$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: nuCljy6xczrPvgf/yCYcbDngbVgGj27lq1WqZA7u7Jk= Subject key identifier: 8D:A5:93:2B:D3:1A:57:66:01:ED:46:81:28:CE:8C:41:AF:94:71:F2 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: 0149 Signing time: Mon 03 Nov 2025 04:18:49 +0000 Manifest this update: Mon 03 Nov 2025 04:18:48 +0000 Manifest next update: Mon 10 Nov 2025 04:18:48 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: qIyG/nfxUmWsI6QwLCwiZz8x783nWiirf+upXZgpqqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: Nov 3 04:18:48 2025 GMT Not After : Nov 10 04:18:48 2025 GMT Subject: CN=69082d29-7bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:6e:95:a7:35:1e:42:5a:d2:86:e3:e4:ef: f0:bc:42:f6:40:4f:e9:ce:50:3d:0c:81:98:84:c9: 3c:4c:20:a9:21:dc:b9:a0:77:a4:81:4a:e7:1a:5d: 82:94:c3:21:14:46:be:f8:99:34:f7:a2:e2:d3:6a: 23:83:24:7c:d6:b3:20:69:37:2f:01:28:d3:0c:03: fc:74:6a:b0:fc:93:b5:09:b9:d1:aa:8b:02:d4:81: a3:18:fd:bd:1d:a0:26:60:fd:23:4b:52:0c:62:2f: cf:02:42:8b:0c:95:b1:a9:e1:c9:b7:81:1f:ef:ac: e4:83:4f:cf:5e:ec:61:30:d4:cb:11:18:d3:00:50: e0:c7:c5:d7:c4:b2:17:d9:e8:c6:95:c4:26:ea:b8: f3:65:e6:4d:b6:38:c6:96:e5:96:dd:6b:bc:d1:b5: 9c:c1:84:05:66:83:1f:10:c3:3b:86:96:34:a5:3c: e8:34:7c:a5:7f:7c:0b:70:94:5b:99:78:fd:22:ac: 9f:90:1a:0a:89:ec:a9:91:06:19:e8:d4:96:37:6d: 60:2e:cd:4c:68:ea:bc:cb:b5:dd:98:06:0c:fa:b5: 04:79:36:48:29:e3:bd:fc:d3:77:42:f7:b7:4d:92: 45:06:5d:57:59:24:17:58:33:ab:a9:ed:86:f3:7c: 8e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A5:93:2B:D3:1A:57:66:01:ED:46:81:28:CE:8C:41:AF:94:71:F2 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a0:f2:ae:25:7b:53:43:01:98:39:aa:25:ef:6d:48:18:7f: 25:b1:f3:29:12:8d:34:32:2d:db:37:0d:c9:b9:11:0d:1d:b1: 3e:48:c8:20:d1:d9:c0:4c:44:94:af:78:16:35:1b:a8:96:72: 3f:66:5b:be:62:7d:b9:df:22:ae:d8:8d:07:96:b6:1a:30:74: 5d:e6:e6:a9:9d:75:3e:2e:bd:20:61:89:76:7a:31:c7:d0:e7: ea:55:39:7f:38:5a:3f:fb:d6:6f:c8:e4:69:14:84:21:77:ad: be:b4:55:09:28:2b:b2:4a:fa:43:7b:03:a4:35:68:29:e2:01: fc:75:01:11:5e:a4:23:d8:de:e9:b1:4b:97:64:78:75:66:2e: e3:af:04:12:8e:e0:ed:eb:71:ec:2e:72:31:a8:4f:b4:72:c4: 8c:21:f4:f0:43:58:3d:bb:d4:c8:d2:e1:f0:c1:7c:be:00:b0: 5b:0c:bf:b9:f8:e8:f8:4e:41:7a:7e:a5:68:c8:7c:b6:b7:42: ee:d8:0a:ce:39:01:a8:76:61:c7:dd:3d:aa:ca:06:b6:2b:1e: 03:1c:dd:8f:6a:f4:59:ba:e1:71:71:8f:53:f6:80:f8:72:1a: 56:02:0d:31:c4:c3:71:d1:4f:aa:d3:a3:39:7a:0a:54:a3:58: 7d:16:04:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUxMTAzMDQxODQ4WhcNMjUxMTEwMDQxODQ4WjAYMRYwFAYD VQQDEw02OTA4MmQyOS03YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40xulac1HkJa0obj5O/wvEL2QE/pzlA9DIGYhMk8TCCpIdy5oHekgUrnGl2C lMMhFEa++Jk096Li02ojgyR81rMgaTcvASjTDAP8dGqw/JO1CbnRqosC1IGjGP29 HaAmYP0jS1IMYi/PAkKLDJWxqeHJt4Ef76zkg0/PXuxhMNTLERjTAFDgx8XXxLIX 2ejGlcQm6rjzZeZNtjjGluWW3Wu80bWcwYQFZoMfEMM7hpY0pTzoNHylf3wLcJRb mXj9IqyfkBoKieypkQYZ6NSWN21gLs1MaOq8y7XdmAYM+rUEeTZIKeO9/NN3Qve3 TZJFBl1XWSQXWDOrqe2G83yOJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2lkyvT GldmAe1GgSjOjEGvlHHyMB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKoPKuJXtTQwGYOaol721IGH8lsfMpEo00Mi3bNw3JuRENHbE+SMgg 0dnATESUr3gWNRuolnI/Zlu+Yn253yKu2I0HlrYaMHRd5uapnXU+Lr0gYYl2ejHH 0OfqVTl/OFo/+9ZvyORpFIQhd62+tFUJKCuySvpDewOkNWgp4gH8dQERXqQj2N7p sUuXZHh1Zi7jrwQSjuDt63HsLnIxqE+0csSMIfTwQ1g9u9TI0uHwwXy+ALBbDL+5 +Oj4TkF6fqVoyHy2t0Lu2ArOOQGodmHH3T2qyga2Kx4DHN2PavRZuuFxcY9T9oD4 chpWAg0xxMNx0U+q06M5egpUo1h9FgQZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:27 2025 by rpki-client