$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: 1xfrOBNAPd2EzMEI9XWhjNOTymt9qRwsUain9dklOYE= Subject key identifier: F5:2B:90:9A:FF:4A:DE:9C:4B:31:E8:30:44:B1:43:5C:9D:7D:5B:0B Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: 0125 Signing time: Sat 23 Aug 2025 04:51:53 +0000 Manifest this update: Sat 23 Aug 2025 04:51:53 +0000 Manifest next update: Sat 30 Aug 2025 04:51:53 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: gORQqAuVShkwa/L84TB/RzQx0Qv1LcUfr9viyY/04ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: Aug 23 04:51:53 2025 GMT Not After : Aug 30 04:51:53 2025 GMT Subject: CN=68a948e9-1228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:37:07:cc:0f:58:96:13:ab:6d:a8:33:46: 37:e1:7b:8e:46:0f:c1:98:f4:76:b3:34:a9:6e:96: 54:31:87:09:b5:47:25:b5:4f:ea:cd:45:c7:42:4a: 76:a0:50:62:0b:7e:9c:5e:46:cc:91:2e:78:0d:b6: 68:0e:82:4b:69:2a:4d:70:9b:5d:24:16:37:00:26: 95:2a:b3:ba:4e:17:a9:70:a2:32:01:d3:20:36:a0: d4:35:a4:28:d2:4f:d6:e7:8b:7c:b1:2f:e8:e4:e5: 13:84:b7:18:e3:5d:47:85:c6:9c:1e:cb:c1:85:d2: 5e:16:15:36:c7:f1:9c:99:55:5b:12:e7:0e:a8:74: fb:30:e1:be:04:4b:50:fd:80:db:7a:3c:93:da:42: f9:80:83:a8:cb:73:24:a5:38:80:b7:d2:d7:59:db: 69:da:8a:f0:41:aa:eb:ac:8f:9f:c2:aa:b8:27:d7: ab:9e:13:27:0e:d6:78:4f:89:40:46:02:de:3c:9a: c6:73:d5:48:c5:1c:c2:3b:dd:9e:91:7e:da:6b:0a: d3:c8:ff:e9:c0:2b:13:51:d1:f9:8d:a9:7d:5f:bc: 92:b4:48:b2:ce:a8:1a:ad:b0:ad:d9:0c:98:bd:11: c7:7b:f5:28:62:85:62:91:65:93:fe:ae:99:f3:7e: 61:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2B:90:9A:FF:4A:DE:9C:4B:31:E8:30:44:B1:43:5C:9D:7D:5B:0B X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a2:56:6b:8f:b2:c7:6a:79:f7:36:78:37:4c:ea:44:b4:2a: f7:2c:01:cf:a0:94:36:0a:90:9d:5a:c6:88:c4:4e:c2:fb:bb: c6:a4:9f:37:f0:d0:66:df:31:d3:70:8c:06:17:f3:b8:84:da: 45:1a:87:76:f8:35:58:16:98:3f:f8:a7:1d:cc:21:3b:b2:4a: 4d:51:c1:a5:1d:b6:17:2e:88:6a:8c:09:df:d4:b6:aa:67:3f: a6:65:b5:60:81:da:71:c0:c3:50:29:81:bb:1a:8f:73:75:32: 6a:03:2f:89:40:70:26:37:9c:62:72:05:64:9f:ee:93:6d:22: f5:12:5f:50:4c:33:fc:3f:cc:a6:2a:2f:38:68:52:29:18:4c: 89:62:83:fd:fa:21:2a:5e:64:ca:a4:26:78:a0:45:ae:2b:59: 9b:eb:dd:8a:2b:fd:61:c0:19:fd:8a:b7:b2:61:9e:43:1f:6f: 26:f6:32:e6:db:5b:35:8f:b3:6c:7e:4f:d6:7b:a4:e6:b1:1e: 1b:c7:d8:40:97:5e:0a:e0:42:20:2e:b8:fe:00:30:0c:7e:24: 9c:d3:ee:b4:9d:99:66:a9:93:c6:ab:5f:bf:27:1b:5a:ff:d8: 71:dc:f0:1a:70:e7:75:b3:f2:b0:c0:64:82:d8:d4:be:48:c3: c0:ee:f6:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUwODIzMDQ1MTUzWhcNMjUwODMwMDQ1MTUzWjAYMRYwFAYD VQQDEw02OGE5NDhlOS0xMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArko3B8wPWJYTq22oM0Y34XuORg/BmPR2szSpbpZUMYcJtUcltU/qzUXHQkp2 oFBiC36cXkbMkS54DbZoDoJLaSpNcJtdJBY3ACaVKrO6ThepcKIyAdMgNqDUNaQo 0k/W54t8sS/o5OUThLcY411HhcacHsvBhdJeFhU2x/GcmVVbEucOqHT7MOG+BEtQ /YDbejyT2kL5gIOoy3MkpTiAt9LXWdtp2orwQarrrI+fwqq4J9ernhMnDtZ4T4lA RgLePJrGc9VIxRzCO92ekX7aawrTyP/pwCsTUdH5jal9X7yStEiyzqgarbCt2QyY vRHHe/UoYoVikWWT/q6Z835h4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUrkJr/ St6cSzHoMESxQ1ydfVsLMB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8olZrj7LHann3Nng3TOpEtCr3LAHPoJQ2CpCdWsaIxE7C+7vGpJ83 8NBm3zHTcIwGF/O4hNpFGod2+DVYFpg/+KcdzCE7skpNUcGlHbYXLohqjAnf1Laq Zz+mZbVggdpxwMNQKYG7Go9zdTJqAy+JQHAmN5xicgVkn+6TbSL1El9QTDP8P8ym Ki84aFIpGEyJYoP9+iEqXmTKpCZ4oEWuK1mb692KK/1hwBn9ireyYZ5DH28m9jLm 21s1j7Nsfk/We6TmsR4bx9hAl14K4EIgLrj+ADAMfiSc0+60nZlmqZPGq1+/Jxta /9hx3PAacOd1s/KwwGSC2NS+SMPA7vZl -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:43 2025 by rpki-client