$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: MBIrPS5MCJfPdaK/rzvt+53aUAJgmzLRog/eDKEZ0zc= Subject key identifier: 5D:FB:EF:41:41:43:11:23:BD:9C:36:C0:8D:A0:2A:F4:26:8E:F5:E6 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 04FB Signing time: Tue 01 Jul 2025 00:07:09 +0000 Manifest this update: Tue 01 Jul 2025 00:07:08 +0000 Manifest next update: Tue 08 Jul 2025 00:07:08 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: G4Rh8EoSKGEbhTQP6kpBtlOVBZUtFsudO/43tbAAQ4k=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Jul 1 00:07:08 2025 GMT Not After : Jul 8 00:07:08 2025 GMT Subject: CN=686326ac-a6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:ce:f6:1e:05:03:92:87:19:cf:d0:b6:fe: 7e:43:da:72:c3:1c:02:5c:18:d4:11:3d:b6:6f:1b: 83:a2:74:ca:1d:1b:41:45:50:ba:cf:9f:ac:54:13: 18:30:c7:75:ba:ca:7f:6f:22:7e:f5:1d:d8:ba:ec: d5:0a:61:03:f1:1b:31:20:38:ab:9d:22:5c:82:4d: f9:52:8a:29:4b:dd:dd:30:a5:59:3f:af:41:53:2e: c7:7f:3f:5a:75:f1:c6:ce:cc:f5:0a:c5:b5:ea:63: bd:4d:a9:cd:0a:33:39:14:60:e8:33:e0:d8:dd:8a: 84:2f:de:38:c4:9b:16:bf:6e:3a:aa:a2:40:c2:79: b4:7b:d1:19:e8:0b:43:18:ed:03:99:a8:ab:0b:3d: 8b:3a:a4:0d:4d:dc:82:f9:3b:35:15:9c:94:44:79: cd:12:55:4f:a5:00:ab:86:6c:c4:4a:34:de:72:3d: cc:bc:b5:96:53:92:0a:a7:c1:7a:9c:71:ff:de:dc: 85:cc:d7:1e:ed:65:c9:c4:61:81:95:8e:4d:7f:ad: fa:f2:e3:2a:d3:02:2e:a0:0c:7c:bc:ac:f7:c8:c9: 66:b1:fa:2e:51:a4:67:a2:4a:a4:ea:33:86:5c:f7: 51:fe:59:9d:bf:ba:ab:32:32:e1:22:ba:e5:5a:e4: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:EF:41:41:43:11:23:BD:9C:36:C0:8D:A0:2A:F4:26:8E:F5:E6 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4a:82:9a:f2:ab:3d:e6:d4:72:7c:96:5a:04:54:dc:08:bb: 81:20:df:6d:f7:86:1a:ad:f8:f5:4d:79:65:3f:e1:3a:0a:83: 73:0a:77:23:0e:2e:0e:88:e5:4f:05:06:a9:40:97:69:b6:6e: 87:65:9a:02:49:03:f4:72:04:db:b0:94:61:64:f0:16:2e:bc: 48:6e:bd:cc:33:40:d7:2e:48:66:0a:92:7a:8f:7e:b5:f4:12: 49:fb:c0:a2:b8:39:35:0c:30:81:a3:bf:3e:08:59:a8:9e:bb: 1f:7d:e8:fe:f3:1f:5a:ad:4e:17:0a:c4:cd:ea:56:7e:74:f6: 1d:5c:78:0e:ca:b7:ce:77:32:39:41:e8:15:da:5f:9d:47:24: 9b:16:84:15:ae:06:ac:31:b7:ac:7a:58:bf:c3:ab:15:06:6d: 1c:df:17:e4:c1:51:42:14:75:f6:5d:1f:8e:7b:e8:fd:ea:1c: e3:6d:bb:e4:0c:83:73:15:52:ab:bf:a0:8a:0f:79:11:08:6f: 1e:b6:02:26:85:18:d4:69:32:a6:68:30:9f:8c:51:cb:a9:e7: 31:d1:e5:59:27:8a:9e:e5:ad:d6:f2:69:e4:33:ca:6e:41:dc: 9c:d4:7a:af:8c:fd:ad:97:59:21:ca:c5:ce:5f:ce:f2:60:7a: 89:a0:73:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUwNzAxMDAwNzA4WhcNMjUwNzA4MDAwNzA4WjAYMRYwFAYD VQQDEw02ODYzMjZhYy1hNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArerO9h4FA5KHGc/Qtv5+Q9pywxwCXBjUET22bxuDonTKHRtBRVC6z5+sVBMY MMd1usp/byJ+9R3YuuzVCmED8RsxIDirnSJcgk35UoopS93dMKVZP69BUy7Hfz9a dfHGzsz1CsW16mO9TanNCjM5FGDoM+DY3YqEL944xJsWv246qqJAwnm0e9EZ6AtD GO0DmairCz2LOqQNTdyC+Ts1FZyURHnNElVPpQCrhmzESjTecj3MvLWWU5IKp8F6 nHH/3tyFzNce7WXJxGGBlY5Nf6368uMq0wIuoAx8vKz3yMlmsfouUaRnokqk6jOG XPdR/lmdv7qrMjLhIrrlWuQRbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3770FB QxEjvZw2wI2gKvQmjvXmMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdSoKa8qs95tRyfJZaBFTcCLuBIN9t94Yarfj1TXllP+E6CoNzCncj Di4OiOVPBQapQJdptm6HZZoCSQP0cgTbsJRhZPAWLrxIbr3MM0DXLkhmCpJ6j361 9BJJ+8CiuDk1DDCBo78+CFmonrsffej+8x9arU4XCsTN6lZ+dPYdXHgOyrfOdzI5 QegV2l+dRySbFoQVrgasMbeseli/w6sVBm0c3xfkwVFCFHX2XR+Oe+j96hzjbbvk DINzFVKrv6CKD3kRCG8etgImhRjUaTKmaDCfjFHLqecx0eVZJ4qe5a3W8mnkM8pu Qdyc1HqvjP2tl1khysXOX87yYHqJoHP/ -----END CERTIFICATE-----Generated at Thu Jul 3 01:07:28 2025 by rpki-client