$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: 4bpAUW5oOmSVCgkJFqIOKpcZl3Lxpkq+S4AKxtDA7ps= Subject key identifier: E3:5C:8F:E3:CA:C6:E3:18:07:31:D7:2E:31:31:31:24:C5:42:EE:88 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 1318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 1302 Signing time: Sun 02 Nov 2025 17:01:52 +0000 Manifest this update: Sun 02 Nov 2025 17:01:51 +0000 Manifest next update: Sun 09 Nov 2025 17:01:51 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: FIfPcH3K4nRq9UMoXJpJdyRt4nkIkSUGSD2ixrsxWqs=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4888 (0x1318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Nov 2 17:01:51 2025 GMT Not After : Nov 9 17:01:51 2025 GMT Subject: CN=69078e7f-c8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:43:08:a7:65:de:15:74:07:dc:91:7a:5a: fc:17:36:9b:f2:86:c1:e2:7a:8d:29:48:fa:fa:88: ac:42:19:39:5f:13:f3:7c:40:be:2d:be:37:f5:c3: ef:0a:8d:bc:5d:f5:8d:62:97:ba:e9:5a:1b:43:ec: b5:e7:1b:f4:f2:e6:80:21:e0:86:89:6b:44:d5:af: 61:42:25:99:b5:c7:1d:98:20:74:74:cc:5b:12:ec: f6:29:65:73:30:cd:9c:fb:68:b2:8c:2d:fc:87:8e: 07:e0:51:c3:ba:ad:82:64:e2:82:12:62:bb:80:e8: 1b:3f:2e:ed:10:e1:b0:a7:d7:7e:8c:a4:7e:c7:ac: f0:dc:9b:7a:f9:0d:3b:5a:79:72:70:95:b8:ec:4d: 67:46:45:f6:34:32:c8:49:bb:68:c5:ec:20:83:75: 3f:e3:3f:e8:ab:86:70:d2:fd:ed:4c:bc:7a:35:f9: 4e:3d:2e:96:ee:ac:8c:57:8d:17:0d:9d:d5:39:3c: 9a:9e:85:02:fa:96:85:ae:31:05:57:62:5a:21:de: 42:1e:fe:db:4d:56:30:b4:f1:26:bf:71:e2:77:43: ba:a2:2a:be:c4:c4:2d:0f:87:06:9d:45:7e:56:1b: 84:cc:65:64:67:38:6a:13:4c:26:2a:a5:0c:08:8a: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5C:8F:E3:CA:C6:E3:18:07:31:D7:2E:31:31:31:24:C5:42:EE:88 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:db:d7:dc:eb:75:b1:06:a6:0a:eb:4f:ce:73:ef:76:2c:0f: 12:74:9b:12:1f:10:f2:fc:e2:dd:c6:61:9a:f6:2e:51:f2:77: 22:db:74:72:7f:bf:95:21:9c:e8:43:d4:a3:ed:df:e2:e5:f4: 6b:00:95:12:3e:eb:55:aa:39:5b:e2:cf:c8:bd:c3:9b:16:46: dd:5d:f2:48:d9:7e:0a:42:03:23:af:31:be:2c:77:d4:70:4d: da:5a:88:ab:2a:fd:08:0c:d5:59:3f:31:30:ed:44:ba:ed:73: 0b:4b:93:0f:d8:d0:44:ca:c3:99:ab:3a:cf:09:3c:f1:e8:3d: 52:76:65:1e:44:c7:70:ed:2e:d2:48:89:2c:86:26:d7:66:ab: f3:87:e6:52:95:e2:42:26:a1:63:46:2c:a9:56:54:dc:29:ec: ee:37:a6:48:bd:19:08:98:36:c1:22:18:6d:52:c8:10:94:e9: ee:9b:38:3a:5f:e3:94:b5:a0:0a:da:34:73:92:28:50:9b:bf: 62:ba:86:7d:e8:0e:24:30:55:77:ce:4b:6f:3d:28:92:9f:45: 1b:65:c4:61:aa:a1:de:fd:57:23:c5:af:84:75:21:cc:c0:f9: 36:ed:40:c7:26:e5:57:ad:8b:63:5e:67:d3:1b:65:ff:19:38: 4f:be:99:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUxMTAyMTcwMTUxWhcNMjUxMTA5MTcwMTUxWjAYMRYwFAYD VQQDEw02OTA3OGU3Zi1jOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1RDCKdl3hV0B9yRelr8Fzab8obB4nqNKUj6+oisQhk5XxPzfEC+Lb439cPv Co28XfWNYpe66VobQ+y15xv08uaAIeCGiWtE1a9hQiWZtccdmCB0dMxbEuz2KWVz MM2c+2iyjC38h44H4FHDuq2CZOKCEmK7gOgbPy7tEOGwp9d+jKR+x6zw3Jt6+Q07 WnlycJW47E1nRkX2NDLISbtoxewgg3U/4z/oq4Zw0v3tTLx6NflOPS6W7qyMV40X DZ3VOTyanoUC+paFrjEFV2JaId5CHv7bTVYwtPEmv3Hid0O6oiq+xMQtD4cGnUV+ VhuEzGVkZzhqE0wmKqUMCIpIDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONcj+PK xuMYBzHXLjExMSTFQu6IMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC29fc63WxBqYK60/Oc+92LA8SdJsSHxDy/OLdxmGa9i5R8nci23Ry f7+VIZzoQ9Sj7d/i5fRrAJUSPutVqjlb4s/IvcObFkbdXfJI2X4KQgMjrzG+LHfU cE3aWoirKv0IDNVZPzEw7US67XMLS5MP2NBEysOZqzrPCTzx6D1SdmUeRMdw7S7S SIkshibXZqvzh+ZSleJCJqFjRiypVlTcKezuN6ZIvRkImDbBIhhtUsgQlOnumzg6 X+OUtaAK2jRzkihQm79iuoZ96A4kMFV3zktvPSiSn0UbZcRhqqHe/Vcjxa+EdSHM wPk27UDHJuVXrYtjXmfTG2X/GThPvpnl -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:27 2025 by rpki-client