$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: 59W7NDLsADCE2r0pocYbNFlIUTcEuPwMlDyebVxakBY= Subject key identifier: 36:96:BF:AF:2B:10:1E:EC:5C:2A:E6:E0:5A:25:00:4F:03:DA:C1:2A Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03FD Signing time: Mon 03 Nov 2025 00:24:48 +0000 Manifest this update: Mon 03 Nov 2025 00:24:47 +0000 Manifest next update: Mon 10 Nov 2025 00:24:47 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: zAqR8nRaZWislU5//uHZ8DPjJwpzUpJV1FoNj25yWmw=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Nov 3 00:24:47 2025 GMT Not After : Nov 10 00:24:47 2025 GMT Subject: CN=6907f650-af2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:ac:2a:8e:b0:2a:8f:e9:5f:24:7c:2b:be: 8e:5b:a7:2b:1f:e8:f4:7c:75:8c:32:07:55:42:66: 5e:45:06:f2:84:70:8c:da:4d:3a:ff:33:a8:e0:e7: f3:30:57:7a:c9:7d:d6:05:a3:10:4d:f9:e3:ee:c6: e1:ad:ca:21:78:9a:08:49:67:aa:8a:b1:ab:e7:fd: 21:ce:2d:85:68:fa:93:1f:26:6d:3f:a9:0e:5c:07: 99:b8:c5:6f:b2:2f:40:43:c8:8e:99:7a:8f:20:ce: 1b:2c:16:83:7d:9f:2f:38:2c:dc:43:33:cf:67:ff: ce:ca:3a:f4:6c:94:21:58:5a:ad:2d:ed:33:15:97: 3e:50:f7:19:31:85:03:8c:14:4b:ef:b0:db:a2:27: 48:6a:78:bf:ca:1b:ca:6d:35:60:42:88:6b:ad:d5: 6b:8e:07:0f:90:87:8f:27:e9:8f:99:dd:b7:d3:be: fa:11:c4:df:d6:e8:ca:6d:48:22:fc:89:82:99:9d: 0e:2c:f1:01:96:a5:81:b8:19:a6:dd:73:6e:e8:81: 3b:f4:78:36:2c:42:ad:b8:78:f8:a5:d5:f1:7a:5c: 32:e3:ae:5f:9a:a3:08:ff:6b:2a:e1:c7:36:6c:91: 3c:cc:f0:42:a4:a7:6e:6f:38:77:e0:7d:48:19:f7: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:96:BF:AF:2B:10:1E:EC:5C:2A:E6:E0:5A:25:00:4F:03:DA:C1:2A X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cc:53:c2:a8:7c:c4:8e:75:f2:21:96:3c:8d:96:95:a6:2c: 82:31:6c:b6:60:06:2e:f7:c3:c2:a4:45:45:21:45:2b:04:00: a2:9b:3b:ee:c8:af:e2:53:a7:90:87:44:5e:cd:0b:2e:0a:08: 68:84:4f:be:b5:40:60:43:37:9a:79:a5:62:e5:3a:f8:13:05: 21:90:01:18:33:61:0d:ad:93:72:3f:bf:b5:59:ee:43:53:0c: b1:21:37:48:fd:cf:b7:aa:ee:4f:25:89:f2:98:70:3f:eb:05: 80:3d:30:2f:0d:e1:a3:47:7b:43:f5:b2:9c:6a:f1:fd:bf:4a: ec:94:2c:31:47:52:bc:43:30:96:a7:eb:19:27:3c:a4:56:ee: 1a:22:0e:f3:6e:b6:16:de:55:28:7c:d2:a5:a2:e8:39:a4:f1: b3:70:4f:69:a3:ac:7e:12:3f:17:3e:90:4a:8a:ff:0e:77:79: 94:74:a9:97:23:d7:27:16:41:b4:92:34:7a:a3:b5:ad:e3:ed: 7c:1d:1b:23:92:de:e9:4d:88:6c:9d:ec:c8:00:9f:76:40:54: a7:4f:be:81:4e:c6:b4:17:75:46:6a:29:e4:5c:2b:4e:50:e9: 0e:f9:3d:9a:6e:a7:6c:80:19:07:e0:10:cc:64:62:db:d4:c1: 09:2b:f6:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUxMTAzMDAyNDQ3WhcNMjUxMTEwMDAyNDQ3WjAYMRYwFAYD VQQDEw02OTA3ZjY1MC1hZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwCsKo6wKo/pXyR8K76OW6crH+j0fHWMMgdVQmZeRQbyhHCM2k06/zOo4Ofz MFd6yX3WBaMQTfnj7sbhrcoheJoISWeqirGr5/0hzi2FaPqTHyZtP6kOXAeZuMVv si9AQ8iOmXqPIM4bLBaDfZ8vOCzcQzPPZ//Oyjr0bJQhWFqtLe0zFZc+UPcZMYUD jBRL77DboidIani/yhvKbTVgQohrrdVrjgcPkIePJ+mPmd230776EcTf1ujKbUgi /ImCmZ0OLPEBlqWBuBmm3XNu6IE79Hg2LEKtuHj4pdXxelwy465fmqMI/2sq4cc2 bJE8zPBCpKdubzh34H1IGfezjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaWv68r EB7sXCrm4FolAE8D2sEqMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCazFPCqHzEjnXyIZY8jZaVpiyCMWy2YAYu98PCpEVFIUUrBACimzvu yK/iU6eQh0RezQsuCghohE++tUBgQzeaeaVi5Tr4EwUhkAEYM2ENrZNyP7+1We5D UwyxITdI/c+3qu5PJYnymHA/6wWAPTAvDeGjR3tD9bKcavH9v0rslCwxR1K8QzCW p+sZJzykVu4aIg7zbrYW3lUofNKloug5pPGzcE9po6x+Ej8XPpBKiv8Od3mUdKmX I9cnFkG0kjR6o7Wt4+18HRsjkt7pTYhsnezIAJ92QFSnT76BTsa0F3VGainkXCtO UOkO+T2abqdsgBkH4BDMZGLb1MEJK/Zy -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:20 2025 by rpki-client