$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: 7++/0cqPDVxjTELsjEcHPyaYDDg/3xAbVgzVlKAtZAw= Subject key identifier: 96:45:9D:6B:A4:8A:27:60:AF:23:89:EC:D1:C2:B3:0E:C3:0A:31:07 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 027F Signing time: Wed 22 Oct 2025 03:53:40 +0000 Manifest this update: Wed 22 Oct 2025 03:53:38 +0000 Manifest next update: Wed 29 Oct 2025 03:53:38 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: LdwcuxDiIdvk32HH6ci/CUto3ObRH86Ti68MiGcFfR4=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: exVLBxR9pxtqc5cvsQFpU7WzBwIbqGPyCKYDoLeIqwE=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: qN+LRpSVnBxJ+EVMhollH7lNOxo/HzDT+qSzlpuJsAY=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: Uy1qQgtN2hy74kMiTUs5n5WOsga0Z6eI2tl5HqgZZRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Oct 22 03:53:38 2025 GMT Not After : Oct 29 03:53:38 2025 GMT Subject: CN=68f85543-0e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c0:41:b8:0b:f2:cb:e7:92:75:2b:5f:f2:81: 29:d4:be:7a:5c:31:60:2b:3d:07:3c:68:ed:81:a9: 38:ea:af:b1:dc:7c:15:d5:41:1b:8b:95:9b:fd:c2: ad:06:08:12:a4:8d:53:ae:36:bc:26:fe:8b:8b:3f: 88:de:3b:46:66:ad:51:3b:a4:fc:a7:df:e6:8c:40: d4:9b:aa:63:e5:89:c6:d6:8a:8d:dc:13:64:2c:18: 39:cd:42:5d:24:fe:78:23:c7:e0:74:eb:36:3e:88: 09:66:41:dc:27:3f:96:8c:bf:6d:dc:09:16:17:26: 25:c4:08:24:df:25:bb:99:e5:da:d1:d4:30:c7:17: 45:27:fc:7b:62:a0:a7:7e:53:71:7b:8f:e5:42:f2: 15:33:37:17:2e:88:48:cc:e9:30:5a:52:fe:50:9b: 96:a2:de:94:66:ab:da:05:e1:c7:a6:c0:81:7d:eb: cc:11:9b:12:6c:7e:73:de:ae:43:36:8b:10:9c:2f: 0e:86:58:22:b5:42:4b:42:6e:e8:22:9e:cf:28:4c: 36:91:01:c2:1e:84:30:b9:a6:41:27:f3:86:75:98: 9b:c2:30:05:76:dd:9a:a9:51:d3:b5:2a:72:81:36: 64:78:c1:d3:b9:e4:93:87:eb:61:95:b5:2b:f8:cf: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:45:9D:6B:A4:8A:27:60:AF:23:89:EC:D1:C2:B3:0E:C3:0A:31:07 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:00:eb:0a:e7:a2:41:75:f5:52:9a:26:e4:7a:cd:6e:a3:73: 1a:f6:ec:ff:66:c6:3e:e2:70:25:1b:ed:78:95:a6:02:47:e3: 6e:33:75:f9:f1:03:1a:e9:92:08:88:46:01:c2:00:8e:76:26: d8:b5:f2:88:52:a5:ae:40:d8:fa:70:a5:68:1c:6d:1c:ba:dd: 1f:0c:52:ae:43:d7:bb:89:46:07:5d:a7:53:10:d3:37:37:ed: 8f:18:9a:74:ee:b6:78:0c:5e:bb:54:0f:c6:e5:86:c6:82:b8: 09:4a:30:97:c5:7c:82:d5:91:bc:a3:38:fb:06:b1:bd:17:6c: 27:10:e7:a6:f1:4a:a5:22:c7:c4:93:15:65:98:fa:92:a4:63: 47:7f:91:1f:ad:ef:8e:07:36:41:da:b7:a1:1a:c4:3d:1a:18: 9b:31:08:e3:c2:da:69:31:fa:48:b3:80:c1:fd:04:5d:0d:3b: dc:f9:b0:ed:69:b3:7e:01:dc:49:f5:82:1d:c8:54:a1:79:cf: 75:31:b1:eb:8e:8f:c4:c5:f7:3d:e3:ee:a2:6e:77:37:0c:00: 78:56:71:42:72:1f:55:3b:f1:13:12:de:87:87:c9:c9:04:3b: c3:1a:9f:3e:72:57:52:12:c4:15:3d:7f:16:bf:a9:a1:5a:9a: 48:f5:98:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUxMDIyMDM1MzM4WhcNMjUxMDI5MDM1MzM4WjAYMRYwFAYD VQQDEw02OGY4NTU0My0wZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18BBuAvyy+eSdStf8oEp1L56XDFgKz0HPGjtgak46q+x3HwV1UEbi5Wb/cKt BggSpI1Trja8Jv6Liz+I3jtGZq1RO6T8p9/mjEDUm6pj5YnG1oqN3BNkLBg5zUJd JP54I8fgdOs2PogJZkHcJz+WjL9t3AkWFyYlxAgk3yW7meXa0dQwxxdFJ/x7YqCn flNxe4/lQvIVMzcXLohIzOkwWlL+UJuWot6UZqvaBeHHpsCBfevMEZsSbH5z3q5D NosQnC8OhlgitUJLQm7oIp7PKEw2kQHCHoQwuaZBJ/OGdZibwjAFdt2aqVHTtSpy gTZkeMHTueSTh+thlbUr+M8RRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZFnWuk iidgryOJ7NHCsw7DCjEHMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+AOsK56JBdfVSmibkes1uo3Ma9uz/ZsY+4nAlG+14laYCR+NuM3X5 8QMa6ZIIiEYBwgCOdibYtfKIUqWuQNj6cKVoHG0cut0fDFKuQ9e7iUYHXadTENM3 N+2PGJp07rZ4DF67VA/G5YbGgrgJSjCXxXyC1ZG8ozj7BrG9F2wnEOem8UqlIsfE kxVlmPqSpGNHf5Efre+OBzZB2rehGsQ9GhibMQjjwtppMfpIs4DB/QRdDTvc+bDt abN+AdxJ9YIdyFShec91MbHrjo/Exfc94+6ibnc3DAB4VnFCch9VO/ETEt6Hh8nJ BDvDGp8+cldSEsQVPX8Wv6mhWppI9Zif -----END CERTIFICATE-----Generated at Wed Oct 22 18:40:04 2025 by rpki-client