$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: N4KQphdUiUqJJdglpc9OVjnxuw3ZXhD6c8PX3oQWzNY= Subject key identifier: 41:C5:66:80:58:85:E8:9C:03:9C:01:3E:E0:39:A3:48:98:44:13:AA Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 0205 Signing time: Mon 21 Jul 2025 02:20:33 +0000 Manifest this update: Mon 21 Jul 2025 02:20:33 +0000 Manifest next update: Mon 28 Jul 2025 02:20:33 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: L3R+ttj+juH7zZl15DRp93Gdm2GioPm+LdbaVDid7Ok=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Jul 21 02:20:33 2025 GMT Not After : Jul 28 02:20:33 2025 GMT Subject: CN=687da3f1-02c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:cb:d9:78:49:b1:4e:4c:82:b3:0c:6a:5b: a3:22:a0:28:e7:e7:98:50:19:82:c0:2f:29:80:17: f1:57:e6:9f:32:d9:13:af:d7:d7:ea:49:0b:af:3f: 43:12:06:f1:53:05:e4:48:57:cd:1d:ff:84:2b:b6: ce:28:16:fa:8c:93:0d:bf:05:92:a6:08:e8:be:33: 08:41:a6:b9:5b:7e:89:ec:5f:8c:e9:5f:c1:cc:ca: 2c:89:1d:af:94:b8:98:5b:e4:ce:96:8f:d5:15:58: 42:89:82:5f:a8:eb:f7:1a:dc:04:14:7e:6f:d1:8f: 58:a6:40:92:ea:ed:5b:ef:ca:22:4f:8e:88:e3:54: 4f:08:31:b7:5e:3e:1b:47:ad:73:31:c4:1c:2c:7a: 47:76:b7:e2:22:f2:4d:9a:44:6f:ae:ab:18:3c:02: bd:8d:8a:0f:56:59:60:53:43:54:dd:1c:72:2b:2e: 03:79:a3:6f:88:2d:a7:89:74:58:ef:6e:1d:77:f3: 7f:94:b7:66:c7:e0:99:de:90:e9:8e:ca:e8:a2:3e: 7b:91:7b:4f:02:5e:63:4f:02:55:ba:24:8f:fa:2b: b1:71:f3:1b:1e:aa:a2:97:3c:f4:46:5e:ab:fd:50: d7:0a:cc:9f:48:09:68:a2:65:0f:06:f4:b7:93:9f: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C5:66:80:58:85:E8:9C:03:9C:01:3E:E0:39:A3:48:98:44:13:AA X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ca:ff:43:4a:d1:b3:af:49:2b:9d:6e:1a:4c:3a:9c:ab:ee: 0e:c6:4b:6d:0d:99:09:ee:c7:c4:c5:93:b1:d8:30:91:3a:ae: 4a:fc:f6:08:31:66:b9:a9:53:30:c7:14:87:08:76:a6:ea:6d: ff:12:44:9e:49:92:d7:5d:bc:3a:b1:0f:e1:9d:c6:07:2a:87: 5e:22:f1:ce:ca:5f:ea:7d:ec:bf:22:c2:11:24:4e:38:3b:5b: be:15:ff:85:6f:91:d3:dc:6a:97:11:f0:90:77:e9:f8:bf:e1: 71:4e:b4:45:a7:34:48:ff:1f:27:10:93:45:e1:6e:9a:10:a0: 73:3d:12:06:17:7e:66:37:fd:27:20:53:47:cc:d4:ff:d4:f0: f2:ed:7f:a0:e0:47:fd:34:7c:07:cb:db:06:14:43:95:f0:ec: 8c:11:e2:34:0d:57:e7:45:b8:ca:a0:d2:39:d8:cd:14:11:b9: b5:22:cb:dd:0c:a1:d8:79:ca:08:02:59:77:5f:5e:11:58:a5: 23:bf:33:68:f2:89:6e:af:30:f7:1a:17:90:3d:4c:98:e3:d0: df:0d:9d:e0:6d:85:43:13:e8:e4:b3:54:f0:67:84:ac:35:34: 9b:a7:0d:2f:69:69:1b:fe:44:55:23:fb:3b:46:b8:29:8e:cd: de:ad:29:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUwNzIxMDIyMDMzWhcNMjUwNzI4MDIyMDMzWjAYMRYwFAYD VQQDEw02ODdkYTNmMS0wMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bnL2XhJsU5MgrMMalujIqAo5+eYUBmCwC8pgBfxV+afMtkTr9fX6kkLrz9D EgbxUwXkSFfNHf+EK7bOKBb6jJMNvwWSpgjovjMIQaa5W36J7F+M6V/BzMosiR2v lLiYW+TOlo/VFVhCiYJfqOv3GtwEFH5v0Y9YpkCS6u1b78oiT46I41RPCDG3Xj4b R61zMcQcLHpHdrfiIvJNmkRvrqsYPAK9jYoPVllgU0NU3RxyKy4DeaNviC2niXRY 724dd/N/lLdmx+CZ3pDpjsrooj57kXtPAl5jTwJVuiSP+iuxcfMbHqqilzz0Rl6r /VDXCsyfSAloomUPBvS3k58SfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHFZoBY heicA5wBPuA5o0iYRBOqMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkyv9DStGzr0krnW4aTDqcq+4OxkttDZkJ7sfExZOx2DCROq5K/PYI MWa5qVMwxxSHCHam6m3/EkSeSZLXXbw6sQ/hncYHKodeIvHOyl/qfey/IsIRJE44 O1u+Ff+Fb5HT3GqXEfCQd+n4v+FxTrRFpzRI/x8nEJNF4W6aEKBzPRIGF35mN/0n IFNHzNT/1PDy7X+g4Ef9NHwHy9sGFEOV8OyMEeI0DVfnRbjKoNI52M0UEbm1Isvd DKHYecoIAll3X14RWKUjvzNo8olurzD3GheQPUyY49DfDZ3gbYVDE+jks1TwZ4Ss NTSbpw0vaWkb/kRVI/s7Rrgpjs3erSmj -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:27 2025 by rpki-client