$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: cmk4B/Zrj3y3SOTIE66KtdZgtx/hfnd2Eyqt1HHNfOA= Subject key identifier: 55:BB:F5:84:02:E1:AC:42:9F:0D:48:C0:0E:B9:5A:2E:9E:F5:18:2B Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3B45 Signing time: Fri 24 Oct 2025 14:20:40 +0000 Manifest this update: Fri 24 Oct 2025 14:20:39 +0000 Manifest next update: Fri 31 Oct 2025 14:20:39 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: KwCqbNsqEnfFlovin87jQSRrLXxWhBxUZYTFJtJImyI=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: zIbTXKElzSRDJDgFmgpHOKMMizwQLMFjRvUcTHCmSxI=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: +mgdTNP414SUTOGaWf8OsfORlNcz2M/R4gZld0HJ9Ck=) 4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: zGDGvlgT7VbRq78nqt2KCJawvdgk5RBzL4wyIDNIpkw=) 5: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: o3x3WNu8DVpOALptWI63rwh2Z21Ks2owpGrEUHSGlCk=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: TQSzjpxrOYYy8gpn8cpyl7UgdqE6NAtOL8QTPBk1Mrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16312 (0x3fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Oct 24 14:20:39 2025 GMT Not After : Oct 31 14:20:39 2025 GMT Subject: CN=68fb8b38-03de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:89:1c:6e:71:47:cf:f6:70:80:58:7f:00: 3c:ac:f5:25:d4:81:8d:9d:47:04:4e:da:cf:86:5e: 84:ce:6f:53:27:b1:0b:91:8c:6e:15:cf:69:11:8c: dc:0c:33:88:1e:ed:1f:a3:85:75:54:42:04:58:d4: 56:06:e9:0c:da:33:4e:e1:cf:7f:84:c5:8a:d6:4d: 51:c5:41:ca:73:44:9e:1a:1c:2e:d1:e0:28:6f:bb: 31:37:c2:0c:4c:b8:0f:d1:1e:ab:3b:78:69:f8:e7: 2e:5e:6f:8b:ef:6a:47:aa:00:ab:e6:15:dc:55:cf: be:5b:cc:78:7a:a8:f3:f1:64:ce:af:39:9b:70:48: 83:a8:b9:f6:d9:28:f6:bd:84:7b:59:a2:f6:66:cc: cc:1d:ee:31:f9:e7:1d:ce:52:b4:c3:e0:5d:23:51: 14:ce:f9:be:90:68:e1:8c:3b:d0:a1:57:13:03:ef: cc:14:b9:e3:3a:b4:17:12:a9:f5:7d:00:86:29:71: 03:fc:38:64:9e:e0:8d:8c:96:d9:00:dd:ae:00:f8: cb:a9:29:8d:5f:87:75:08:b0:a1:5e:8c:63:e3:8e: 7d:db:15:ad:37:09:31:01:84:78:6d:1a:15:bd:92: 14:a8:33:df:f9:6b:cd:58:ce:d2:aa:a7:62:52:1b: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BB:F5:84:02:E1:AC:42:9F:0D:48:C0:0E:B9:5A:2E:9E:F5:18:2B X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:39:e1:5b:b4:4b:e9:9b:ac:bb:4f:4a:df:8f:50:f8:e9:a6: 61:ee:59:22:43:75:3b:ca:a4:b7:5e:77:7a:6b:f9:99:d8:8c: 38:29:d7:00:cd:7a:f4:a5:b5:d4:f1:1e:5c:91:5e:16:dd:1a: 8c:47:73:b3:c2:22:69:12:34:be:b2:d5:07:88:c0:a1:f5:ed: 52:9f:10:58:b7:f7:dd:17:13:bd:11:8d:68:77:6b:55:a6:23: 16:79:81:ef:aa:84:f4:02:73:72:3b:4e:ba:21:58:57:09:f5: 70:19:1d:91:63:8d:c9:ae:40:80:20:31:26:0c:9c:20:b4:33: 3b:5e:b0:7c:62:12:0d:cb:a9:ff:87:61:42:ed:d1:6c:07:31: a0:29:14:af:3b:c2:b6:2b:34:76:31:5d:8c:05:6b:71:34:a8: b7:53:9b:a7:f7:c6:04:18:e4:28:3c:ac:c6:69:47:2f:34:0d: 83:50:12:23:0e:c1:32:00:e9:d6:fb:4b:6b:b5:6f:41:30:1c: 90:3a:23:9e:bc:7b:99:7c:ae:ce:c0:3d:fb:6a:90:7c:57:23: d9:ec:25:05:1b:21:e5:84:2e:ba:d8:94:7b:ec:1e:92:58:74: fa:6e:ce:55:90:8f:46:d0:25:9b:d5:cd:85:8e:03:69:18:0d: 89:79:74:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUxMDI0MTQyMDM5WhcNMjUxMDMxMTQyMDM5WjAYMRYwFAYD VQQDEw02OGZiOGIzOC0wM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8KJHG5xR8/2cIBYfwA8rPUl1IGNnUcETtrPhl6Ezm9TJ7ELkYxuFc9pEYzc DDOIHu0fo4V1VEIEWNRWBukM2jNO4c9/hMWK1k1RxUHKc0SeGhwu0eAob7sxN8IM TLgP0R6rO3hp+OcuXm+L72pHqgCr5hXcVc++W8x4eqjz8WTOrzmbcEiDqLn22Sj2 vYR7WaL2ZszMHe4x+ecdzlK0w+BdI1EUzvm+kGjhjDvQoVcTA+/MFLnjOrQXEqn1 fQCGKXED/DhknuCNjJbZAN2uAPjLqSmNX4d1CLChXoxj44592xWtNwkxAYR4bRoV vZIUqDPf+WvNWM7SqqdiUhvohwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW79YQC 4axCnw1IwA65Wi6e9RgrMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeOeFbtEvpm6y7T0rfj1D46aZh7lkiQ3U7yqS3Xnd6a/mZ2Iw4KdcA zXr0pbXU8R5ckV4W3RqMR3OzwiJpEjS+stUHiMCh9e1SnxBYt/fdFxO9EY1od2tV piMWeYHvqoT0AnNyO066IVhXCfVwGR2RY43JrkCAIDEmDJwgtDM7XrB8YhINy6n/ h2FC7dFsBzGgKRSvO8K2KzR2MV2MBWtxNKi3U5un98YEGOQoPKzGaUcvNA2DUBIj DsEyAOnW+0trtW9BMByQOiOevHuZfK7OwD37apB8VyPZ7CUFGyHlhC662JR77B6S WHT6bs5VkI9G0CWb1c2FjgNpGA2JeXQO -----END CERTIFICATE-----Generated at Sat Oct 25 23:11:13 2025 by rpki-client