$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: 8HIXuRV73KC14B6m2vKMENuVYuplmtSobgiynduE4ic= Subject key identifier: 18:96:1C:6A:21:0C:1C:C2:9E:2D:AB:5F:9E:30:9E:8A:7A:0B:3F:84 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 0533 Signing time: Sun 19 Oct 2025 01:15:18 +0000 Manifest this update: Sun 19 Oct 2025 01:15:17 +0000 Manifest next update: Sun 26 Oct 2025 01:15:17 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: zc9Qnu/6P659BTdu2+Czwd6ERZVFzRuRtkhoMh6ieoU=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Oct 19 01:15:17 2025 GMT Not After : Oct 26 01:15:17 2025 GMT Subject: CN=68f43ba6-ce4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:1a:6e:dc:a8:c2:4c:fd:23:e0:04:c9:f4: de:fa:58:92:9c:69:bc:bd:c3:4f:48:51:0c:d1:ef: fe:13:68:a3:22:f7:d5:cd:49:66:77:06:ba:50:6d: 87:c0:3d:7a:95:f0:7e:1a:9c:3d:a9:f2:c3:74:b6: 16:e2:a4:cb:0e:36:8e:5c:e8:68:80:c7:b9:bd:60: f4:de:31:5f:f7:b1:ca:ad:c8:88:62:98:17:5f:04: 3a:a3:c4:cc:83:90:1c:0c:32:12:49:96:f7:b5:df: 84:09:11:18:2a:cd:13:ca:38:dd:7e:6d:5e:94:99: fa:56:4a:4f:9a:70:75:38:72:7b:75:d0:40:97:9a: bc:e7:12:8b:f8:71:aa:ad:38:5e:98:af:c0:6f:1f: 88:4f:b9:31:1a:98:14:0a:56:8a:ff:a3:93:03:2b: 40:de:e2:5c:ad:c8:18:3f:0f:96:56:69:ab:b3:ed: b9:9a:24:53:a9:9e:a4:f4:57:a3:72:64:5a:ff:41: ef:33:7d:90:e6:e7:99:71:56:ba:9e:d7:a5:5b:dc: 21:40:ad:a1:00:54:27:e4:05:16:06:ce:19:24:55: b9:ea:13:0c:9f:b8:d9:76:48:5b:7d:57:80:b3:37: 3a:0c:b7:8a:a7:86:0a:e0:d3:9f:b5:c1:8b:40:bf: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:96:1C:6A:21:0C:1C:C2:9E:2D:AB:5F:9E:30:9E:8A:7A:0B:3F:84 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:92:37:82:44:3f:a4:3a:ab:d8:6d:ff:11:0b:42:ad:34:8a: 03:8e:83:5d:34:9f:7a:49:d9:d8:a6:64:54:78:d2:27:81:ee: c1:bc:a3:be:bf:f2:9b:8a:2b:e7:a5:7e:e6:c4:48:98:07:c6: ba:0f:8c:6f:16:df:23:fb:af:6b:32:a8:50:5b:9b:0d:c4:9a: 27:7b:59:14:05:71:82:88:78:92:22:58:9c:b1:0b:af:04:53: c3:6d:cb:77:7b:63:55:b7:d9:10:ae:08:35:60:0c:10:a5:45: 14:19:1c:7a:be:5e:10:c7:a8:79:37:33:c4:30:24:62:a8:fb: bb:c5:c3:5c:cb:03:f2:db:81:b5:04:e0:c3:5c:f0:f2:9f:0d: cc:e9:b1:a2:69:fe:ee:57:0f:b7:c4:e4:a0:a2:79:f4:8f:22: 54:82:4e:f9:fa:82:ad:16:ba:bf:c7:19:51:be:8f:96:35:07: 8e:68:61:56:4d:ba:64:1f:58:49:bd:87:93:e9:38:55:e8:5e: 40:7d:5c:86:50:3e:82:c9:7a:6f:49:86:85:88:83:43:b6:64: 0b:25:84:b8:58:24:6d:38:17:16:cf:77:bc:71:29:f8:e4:30: d6:33:0a:9b:bb:72:c9:76:ae:eb:23:f7:af:57:71:1d:05:5d: fd:8d:72:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUxMDE5MDExNTE3WhcNMjUxMDI2MDExNTE3WjAYMRYwFAYD VQQDEw02OGY0M2JhNi1jZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKoabtyowkz9I+AEyfTe+liSnGm8vcNPSFEM0e/+E2ijIvfVzUlmdwa6UG2H wD16lfB+Gpw9qfLDdLYW4qTLDjaOXOhogMe5vWD03jFf97HKrciIYpgXXwQ6o8TM g5AcDDISSZb3td+ECREYKs0Tyjjdfm1elJn6VkpPmnB1OHJ7ddBAl5q85xKL+HGq rThemK/Abx+IT7kxGpgUClaK/6OTAytA3uJcrcgYPw+WVmmrs+25miRTqZ6k9Fej cmRa/0HvM32Q5ueZcVa6ntelW9whQK2hAFQn5AUWBs4ZJFW56hMMn7jZdkhbfVeA szc6DLeKp4YK4NOftcGLQL9xfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiWHGoh DBzCni2rX54wnop6Cz+EMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEkjeCRD+kOqvYbf8RC0KtNIoDjoNdNJ96SdnYpmRUeNInge7BvKO+ v/KbiivnpX7mxEiYB8a6D4xvFt8j+69rMqhQW5sNxJone1kUBXGCiHiSIlicsQuv BFPDbct3e2NVt9kQrgg1YAwQpUUUGRx6vl4Qx6h5NzPEMCRiqPu7xcNcywPy24G1 BODDXPDynw3M6bGiaf7uVw+3xOSgonn0jyJUgk75+oKtFrq/xxlRvo+WNQeOaGFW TbpkH1hJvYeT6ThV6F5AfVyGUD6CyXpvSYaFiINDtmQLJYS4WCRtOBcWz3e8cSn4 5DDWMwqbu3LJdq7rI/evV3EdBV39jXKv -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:16 2025 by rpki-client