$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: ek2UrUg5n5/O/IoD1VK5Ppk5/qLLPiQn/YCe3tc15S0= Subject key identifier: 08:7F:7F:25:9B:5B:36:34:E5:5E:04:B4:83:46:64:43:31:E7:D1:E1 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 82 Signing time: Sun 19 Oct 2025 09:57:29 +0000 Manifest this update: Sun 19 Oct 2025 09:57:29 +0000 Manifest next update: Sun 26 Oct 2025 09:57:29 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: LolyaULS5Yt1gHvMPpJrflJVG146hRwXeRBLLOqZl6k=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Oct 19 09:57:29 2025 GMT Not After : Oct 26 09:57:29 2025 GMT Subject: CN=68f4b609-cb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:c9:bd:5c:09:23:aa:a9:1c:0a:16:7f:f5: ca:49:3c:d4:52:d2:9c:73:1b:24:5c:7b:38:ec:a4: ed:b8:db:a0:1b:df:fe:42:6c:39:a2:93:15:59:7a: 6d:58:96:81:db:cb:c8:32:27:60:2b:eb:fd:1d:a7: 44:13:bf:3b:24:03:c6:0b:48:96:7a:98:2d:c8:4f: 24:cb:05:3c:a3:78:56:9f:16:68:ef:b5:27:ef:65: 76:a4:f3:a8:3e:42:a4:63:65:56:ad:54:34:04:1e: af:4b:ad:74:c5:fd:d2:55:9b:3d:1f:dd:11:b3:2c: fd:87:1f:57:5a:f9:03:78:d3:ab:09:35:1e:d5:98: 22:39:9c:ce:84:66:b6:94:b7:4d:27:90:46:b4:85: 7c:96:83:62:dd:eb:5c:d4:d4:59:3b:9d:8c:69:d2: 2d:4e:d9:e1:c8:f4:93:d4:f2:3d:27:62:39:99:d5: 6b:c1:74:96:34:fb:fa:05:32:5e:4a:ea:61:51:0c: cc:e6:61:cf:3a:7a:c0:a8:3f:0d:9b:27:df:ce:f7: a7:c7:cb:d8:3a:95:08:0d:8e:04:a6:79:1c:a9:79: d2:50:dd:a9:96:6d:15:fd:63:c0:45:10:f9:45:fe: 52:91:27:85:a8:b6:e2:7c:ee:df:32:58:f0:a6:38: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7F:7F:25:9B:5B:36:34:E5:5E:04:B4:83:46:64:43:31:E7:D1:E1 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:94:df:d2:85:c4:83:2b:35:e2:b8:13:b8:5b:99:0a:84:b4: 96:ce:e8:83:cb:39:ce:3e:50:b5:00:5b:1f:ff:f0:32:fa:ae: 93:14:61:68:0e:dc:03:41:e4:7a:96:27:03:3f:1c:7d:86:1f: 94:cf:b0:fe:8e:99:87:91:eb:3d:8f:3f:e8:c0:fa:4e:09:1f: 53:4b:31:f5:55:11:f2:a9:ea:e0:7c:49:ce:62:33:8d:f2:05: 99:a0:7a:2a:57:5b:a2:12:5c:8d:fd:7b:c7:e2:d5:e8:57:ae: 49:7e:a6:6e:80:e1:35:84:27:32:85:73:72:de:98:39:06:aa: d3:ea:97:0c:fc:7a:a5:a3:6f:f9:60:9f:75:22:87:de:49:88: 61:e6:14:a2:04:93:7c:69:bd:b3:f5:da:c6:88:8e:e4:60:7a: d8:3d:eb:ad:c5:ba:cd:d1:fe:73:d1:19:21:9b:2b:ec:88:8b: 26:d9:1a:3b:e7:67:15:3f:db:d6:15:1a:b0:fc:01:f6:db:f2: 84:eb:75:d0:95:6d:2f:6b:22:a8:c8:8d:28:4d:42:62:39:e1: 6c:b4:bc:41:50:f8:9c:96:7a:30:a1:23:80:a2:36:37:90:7d: 4e:59:18:e8:33:07:e3:4a:f1:68:37:d1:c6:b2:87:df:2e:0e: 41:a2:83:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRENTgxMTAvBgNVBAUTKDE4MTAxQ0I4NDU4NzAxMjM1QzNGMTMzMzlBRTVBOURC M0M3NUIyNDAwHhcNMjUxMDE5MDk1NzI5WhcNMjUxMDI2MDk1NzI5WjAYMRYwFAYD VQQDEw02OGY0YjYwOS1jYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eHJvVwJI6qpHAoWf/XKSTzUUtKccxskXHs47KTtuNugG9/+Qmw5opMVWXpt WJaB28vIMidgK+v9HadEE787JAPGC0iWepgtyE8kywU8o3hWnxZo77Un72V2pPOo PkKkY2VWrVQ0BB6vS610xf3SVZs9H90Rsyz9hx9XWvkDeNOrCTUe1ZgiOZzOhGa2 lLdNJ5BGtIV8loNi3etc1NRZO52MadItTtnhyPST1PI9J2I5mdVrwXSWNPv6BTJe SuphUQzM5mHPOnrAqD8Nmyffzvenx8vYOpUIDY4EpnkcqXnSUN2plm0V/WPARRD5 Rf5SkSeFqLbifO7fMljwpjiV4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh/fyWb WzY05V4EtINGZEMx59HhMB8GA1UdIwQYMBaAFBgQHLhFhwEjXD8TM5rlqds8dbJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEQ1OC80NEM3M0ZENkU4 MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFTTmNQeE16bXVXcDJ6eDFz a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEQ1OC80NEM3M0ZENkU4MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFT TmNQeE16bXVXcDJ6eDFza0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRlN/ShcSDKzXiuBO4W5kKhLSWzuiDyznOPlC1AFsf//Ay+q6TFGFo DtwDQeR6licDPxx9hh+Uz7D+jpmHkes9jz/owPpOCR9TSzH1VRHyqergfEnOYjON 8gWZoHoqV1uiElyN/XvH4tXoV65JfqZugOE1hCcyhXNy3pg5BqrT6pcM/Hqlo2/5 YJ91IofeSYhh5hSiBJN8ab2z9drGiI7kYHrYPeutxbrN0f5z0RkhmyvsiIsm2Ro7 52cVP9vWFRqw/AH22/KE63XQlW0vayKoyI0oTUJiOeFstLxBUPiclnowoSOAojY3 kH1OWRjoMwfjSvFoN9HGsoffLg5BooPe -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:59 2025 by rpki-client