$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: QBPaYSywMsHmdKGDH7+FsFhcNuwoyW6+7mSAAqJmDjg= Subject key identifier: 9D:48:F9:AE:F8:D2:15:1A:54:9D:66:0B:5D:46:FE:4B:AB:C3:53:38 Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 01FC Signing time: Thu 03 Jul 2025 02:27:29 +0000 Manifest this update: Thu 03 Jul 2025 02:27:28 +0000 Manifest next update: Thu 10 Jul 2025 02:27:28 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: nZM1kfx+Gfvt0evET2NfIadNM4fFoBfFf1oILoWpFd4=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Jul 3 02:27:28 2025 GMT Not After : Jul 10 02:27:28 2025 GMT Subject: CN=6865ea90-fc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:07:49:4b:2a:6a:8f:3e:e2:c4:69:77:cd: a8:a9:c1:b9:22:ae:49:05:f9:10:d1:5c:ab:57:3f: bb:36:b6:56:8b:d9:0b:1e:ca:44:e7:a2:38:9f:47: 2f:f3:29:65:81:6b:07:f6:62:f1:fd:85:46:a0:cd: 3b:41:53:05:48:dd:6a:cc:03:c4:7e:23:e2:cf:d6: ed:df:8c:22:6f:36:5e:e3:7f:c2:ad:f4:a2:a0:55: bf:87:2d:81:a5:0f:a0:93:93:4c:01:a0:0e:a2:e9: ff:ba:06:3b:4b:fb:34:10:e8:b2:41:94:59:31:3d: de:51:26:87:5a:17:23:cd:79:e8:9e:4f:fa:a1:db: 1e:a3:ab:88:5b:c2:a0:1a:60:dd:86:72:bd:10:7a: 0c:10:89:50:49:ca:7e:67:43:35:b0:36:f9:0b:70: 64:7f:bc:1f:76:4d:8d:c6:e5:25:86:7e:dd:a5:25: ac:63:8c:25:af:ee:61:e2:02:b0:14:ed:54:40:59: 3b:54:19:f4:8a:3b:73:1c:f4:15:05:eb:9b:00:e2: 44:cd:59:06:a7:63:bb:d5:b4:0f:ba:84:38:a6:e0: b3:7c:ea:8e:b7:dc:ed:9f:34:66:f5:f3:3f:c9:43: fd:13:d1:c6:5d:41:df:4e:e9:3f:a7:d2:46:cd:11: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:48:F9:AE:F8:D2:15:1A:54:9D:66:0B:5D:46:FE:4B:AB:C3:53:38 X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:69:88:67:d6:7f:be:93:da:77:11:20:c8:23:53:53:d1:3c: e0:16:63:b5:7e:18:be:63:10:e5:95:8d:c2:14:d3:fd:b4:70: 48:b2:76:f8:f2:13:24:23:13:51:73:1b:9b:4e:a3:6b:9c:83: 0a:f0:df:51:75:cb:67:5a:de:63:9a:c0:5e:85:32:a4:9a:29: 4b:fd:bd:bd:1e:a0:df:bd:a8:02:29:72:82:fa:05:cc:31:10: 81:9c:d9:2e:15:fb:ad:fe:1f:99:05:30:b1:41:5a:89:2f:a5: a3:73:b2:68:98:4a:8c:73:f3:79:b5:11:9d:17:e7:d4:f2:62: 4e:1e:47:cb:b5:63:00:4f:5b:f5:40:e2:c2:90:d0:7a:d5:22: 1b:9d:0e:a2:59:45:95:cb:67:8d:08:24:a5:e0:5a:de:fa:2f: b0:3c:b2:70:5c:4d:2a:2c:a4:88:96:a9:cc:b9:04:ac:2c:47: a7:8d:c5:53:fe:5f:54:ae:4d:7f:63:f7:44:4e:40:24:44:32: 34:c6:6b:e1:5e:b6:7d:61:20:0a:14:52:61:fa:22:f5:52:7d: 2d:97:cc:47:d7:fa:90:38:eb:e8:28:ef:e3:c8:be:fa:9e:86: ee:91:d0:1b:b9:52:59:cb:37:cd:a9:4b:fb:84:d2:90:14:01: 6c:5d:54:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUwNzAzMDIyNzI4WhcNMjUwNzEwMDIyNzI4WjAYMRYwFAYD VQQDEw02ODY1ZWE5MC1mYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt0HSUsqao8+4sRpd82oqcG5Iq5JBfkQ0VyrVz+7NrZWi9kLHspE56I4n0cv 8yllgWsH9mLx/YVGoM07QVMFSN1qzAPEfiPiz9bt34wibzZe43/CrfSioFW/hy2B pQ+gk5NMAaAOoun/ugY7S/s0EOiyQZRZMT3eUSaHWhcjzXnonk/6odseo6uIW8Kg GmDdhnK9EHoMEIlQScp+Z0M1sDb5C3Bkf7wfdk2NxuUlhn7dpSWsY4wlr+5h4gKw FO1UQFk7VBn0ijtzHPQVBeubAOJEzVkGp2O71bQPuoQ4puCzfOqOt9ztnzRm9fM/ yUP9E9HGXUHfTuk/p9JGzRGhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1I+a74 0hUaVJ1mC11G/kurw1M4MB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZaYhn1n++k9p3ESDII1NT0TzgFmO1fhi+YxDllY3CFNP9tHBIsnb4 8hMkIxNRcxubTqNrnIMK8N9RdctnWt5jmsBehTKkmilL/b29HqDfvagCKXKC+gXM MRCBnNkuFfut/h+ZBTCxQVqJL6Wjc7JomEqMc/N5tRGdF+fU8mJOHkfLtWMAT1v1 QOLCkNB61SIbnQ6iWUWVy2eNCCSl4Fre+i+wPLJwXE0qLKSIlqnMuQSsLEenjcVT /l9Urk1/Y/dETkAkRDI0xmvhXrZ9YSAKFFJh+iL1Un0tl8xH1/qQOOvoKO/jyL76 nobukdAbuVJZyzfNqUv7hNKQFAFsXVSq -----END CERTIFICATE-----Generated at Fri Jul 4 02:20:34 2025 by rpki-client