$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft File: gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json) Hash identifier: g3OZavbW+K/q9Qh9PQRLPHJ5d6k+wIY+hkYmSR4Upag= Subject key identifier: BA:FD:CC:4C:B2:61:57:61:F1:9E:41:5B:ED:69:FE:2D:38:34:40:6B Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 0559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft Manifest number: 0553 Signing time: Fri 22 Aug 2025 23:35:29 +0000 Manifest this update: Fri 22 Aug 2025 23:35:29 +0000 Manifest next update: Fri 29 Aug 2025 23:35:29 +0000 Files and hashes: 1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: +iuYzKSYL+jr7rMka6Q0yDf+keCamTouflqOnnvrfJU=) 2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DeWvXrtTOlNASLEtVwCRq5xJVs2BWXsb8zrs6Aq/kZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1369 (0x559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Aug 22 23:35:29 2025 GMT Not After : Aug 29 23:35:29 2025 GMT Subject: CN=68a8fec1-a5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:db:6d:24:0b:42:c2:fb:d9:08:ef:af:c3: b3:7d:f7:ad:ab:db:c1:2e:b8:7a:b5:c0:27:7b:7a: ff:e9:2d:1d:09:cc:db:32:80:78:b0:42:97:c5:2d: 30:be:17:20:d2:e1:0c:de:74:c4:84:90:c6:ce:40: d0:da:0f:9b:18:ca:48:f1:6c:e3:2d:61:7b:41:b2: 30:1d:75:84:a9:d6:41:63:e7:84:ba:7f:c8:46:f8: 27:16:20:1a:6e:60:d2:81:3e:a5:ab:ed:c4:d8:93: c8:a9:f3:4f:ef:51:54:b0:97:68:cc:15:cc:93:9a: ea:1c:dd:8b:d7:32:a5:a9:8f:b7:5c:85:32:06:a6: 15:39:c6:ea:2d:1b:3f:de:9a:aa:96:c5:80:4e:1d: e1:9f:b4:33:b2:de:7f:45:17:52:76:a5:84:d3:a3: 84:bd:f5:f0:bb:85:40:3f:1c:72:45:66:f7:5d:63: 4d:aa:2d:82:99:8c:e1:89:9d:b5:bd:25:d8:d8:62: dc:8b:b6:16:a9:dd:24:dc:77:dc:60:03:5a:bc:65: e5:2b:ff:34:6c:3b:5a:d9:6b:61:ac:8e:72:d8:65: dd:22:a5:22:5a:a7:d4:0e:f0:f6:b7:20:00:88:6c: 8e:82:df:e2:db:eb:e3:d9:d0:c6:d9:e8:e1:ec:ce: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FD:CC:4C:B2:61:57:61:F1:9E:41:5B:ED:69:FE:2D:38:34:40:6B X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1c:6b:1a:bc:97:53:04:24:4c:42:d2:93:08:28:08:f1:f0: 2c:3b:b2:74:9a:96:95:5a:f0:b5:ff:8b:54:62:8f:72:d1:03: 6a:75:89:e4:d6:58:5b:a0:85:a7:2f:41:42:f7:1b:24:ca:ec: 25:8a:1f:c8:5b:ff:40:ba:26:2c:a1:ca:1f:21:12:1c:18:69: be:ef:91:ef:6e:6d:57:40:86:50:f2:fb:f0:38:f3:9c:a8:f5: 0d:7b:82:1c:73:2f:69:2d:34:b0:cf:89:fc:bf:5d:69:f3:87: 42:3c:33:97:09:02:25:b2:a3:bc:bf:e7:39:5f:75:34:87:d8: d4:1e:76:7d:a7:a8:38:41:aa:89:a6:e6:5a:36:f7:29:80:fe: cb:b5:5b:66:9d:86:2d:8d:84:32:9e:2d:81:35:81:f2:b4:fc: 50:b1:d4:eb:86:a4:e7:cc:10:9d:53:fd:a4:d5:72:6a:f1:49: b3:0d:ce:04:41:1b:37:49:db:cf:ec:fd:b8:c9:ee:a7:4c:9a: 43:cd:43:46:86:e4:06:0f:6d:4d:d0:50:e3:45:fb:e3:2c:3c: 03:1f:d3:d1:84:f5:01:12:8b:f6:51:e7:8b:05:7d:f9:0c:8d: 92:ea:f6:df:a5:aa:6e:95:8f:23:57:08:d6:f4:f0:2b:2e:88: 36:df:c2:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUwODIyMjMzNTI5WhcNMjUwODI5MjMzNTI5WjAYMRYwFAYD VQQDEw02OGE4ZmVjMS1hNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmrbbSQLQsL72Qjvr8Ozffetq9vBLrh6tcAne3r/6S0dCczbMoB4sEKXxS0w vhcg0uEM3nTEhJDGzkDQ2g+bGMpI8WzjLWF7QbIwHXWEqdZBY+eEun/IRvgnFiAa bmDSgT6lq+3E2JPIqfNP71FUsJdozBXMk5rqHN2L1zKlqY+3XIUyBqYVOcbqLRs/ 3pqqlsWATh3hn7Qzst5/RRdSdqWE06OEvfXwu4VAPxxyRWb3XWNNqi2CmYzhiZ21 vSXY2GLci7YWqd0k3HfcYANavGXlK/80bDta2WthrI5y2GXdIqUiWqfUDvD2tyAA iGyOgt/i2+vj2dDG2ejh7M5e2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr9zEyy YVdh8Z5BW+1p/i04NEBrMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNDNy83QjJGNTM4QUZFNjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNC SzM1OEp6RGRCZ2ZoRGJnUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGHGsavJdTBCRMQtKTCCgI8fAsO7J0mpaVWvC1/4tUYo9y0QNqdYnk 1lhboIWnL0FC9xskyuwlih/IW/9AuiYsocofIRIcGGm+75Hvbm1XQIZQ8vvwOPOc qPUNe4Iccy9pLTSwz4n8v11p84dCPDOXCQIlsqO8v+c5X3U0h9jUHnZ9p6g4QaqJ puZaNvcpgP7LtVtmnYYtjYQyni2BNYHytPxQsdTrhqTnzBCdU/2k1XJq8UmzDc4E QRs3SdvP7P24ye6nTJpDzUNGhuQGD21N0FDjRfvjLDwDH9PRhPUBEov2UeeLBX35 DI2S6vbfpapulY8jVwjW9PArLog238Kf -----END CERTIFICATE-----Generated at Sat Aug 23 15:52:32 2025 by rpki-client