$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: 1M3xc1zMYXafvk2vS5V92lstC59Y4P2uIRUCmLckoCU= Subject key identifier: 20:0F:D4:AF:ED:AC:F7:F5:F1:D3:7E:4D:31:EF:D4:C4:CE:6D:19:31 Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 0235 Signing time: Sun 19 Oct 2025 04:05:42 +0000 Manifest this update: Sun 19 Oct 2025 04:05:41 +0000 Manifest next update: Sun 26 Oct 2025 04:05:41 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: IUVhxs8JJYXD7yR+yM08AnzWBivTMV9co/qZH/fUTA0=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: /HJseqaXYqKNU4JSpgFfB6yF7Shuw95sDH+Hz1X2J8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Oct 19 04:05:41 2025 GMT Not After : Oct 26 04:05:41 2025 GMT Subject: CN=68f46395-2d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:86:c7:5d:d5:66:dc:b1:d6:25:a3:52:33: 7c:50:a1:dc:0e:80:f0:db:cf:a0:24:af:ed:fa:fd: 5c:e0:2b:ef:fd:7a:bc:35:9e:55:e9:42:be:98:2a: a4:76:5a:2b:ee:a2:66:38:7f:50:a7:0f:4d:f8:d1: 1a:4e:5d:14:3f:d8:1d:d3:ab:db:de:cf:33:c4:8b: 01:9b:04:6e:3a:7a:10:34:96:61:a0:8d:20:90:09: 92:f4:ec:e7:3b:61:e8:67:91:1e:61:89:c4:cf:a3: 57:fb:e6:cf:26:2b:6c:c3:c3:fc:6e:79:4d:79:f0: 09:d4:bd:6b:31:43:25:3f:b2:46:dd:c1:e7:48:a0: d0:8e:00:78:39:9b:66:a6:d5:74:8b:40:7c:0c:c2: 99:6a:34:93:b8:78:ce:c1:10:ec:00:29:18:9f:6b: 22:3c:4a:02:86:a3:28:04:cd:f8:f4:fe:4c:48:81: 79:49:fc:80:fd:c2:de:99:92:e0:19:39:e9:d4:f6: 11:31:0e:7e:65:c5:f3:ff:b6:1e:29:87:55:c6:1c: db:c7:08:5f:98:51:6d:01:f7:ca:e6:c6:73:4e:27: 2a:c1:45:f0:d6:34:cd:df:ce:b1:cd:7a:ac:1c:ad: d9:b1:5f:8c:5e:63:66:33:19:16:45:6c:63:93:a4: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0F:D4:AF:ED:AC:F7:F5:F1:D3:7E:4D:31:EF:D4:C4:CE:6D:19:31 X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fa:72:e7:b5:e9:2f:14:b2:8a:a9:27:26:56:7f:a5:e3:11: 8c:86:e1:2d:1b:ab:a8:2c:e0:f8:b1:86:bb:ab:c4:cd:71:a9: 65:c5:bb:33:6a:ed:2e:1b:36:ef:e5:43:86:17:d3:b0:15:a9: 23:f8:6a:8b:61:39:6b:1f:94:07:17:b3:fe:6a:6f:bd:c7:f3: d4:81:0b:29:6c:96:c6:40:61:58:48:70:cb:f7:ec:94:c6:20: d4:f8:82:b6:dd:23:00:56:39:cc:08:3f:a9:03:9a:63:5a:2d: f1:ec:92:7e:12:e9:af:57:8d:f3:d7:e5:ef:7d:4e:8d:c3:ef: c5:c8:fa:15:59:96:aa:31:02:3e:fe:da:2c:38:6a:f6:1a:65: 55:fd:20:06:2f:82:f6:5e:82:97:61:5a:4d:e2:f0:a2:53:40: a1:fb:23:85:5d:85:59:2b:d9:c8:19:05:e6:83:5f:0a:70:33: 3b:ca:5a:b6:87:cf:1a:9c:f8:aa:64:47:f8:ee:16:29:58:d3: 47:48:17:97:bc:a0:92:a2:3e:5e:af:17:b4:c6:a2:3a:d8:ac: f9:2e:4e:b0:e8:91:42:85:2b:00:2c:28:29:19:69:46:f4:b1: f8:78:37:40:d2:c8:b7:b3:46:25:0f:a3:41:fe:80:08:02:20: cc:c6:43:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUxMDE5MDQwNTQxWhcNMjUxMDI2MDQwNTQxWjAYMRYwFAYD VQQDEw02OGY0NjM5NS0yZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm2Gx13VZtyx1iWjUjN8UKHcDoDw28+gJK/t+v1c4Cvv/Xq8NZ5V6UK+mCqk dlor7qJmOH9Qpw9N+NEaTl0UP9gd06vb3s8zxIsBmwRuOnoQNJZhoI0gkAmS9Ozn O2HoZ5EeYYnEz6NX++bPJitsw8P8bnlNefAJ1L1rMUMlP7JG3cHnSKDQjgB4OZtm ptV0i0B8DMKZajSTuHjOwRDsACkYn2siPEoChqMoBM349P5MSIF5SfyA/cLemZLg GTnp1PYRMQ5+ZcXz/7YeKYdVxhzbxwhfmFFtAffK5sZzTicqwUXw1jTN386xzXqs HK3ZsV+MXmNmMxkWRWxjk6TiTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAP1K/t rPf18dN+TTHv1MTObRkxMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ+nLntekvFLKKqScmVn+l4xGMhuEtG6uoLOD4sYa7q8TNcallxbsz au0uGzbv5UOGF9OwFakj+GqLYTlrH5QHF7P+am+9x/PUgQspbJbGQGFYSHDL9+yU xiDU+IK23SMAVjnMCD+pA5pjWi3x7JJ+EumvV43z1+XvfU6Nw+/FyPoVWZaqMQI+ /tosOGr2GmVV/SAGL4L2XoKXYVpN4vCiU0Ch+yOFXYVZK9nIGQXmg18KcDM7ylq2 h88anPiqZEf47hYpWNNHSBeXvKCSoj5erxe0xqI62Kz5Lk6w6JFChSsALCgpGWlG 9LH4eDdA0si3s0YlD6NB/oAIAiDMxkN6 -----END CERTIFICATE-----Generated at Mon Oct 20 18:51:11 2025 by rpki-client