$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: g7BQkvWuyWyU+6K0oTlCzCOY6bmt8RZB/mSq+dmrKVE= Subject key identifier: E5:9C:1C:97:56:45:4C:72:80:9E:DF:96:F4:B6:3B:2C:6A:0F:33:92 Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 023D Signing time: Wed 05 Nov 2025 01:55:00 +0000 Manifest this update: Wed 05 Nov 2025 01:54:59 +0000 Manifest next update: Wed 12 Nov 2025 01:54:59 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: yLu4LnTif0wSSAceaV1Jo+aqyGDFNQdOU0AH64z8XWM=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: /HJseqaXYqKNU4JSpgFfB6yF7Shuw95sDH+Hz1X2J8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Nov 5 01:54:59 2025 GMT Not After : Nov 12 01:54:59 2025 GMT Subject: CN=690aae73-14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:56:bd:4e:dc:60:aa:b2:7e:fd:ee:20:2d: 46:e6:66:1f:08:ba:05:11:4a:ff:dc:e3:2d:09:ac: b2:48:3d:3e:79:69:59:0c:fd:8a:3e:4c:10:67:56: d7:01:a4:1d:b2:d5:48:d2:3c:32:9a:42:df:c8:1f: 28:f4:77:8c:72:85:97:ba:98:0f:1c:2b:62:a7:89: 33:44:eb:5b:be:4e:76:26:88:59:e1:0f:ed:0b:8d: 40:1f:4f:1f:d2:13:89:1b:0c:73:7b:78:85:83:b0: 37:e3:d8:01:35:05:cc:e8:f9:a8:75:7f:65:1b:fc: 97:b7:04:82:bd:36:a7:af:b5:b3:c5:e3:1a:05:50: e4:af:82:51:9b:f5:45:17:05:90:fa:a5:78:1a:ea: 72:a0:e8:08:29:96:a0:94:1b:b8:8a:b4:c2:ff:22: 77:ba:ce:b2:98:ab:ea:cd:51:1f:cf:a9:4c:f7:35: fb:7c:42:84:74:a1:d0:d2:87:9c:49:77:9f:66:a6: 92:da:0c:94:b4:20:7b:2b:ab:20:38:12:25:ae:46: ea:ad:47:64:fd:ad:c6:aa:1c:bb:f4:bb:c5:0f:d3: 53:43:40:43:c2:5f:3d:53:c9:57:87:c0:1c:c6:07: 92:1c:5e:88:a1:cf:f8:f9:29:75:ab:eb:23:a6:69: b1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9C:1C:97:56:45:4C:72:80:9E:DF:96:F4:B6:3B:2C:6A:0F:33:92 X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:8b:38:90:47:10:40:35:44:aa:83:4b:ce:fa:ed:36:b2:22: eb:35:72:43:19:3a:63:4b:6a:b1:5b:54:50:a6:54:7e:a8:b0: ac:75:0f:6d:5f:88:8e:84:29:73:f0:01:33:81:ac:2c:84:02: fc:6b:eb:0c:b9:26:eb:8e:54:8f:71:d3:39:b5:75:88:6d:a1: 2c:a0:15:2d:ce:73:2a:7f:03:7b:b4:89:f2:00:f9:3e:ca:3c: db:e1:89:a2:68:c5:be:4f:bd:17:5f:ce:ac:e7:c9:36:bc:db: e6:77:22:b5:85:4e:b3:4f:eb:09:3f:6c:c9:a5:6b:fd:19:8a: 11:c7:5d:c9:bc:e2:b6:e0:ff:91:46:08:1c:20:f9:45:06:e6: 74:b9:21:11:97:0d:75:a3:f4:7d:36:5b:f4:b6:cd:d5:ef:bc: 93:dd:56:f3:fb:43:e9:64:b3:b0:ad:69:62:64:74:3a:be:b5: 6a:a5:43:f9:cc:20:e4:22:0d:33:e2:39:24:94:e5:d7:84:69: 6b:94:1a:71:8b:d6:70:96:39:a7:f7:e0:9f:9e:74:1b:c2:9d: 34:ee:1d:b6:8f:b7:f3:3f:1c:93:e9:7d:12:87:ff:47:57:e7: ab:ad:4a:69:95:e2:cb:1f:3d:a5:3a:21:6d:65:9c:37:90:99: 58:f5:75:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUxMTA1MDE1NDU5WhcNMjUxMTEyMDE1NDU5WjAYMRYwFAYD VQQDEw02OTBhYWU3My0xNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbtWvU7cYKqyfv3uIC1G5mYfCLoFEUr/3OMtCayySD0+eWlZDP2KPkwQZ1bX AaQdstVI0jwymkLfyB8o9HeMcoWXupgPHCtip4kzROtbvk52JohZ4Q/tC41AH08f 0hOJGwxze3iFg7A349gBNQXM6PmodX9lG/yXtwSCvTanr7WzxeMaBVDkr4JRm/VF FwWQ+qV4GupyoOgIKZaglBu4irTC/yJ3us6ymKvqzVEfz6lM9zX7fEKEdKHQ0oec SXefZqaS2gyUtCB7K6sgOBIlrkbqrUdk/a3Gqhy79LvFD9NTQ0BDwl89U8lXh8Ac xgeSHF6Ioc/4+Sl1q+sjpmmxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWcHJdW RUxygJ7flvS2OyxqDzOSMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIiziQRxBANUSqg0vO+u02siLrNXJDGTpjS2qxW1RQplR+qLCsdQ9t X4iOhClz8AEzgawshAL8a+sMuSbrjlSPcdM5tXWIbaEsoBUtznMqfwN7tInyAPk+ yjzb4YmiaMW+T70XX86s58k2vNvmdyK1hU6zT+sJP2zJpWv9GYoRx13JvOK24P+R RggcIPlFBuZ0uSERlw11o/R9Nlv0ts3V77yT3Vbz+0PpZLOwrWliZHQ6vrVqpUP5 zCDkIg0z4jkklOXXhGlrlBpxi9Zwljmn9+CfnnQbwp007h22j7fzPxyT6X0Sh/9H V+errUppleLLHz2lOiFtZZw3kJlY9XWh -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:28 2025 by rpki-client