$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: yJcKD9p/90T8l935EXRtMR0VKuAXStuwccTcjKUac9U= Subject key identifier: 9A:A3:E0:79:70:3C:60:F2:0E:2E:E9:58:5C:54:E9:B1:53:F6:50:7E Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 0516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 050F Signing time: Sat 09 Aug 2025 00:05:30 +0000 Manifest this update: Sat 09 Aug 2025 00:05:29 +0000 Manifest next update: Sat 16 Aug 2025 00:05:29 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: TBrfG+o0GrAGLvPHuX1xgFkwmkh25SXnio5Vjsr+pqk=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Aug 9 00:05:29 2025 GMT Not After : Aug 16 00:05:29 2025 GMT Subject: CN=689690c9-c436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:c8:66:42:82:fb:f3:08:48:52:ee:a4:77: 70:3d:88:04:23:14:14:b3:22:ba:ef:ec:d5:24:66: b1:3b:a7:a9:07:b6:22:d5:ff:b8:4a:68:24:04:46: d5:ee:3d:77:4a:57:88:a5:4d:64:7b:61:e5:3e:6c: fb:69:e7:09:93:82:0e:9a:79:24:a1:88:0a:ac:f1: 59:5c:96:9a:7b:e9:64:09:ab:47:f4:61:9c:7c:7d: 72:e9:3f:12:26:a8:cd:bf:36:59:4b:eb:93:eb:4d: 16:57:31:09:23:14:e9:ca:75:26:95:66:a3:98:90: d5:08:84:76:ed:06:7c:a0:71:93:9d:45:e3:00:52: 64:49:c9:ea:b1:6d:8c:9c:f2:4e:81:91:3e:35:bc: 24:4c:af:a6:57:d9:f8:d8:d5:a2:10:0d:c1:95:10: 95:83:0c:3f:ae:ac:88:25:26:f7:f9:56:87:19:0f: e5:25:22:f0:b1:74:a6:cd:1b:f5:3e:b5:88:3e:0b: c1:d5:50:bd:72:13:a9:68:64:ec:80:72:9b:8d:a0: 70:45:8f:ae:03:2f:b8:e6:78:18:39:a0:e7:df:ca: 43:2a:bc:9f:ea:07:27:ef:eb:94:c8:74:42:55:cb: a3:0d:62:d1:a1:64:fc:cf:c3:14:94:45:a0:0c:51: 2e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:E0:79:70:3C:60:F2:0E:2E:E9:58:5C:54:E9:B1:53:F6:50:7E X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:56:34:83:fd:20:79:2e:a2:c6:cf:57:1e:32:c5:43:f5:51: 24:15:99:35:24:98:9d:08:89:90:cc:a8:e5:5a:fc:70:b3:0d: 42:3e:ea:96:3b:74:28:d7:79:bb:81:20:ff:ff:85:38:f3:4d: 5b:12:6e:85:1e:ff:f6:f0:51:19:b3:ac:13:d0:20:95:1e:a5: bb:97:d2:6a:c0:5e:b4:81:4f:98:fb:3f:9e:1c:67:20:37:b6: bf:39:07:0d:7a:bb:09:84:eb:10:02:57:ea:49:ab:d6:42:60: 2a:ae:a4:45:d8:4d:7c:a8:c5:9c:76:7e:b1:b8:d8:76:69:83: d3:fb:cc:5f:ef:9e:5b:61:db:54:71:ce:7b:92:d1:86:9f:dd: f6:d3:1a:b3:fd:1e:7e:e7:64:86:ad:0e:0b:aa:3b:95:96:67: db:65:54:5f:1a:bd:4c:e7:88:a2:2d:49:10:08:e9:c0:29:05: df:6f:4e:a9:3e:14:ba:b0:c5:77:ba:ec:6a:4e:fe:86:c5:dc: 19:e6:62:06:16:a5:f2:35:b7:be:63:f4:c1:2a:8b:3b:ba:8e: bc:d7:af:c4:55:79:b1:93:2d:ae:bd:b3:d9:4b:58:69:81:3f: 73:3f:16:96:3c:9d:5d:67:01:38:f2:6b:24:0f:7f:a5:e1:11: 54:f6:ce:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUwODA5MDAwNTI5WhcNMjUwODE2MDAwNTI5WjAYMRYwFAYD VQQDEw02ODk2OTBjOS1jNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy97IZkKC+/MISFLupHdwPYgEIxQUsyK67+zVJGaxO6epB7Yi1f+4SmgkBEbV 7j13SleIpU1ke2HlPmz7aecJk4IOmnkkoYgKrPFZXJaae+lkCatH9GGcfH1y6T8S JqjNvzZZS+uT600WVzEJIxTpynUmlWajmJDVCIR27QZ8oHGTnUXjAFJkScnqsW2M nPJOgZE+NbwkTK+mV9n42NWiEA3BlRCVgww/rqyIJSb3+VaHGQ/lJSLwsXSmzRv1 PrWIPgvB1VC9chOpaGTsgHKbjaBwRY+uAy+45ngYOaDn38pDKryf6gcn7+uUyHRC VcujDWLRoWT8z8MUlEWgDFEumQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqj4Hlw PGDyDi7pWFxU6bFT9lB+MB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMVjSD/SB5LqLGz1ceMsVD9VEkFZk1JJidCImQzKjlWvxwsw1CPuqW O3Qo13m7gSD//4U4801bEm6FHv/28FEZs6wT0CCVHqW7l9JqwF60gU+Y+z+eHGcg N7a/OQcNersJhOsQAlfqSavWQmAqrqRF2E18qMWcdn6xuNh2aYPT+8xf755bYdtU cc57ktGGn9320xqz/R5+52SGrQ4LqjuVlmfbZVRfGr1M54iiLUkQCOnAKQXfb06p PhS6sMV3uuxqTv6GxdwZ5mIGFqXyNbe+Y/TBKos7uo6816/EVXmxky2uvbPZS1hp gT9zPxaWPJ1dZwE48mskD3+l4RFU9s5u -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:35 2025 by rpki-client