpxqdAIgfO lHz4HjBeRZeQmh+D6H3k5FwYAdLNExkTwqndIKUly0PleOFRsoE0FnsDqa24UUug LBkx83QcE7jmADSbdtG56Yfa3dDFVlJaWdmWaX6/tzqLB9CBqK8nRgTZI9fw2CrK pUedQp3C5IVPo6lyDCgxgwf784GdEWZYz6k/kbZz8S96xcxQrTQcXazYba2l7NU9 oDS/qCJ1xmzXZxOLa5Bh8IQW6o/FaqBlviL6pbitw6OQ4qx8hOI9VinPd9JdsQUF 76LhRj9bmdf7l85nZxfieShzKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBsMTz8 ho9+h5qMAkVRfp+svGt6MB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNcICxPMVjit2D3gpP/ZQ5sQrYaaYv7dw6tVOkaNaRbBbtkWntJX6O yspGdDiJJa20jy1NhFfZHgCyx5xEFZElVT4jXtu5hzgSJAlKgnWG/lSMIbwUTG6+ kIodfuoFH1bmnr+gKYDjXxhLbm3LmjevCY55UaV7bWA2gO9aHUB27MvhDAt1uUVS +vsGxWMn5JVkLTtosGuEnnxPxE8iBCXT2UUrQt1MWsI2ByTUKDrfO3QzrSCVQ6Wi kr+Y2yb112++nlzccOa6aRgUhPoIu92Mbi/L5Ua2PeiOvVDSVftZhB3ZJjaLkjWa VrlLzCv1cDDirYni30At/MXGWYZd5olJ -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:23 2025 by rpki-client