$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: qq/Ymqnh+gNegjI9NeeoT84ryoIBjKQoUiBu0m1N6ko= Subject key identifier: 40:48:78:DC:56:90:81:79:4D:EE:B5:F4:46:29:F2:32:D7:CD:97:F3 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 051D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 0516 Signing time: Fri 22 Aug 2025 23:48:07 +0000 Manifest this update: Fri 22 Aug 2025 23:48:07 +0000 Manifest next update: Fri 29 Aug 2025 23:48:07 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: QYtK+GgQaHXIUB95aMiBAW5q4T+7j4Ny3aYTdLp6r7A=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Aug 22 23:48:07 2025 GMT Not After : Aug 29 23:48:07 2025 GMT Subject: CN=68a901b7-e1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:49:a8:ae:74:34:4c:0a:c7:f4:3e:25:61:32: 0d:25:25:22:3c:90:21:90:e5:0e:83:b5:89:06:d5: 15:09:17:f1:11:10:72:02:9d:a1:31:f2:bf:49:59: 44:63:bb:76:a3:00:a4:77:38:6d:bd:e6:b4:3c:ae: 7c:21:2b:a1:8c:5d:c3:4a:b2:f6:c7:14:1c:6d:39: 54:24:88:3d:32:b3:7e:c2:15:7b:71:5f:0a:24:d1: 57:40:14:a7:55:ec:35:60:a9:23:6a:d3:94:82:9a: dc:35:dc:c7:ce:d1:99:8a:b7:2b:35:64:05:fe:3f: 01:3a:04:f2:04:db:d2:17:e6:4b:61:fa:a2:8a:76: 8a:4c:67:0d:0a:d9:a8:0d:ec:5d:1b:bc:fb:37:76: 45:05:6f:2e:11:d0:70:86:fc:e1:e1:79:6e:2c:d0: c9:c5:43:6c:a7:f4:78:1d:bc:33:28:48:ef:89:13: d3:66:25:94:58:22:94:2c:62:fa:2b:7c:59:65:e7: 18:21:f3:4f:93:bd:7c:3b:a7:70:f4:93:52:52:ba: 32:db:cb:1a:02:31:7e:c0:e0:8a:c9:45:7f:3f:3b: 7e:54:6a:ff:e6:e9:e8:b2:d4:57:83:6e:ea:f9:90: f7:76:da:9a:a1:78:26:59:2f:16:bb:15:88:96:7c: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:78:DC:56:90:81:79:4D:EE:B5:F4:46:29:F2:32:D7:CD:97:F3 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c6:9e:cc:68:fb:8f:2c:29:40:97:06:a4:e8:c9:60:bd:77: bc:b4:03:11:8d:59:4d:7b:b5:32:c2:a7:9c:df:7c:a0:42:65: 4b:2b:29:b2:3c:76:38:2c:9d:4b:88:dc:4c:fe:41:12:00:af: 37:07:41:2d:73:7f:ae:92:ad:b4:e4:b9:bd:20:b5:80:cc:a6: 45:02:b5:7e:37:e7:b3:08:1b:0b:96:3a:e3:e9:e4:7e:46:6c: d5:32:a5:79:87:63:78:92:d1:0a:d3:75:bd:ef:b5:ba:e6:d8: 8c:80:20:17:c4:a1:bf:ff:22:4f:e4:b7:4b:af:5d:ab:48:68: 05:a0:e4:03:80:ad:12:19:8e:11:3e:94:ac:a8:88:ad:2e:10: 57:60:b8:16:6e:88:d3:bd:2c:e1:ce:14:8e:b0:07:1f:4b:b4: 30:a1:25:82:e8:d1:f8:5f:7e:82:98:73:f5:95:27:77:fc:b5: f6:8b:18:a7:83:7f:2f:aa:2b:2b:27:49:b6:4f:3e:6e:50:4c: f2:5c:14:36:df:02:85:bb:f5:27:2e:2f:c1:c4:a4:f9:bb:74: c3:f0:bd:26:68:9c:a2:79:50:15:bc:a3:83:09:46:1e:bc:be: 64:92:ff:b4:5e:51:bc:39:db:48:76:09:34:e9:3c:65:1f:b3: ef:2e:56:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUwODIyMjM0ODA3WhcNMjUwODI5MjM0ODA3WjAYMRYwFAYD VQQDEw02OGE5MDFiNy1lMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kmornQ0TArH9D4lYTINJSUiPJAhkOUOg7WJBtUVCRfxERByAp2hMfK/SVlE Y7t2owCkdzhtvea0PK58ISuhjF3DSrL2xxQcbTlUJIg9MrN+whV7cV8KJNFXQBSn Vew1YKkjatOUgprcNdzHztGZircrNWQF/j8BOgTyBNvSF+ZLYfqiinaKTGcNCtmo DexdG7z7N3ZFBW8uEdBwhvzh4XluLNDJxUNsp/R4HbwzKEjviRPTZiWUWCKULGL6 K3xZZecYIfNPk718O6dw9JNSUroy28saAjF+wOCKyUV/Pzt+VGr/5unostRXg27q +ZD3dtqaoXgmWS8WuxWIlny0YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBIeNxW kIF5Te619EYp8jLXzZfzMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSxp7MaPuPLClAlwak6MlgvXe8tAMRjVlNe7Uywqec33ygQmVLKymy PHY4LJ1LiNxM/kESAK83B0Etc3+ukq205Lm9ILWAzKZFArV+N+ezCBsLljrj6eR+ RmzVMqV5h2N4ktEK03W977W65tiMgCAXxKG//yJP5LdLr12rSGgFoOQDgK0SGY4R PpSsqIitLhBXYLgWbojTvSzhzhSOsAcfS7QwoSWC6NH4X36CmHP1lSd3/LX2ixin g38vqisrJ0m2Tz5uUEzyXBQ23wKFu/UnLi/BxKT5u3TD8L0maJyieVAVvKODCUYe vL5kkv+0XlG8OdtIdgk06TxlH7PvLlYB -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:35 2025 by rpki-client