$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft File: gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json) Hash identifier: ylGrDxDOh1oliKmD82/p5xneGI4QuKGjWAobXNCkPho= Subject key identifier: ED:39:A4:9C:48:89:F4:07:EA:CE:DE:15:59:9A:A5:6E:D0:61:8F:87 Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft Manifest number: 1C88 Signing time: Wed 22 Oct 2025 16:24:44 +0000 Manifest this update: Wed 22 Oct 2025 16:24:44 +0000 Manifest next update: Wed 29 Oct 2025 16:24:44 +0000 Files and hashes: 1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: AN6uLiJVI78jw4Yb3yZ60L8lX5eqAsVcYH4LEtflARo=) 2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: X/4GCRMZ/gVyKNef6s/CyH3yqYjWWcRQZHTiFuRUpcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7320 (0x1c98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: Oct 22 16:24:44 2025 GMT Not After : Oct 29 16:24:44 2025 GMT Subject: CN=68f9054c-b264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:4b:3f:38:42:dc:2a:ea:49:88:06:22:99: 8f:6e:52:6c:6a:c4:5f:ea:ce:82:60:ff:53:e5:e1: e3:0e:17:78:0e:8c:8b:cc:9e:3d:26:d7:bf:77:e5: 1c:2f:56:22:49:db:d3:30:03:e1:d0:0f:d3:37:d6: cd:06:d5:20:57:87:a6:1d:74:28:7e:09:11:b3:d7: 06:39:50:4e:5d:16:ae:c5:73:94:bf:8b:3d:e2:29: 26:6b:c7:2e:30:85:94:3f:23:81:33:3a:9a:5f:98: 0d:35:3f:34:48:41:99:e6:ae:ba:9d:fc:09:2a:43: f1:c4:29:22:fe:c9:28:76:9b:7e:e6:09:b1:58:72: 65:2f:b5:6b:fa:b1:68:ce:c2:d7:d9:a0:6b:c2:49: 9a:95:9f:f9:3a:49:d2:8b:7f:9e:e6:eb:ff:4a:e8: 77:df:09:43:c0:8b:ef:0f:02:db:b9:85:e3:c6:7d: dd:9e:8b:9e:2e:b9:f7:40:d0:c6:a5:ea:84:70:35: 10:db:6c:6a:c5:8a:2f:07:2b:28:2c:ab:f0:7a:64: a0:b9:75:be:ca:4d:b5:53:c4:04:08:6b:91:b8:49: ff:94:f5:41:0a:66:ff:94:d7:68:2e:84:46:1b:8a: 30:93:6a:3d:8a:8d:de:d6:ca:a1:96:51:fb:75:24: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:39:A4:9C:48:89:F4:07:EA:CE:DE:15:59:9A:A5:6E:D0:61:8F:87 X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:45:d3:8f:c4:2a:12:2e:38:2f:da:01:df:64:de:e8:46:10: f4:8e:3b:07:da:1a:24:d1:81:58:c2:0c:0a:f8:3b:d5:0e:49: 62:c2:7a:b9:bb:e8:03:54:9d:fc:ff:7d:d9:61:d3:38:91:21: 3b:1b:fe:73:8e:88:84:82:f5:a3:c2:91:dc:35:6b:62:d6:4b: 4c:2b:52:23:2c:a2:06:33:79:ca:b0:19:c3:9a:dc:eb:4c:5a: 15:84:c2:2e:f1:2f:a5:57:23:ad:6f:10:7f:af:cc:44:78:f2: bf:68:30:6c:01:f7:90:9e:e7:c2:19:3e:08:4b:c0:22:df:96: 34:91:fd:e2:24:f0:cc:11:3e:98:7c:fa:a4:38:e0:56:5f:99: 18:6a:72:4d:da:9b:b3:42:82:ab:b0:5a:11:81:79:df:3e:eb: 82:20:c0:0c:43:76:da:86:c8:48:5b:00:a6:79:d6:1a:51:ca: 04:e4:98:b1:ce:52:a2:c5:69:fd:2d:f7:dc:44:95:97:5c:28: 19:c3:bf:f3:e4:7c:8d:ea:b4:70:57:44:9b:17:34:a9:12:d6: df:0a:94:b6:88:28:83:04:18:3d:40:26:75:c2:f9:cc:06:d3: 89:00:72:c2:24:93:66:51:59:7c:76:90:65:0d:24:68:e9:1f: 3b:3a:c9:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjUxMDIyMTYyNDQ0WhcNMjUxMDI5MTYyNDQ0WjAYMRYwFAYD VQQDEw02OGY5MDU0Yy1iMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxStLPzhC3CrqSYgGIpmPblJsasRf6s6CYP9T5eHjDhd4DoyLzJ49Jte/d+Uc L1YiSdvTMAPh0A/TN9bNBtUgV4emHXQofgkRs9cGOVBOXRauxXOUv4s94ikma8cu MIWUPyOBMzqaX5gNNT80SEGZ5q66nfwJKkPxxCki/skodpt+5gmxWHJlL7Vr+rFo zsLX2aBrwkmalZ/5OknSi3+e5uv/Suh33wlDwIvvDwLbuYXjxn3dnoueLrn3QNDG peqEcDUQ22xqxYovBysoLKvwemSguXW+yk21U8QECGuRuEn/lPVBCmb/lNdoLoRG G4owk2o9io3e1sqhllH7dSTJiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO05pJxI ifQH6s7eFVmapW7QYY+HMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdU S29oUlZjUXgwek1aclBiWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWRdOPxCoSLjgv2gHfZN7oRhD0jjsH2hok0YFYwgwK+DvVDkliwnq5 u+gDVJ38/33ZYdM4kSE7G/5zjoiEgvWjwpHcNWti1ktMK1IjLKIGM3nKsBnDmtzr TFoVhMIu8S+lVyOtbxB/r8xEePK/aDBsAfeQnufCGT4IS8Ai35Y0kf3iJPDMET6Y fPqkOOBWX5kYanJN2puzQoKrsFoRgXnfPuuCIMAMQ3bahshIWwCmedYaUcoE5Jix zlKixWn9LffcRJWXXCgZw7/z5HyN6rRwV0SbFzSpEtbfCpS2iCiDBBg9QCZ1wvnM BtOJAHLCJJNmUVl8dpBlDSRo6R87OsnC -----END CERTIFICATE-----Generated at Thu Oct 23 10:00:52 2025 by rpki-client