$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft File: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json) Hash identifier: Agm97eHfNDNRSOwUgv+wxYEZGf3pcbUBFDaC4Xa+wfU= Subject key identifier: 27:9D:B9:E1:C9:BF:DA:BA:E8:4D:52:BE:69:F0:68:6A:39:0D:C0:FC Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E Certificate issuer: /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E Certificate serial: 08F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft Manifest number: 08E1 Signing time: Wed 22 Oct 2025 21:08:26 +0000 Manifest this update: Wed 22 Oct 2025 21:08:26 +0000 Manifest next update: Wed 29 Oct 2025 21:08:26 +0000 Files and hashes: 1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: SN8qQBNEYMF14z0OovwlXfdb/SOOqeF+5X+g2FPK1xA=) 2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: O/NO2IfdBXfSyfMwGAkT+IgbQvZgtu7lJ1dsaQhj82E=) 3: C011E716845611EFA55F8043C4F9AE02.roa (hash: pkFZgeOoJ8iOEM13k0fNneKGX0rGx1nkPohIG5roll0=) 4: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: yDLtGnYU5lMrLDnFX8vRyhLOoi06rgga2yxVGlgTVrU=) 5: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: WGI7L4FYzb6GYe2YpV7oc/HelbiNBr643jFG1FE873s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2293 (0x8f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E Validity Not Before: Oct 22 21:08:26 2025 GMT Not After : Oct 29 21:08:26 2025 GMT Subject: CN=68f947ca-2793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:e4:16:5e:48:0f:b9:b9:2a:c1:7e:42:5a: 23:54:0a:e5:ad:20:89:d1:43:01:25:82:83:77:94: 9c:4e:26:cd:51:e4:fe:8a:01:97:ac:4a:5b:95:71: a0:f7:f6:24:d6:83:87:6a:e4:23:41:48:11:84:98: 05:df:72:1f:1a:f3:31:e0:0b:e3:64:2f:90:4d:7e: fd:83:05:10:13:72:47:d6:09:5e:81:59:65:66:02: 1b:56:78:e5:b2:6f:12:a4:d2:41:c4:60:5f:57:08: 16:5c:5a:41:79:28:75:f4:dd:ca:6f:09:af:45:31: c7:77:88:3b:fb:33:a1:e8:a1:44:4f:5b:b7:24:10: 67:d3:b3:a7:23:7c:34:8a:6a:80:41:77:4d:21:07: 2e:9d:15:51:d3:6a:fe:b8:c3:d5:f7:75:6d:1c:5a: c3:bf:4c:98:26:6a:f2:0f:b3:ba:50:b1:15:6b:1c: d8:5d:68:71:aa:18:d0:7a:10:29:93:f1:69:4f:ee: 20:e1:b9:a4:6c:c9:90:7e:ba:60:00:49:ca:71:32: ae:48:f1:95:72:3f:c6:a4:9d:34:22:de:26:e4:9a: 5a:29:81:28:6c:fd:a3:67:c4:13:9c:68:36:72:df: 59:b5:3c:6b:8c:42:17:8c:d3:2a:fe:f1:d3:bd:a8: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9D:B9:E1:C9:BF:DA:BA:E8:4D:52:BE:69:F0:68:6A:39:0D:C0:FC X509v3 Authority Key Identifier: keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:91:eb:a6:e9:0d:01:fd:c5:80:27:b7:6b:51:de:a0:32:67: d3:57:d9:60:fb:88:2c:db:e5:1d:4c:2b:dd:35:a7:fd:e9:fd: 15:e2:11:27:8e:2d:6e:c1:f0:e3:14:1b:d4:0c:79:b1:20:dd: e1:37:3d:91:6d:56:8c:ff:a1:1b:0a:1a:0f:de:41:85:14:7b: 1b:0f:8c:77:61:8b:4a:a7:3e:22:77:f0:4f:38:67:5b:8b:39: 91:20:de:6f:17:cf:52:a7:26:97:56:55:33:2d:33:c2:43:72: c5:7d:3b:5f:8c:bd:eb:97:b7:5a:a3:d1:d9:ba:67:fe:1c:84: bf:64:36:66:55:0c:71:46:6d:12:26:ea:2b:e0:e3:70:f5:11: 1b:37:87:03:13:2e:0e:e1:6d:37:da:6f:ef:af:65:83:fc:59: c2:2b:b9:5f:da:2c:97:b8:bc:35:1f:52:05:79:7e:94:7a:22: 84:bc:7f:1a:69:3f:98:c0:43:73:57:9d:dc:79:c8:38:cb:56: 5e:79:64:41:07:b9:66:98:9e:6f:6e:a8:50:02:8e:a8:9e:82: b7:cc:ba:51:88:59:7f:c2:03:62:ef:fd:4c:e4:ba:47:67:95: c4:99:e7:5f:a1:78:e5:6b:fe:4a:1a:82:0f:3d:72:8f:e3:6f: ae:60:60:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDOTcxMTAvBgNVBAUTKDgxOEI4MTIyOTU0NkY2NEE5ODBDM0Q4NkVDNTJGMzEx OTRGMkZEOEUwHhcNMjUxMDIyMjEwODI2WhcNMjUxMDI5MjEwODI2WjAYMRYwFAYD VQQDEw02OGY5NDdjYS0yNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPfkFl5ID7m5KsF+QlojVArlrSCJ0UMBJYKDd5ScTibNUeT+igGXrEpblXGg 9/Yk1oOHauQjQUgRhJgF33IfGvMx4AvjZC+QTX79gwUQE3JH1glegVllZgIbVnjl sm8SpNJBxGBfVwgWXFpBeSh19N3KbwmvRTHHd4g7+zOh6KFET1u3JBBn07OnI3w0 imqAQXdNIQcunRVR02r+uMPV93VtHFrDv0yYJmryD7O6ULEVaxzYXWhxqhjQehAp k/FpT+4g4bmkbMmQfrpgAEnKcTKuSPGVcj/GpJ00It4m5JpaKYEobP2jZ8QTnGg2 ct9ZtTxrjEIXjNMq/vHTvaizJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCedueHJ v9q66E1SvmnwaGo5DcD8MB8GA1UdIwQYMBaAFIGLgSKVRvZKmAw9huxS8xGU8v2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM5Ny9BMEIxRTQ0Q0JD RTcxMUVBOUVERjNFNkRDNEY5QUUwMi9nWXVCSXBWRzlrcVlERDJHN0ZMekVaVHlf WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZdUJJcFZHOWtxWUREMkc3Rkx6RVpUeV9ZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkM5Ny9BMEIxRTQ0Q0JDRTcxMUVBOUVERjNFNkRDNEY5QUUwMi9nWXVCSXBWRzlr cVlERDJHN0ZMekVaVHlfWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACkeum6Q0B/cWAJ7drUd6gMmfTV9lg+4gs2+UdTCvdNaf96f0V4hEn ji1uwfDjFBvUDHmxIN3hNz2RbVaM/6EbChoP3kGFFHsbD4x3YYtKpz4id/BPOGdb izmRIN5vF89SpyaXVlUzLTPCQ3LFfTtfjL3rl7dao9HZumf+HIS/ZDZmVQxxRm0S Juor4ONw9REbN4cDEy4O4W032m/vr2WD/FnCK7lf2iyXuLw1H1IFeX6UeiKEvH8a aT+YwENzV53cecg4y1ZeeWRBB7lmmJ5vbqhQAo6onoK3zLpRiFl/wgNi7/1M5LpH Z5XEmedfoXjla/5KGoIPPXKP42+uYGA4 -----END CERTIFICATE-----Generated at Thu Oct 23 08:41:22 2025 by rpki-client