$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: yBL17Fjki+WOJWqu7N+Z3vHuYOZjtP5aBWFNjfDvQCo= Subject key identifier: 4C:3F:AA:DD:5A:D0:4A:B8:24:50:CA:8E:C6:2B:33:4B:8B:49:88:66 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 67 Signing time: Fri 19 Sep 2025 07:45:47 +0000 Manifest this update: Fri 19 Sep 2025 07:45:46 +0000 Manifest next update: Fri 26 Sep 2025 07:45:46 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: QGPL8GZeQQPcHfOlmCCzo5OJjc55en9RN9m30h2mLz4=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: Sep 19 07:45:46 2025 GMT Not After : Sep 26 07:45:46 2025 GMT Subject: CN=68cd0a2a-b11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:32:cd:a0:bf:fb:bc:19:7d:53:62:a6:b3: 2d:03:a3:b2:bc:7e:61:15:07:2f:d6:46:a7:0b:1f: da:0c:55:da:1b:27:56:5d:d3:d0:25:6b:b2:98:12: 3b:e7:b5:09:ef:75:e1:9f:c1:42:2a:10:c4:4e:f6: 7b:0d:8e:1d:11:26:d8:6e:5e:b5:86:5b:7d:46:e0: 51:f8:2a:d4:0a:c8:5f:85:80:94:ba:05:8b:e2:3f: c4:52:5f:2d:c6:3e:06:04:9f:85:f2:81:24:19:cc: f8:2d:5e:26:88:4d:2b:0b:93:e9:df:b1:b9:5d:39: 9b:d1:fd:fc:31:3b:62:69:31:00:5f:c9:15:10:ae: 18:0f:d7:ea:92:9e:6b:1f:7a:fd:bf:bd:dc:de:b4: fd:d7:4d:0e:aa:d9:6b:98:44:2b:02:5c:4e:93:1b: ba:29:e1:b0:d8:88:79:b4:31:06:82:b9:d0:74:8b: 1e:31:d6:95:99:32:d5:25:3b:d2:54:5b:31:12:17: 75:f5:ce:07:ec:22:98:9d:4f:b3:05:53:9b:e7:eb: 22:22:15:b9:cd:e2:9e:25:c3:a2:fa:54:94:07:3f: 45:24:09:4d:a1:26:75:15:bf:d4:ce:84:b0:2b:85: db:38:fa:bc:8f:01:c5:d2:cd:3f:f0:6a:69:2b:92: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3F:AA:DD:5A:D0:4A:B8:24:50:CA:8E:C6:2B:33:4B:8B:49:88:66 X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ac:6e:39:09:25:09:bb:2b:1d:d4:83:ac:e7:17:ca:a7:a0: 40:a2:c5:15:e4:78:3c:1b:17:a7:dd:68:a9:25:24:e8:04:f8: 61:79:e1:dc:57:a9:92:ed:09:65:6b:9e:62:32:3e:b5:c8:94: 7a:75:33:48:cb:94:63:9a:fc:9c:dc:af:da:dd:91:81:42:64: 9b:ab:63:f9:1f:07:56:83:aa:6e:28:c4:6d:ed:28:2b:d2:24: 9d:84:a3:a5:b8:50:70:28:09:e4:40:5b:56:b5:fa:26:2a:d9: 76:c8:41:b2:59:a8:cf:87:6b:11:76:bd:e6:4c:50:87:2a:f6: cf:14:86:0a:af:40:cc:7a:f9:ef:46:7f:e1:69:c1:d3:b6:5a: 63:79:2e:61:e1:53:ce:99:e9:0d:f9:95:75:de:1d:c7:95:da: 37:3e:6c:0d:cb:e5:d1:62:f2:0e:4b:da:6d:2d:b2:77:2c:c5: 0e:3e:bb:6c:d9:a1:06:13:ff:d1:a0:4a:87:0b:1d:c3:ff:2f: a9:ae:b1:4f:4a:0b:1a:86:01:20:e0:f1:04:ea:0f:2c:6e:69: 0e:e8:7c:26:37:91:e6:97:eb:ec:43:a2:04:00:ab:7d:fd:12: 37:40:51:c1:b9:8b:db:ad:19:34:95:4a:4f:93:fd:6d:22:c5: c1:06:30:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTA5MTkwNzQ1NDZaFw0yNTA5MjYwNzQ1NDZaMBgxFjAUBgNV BAMTDTY4Y2QwYTJhLWIxMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP6zLNoL/7vBl9U2Kmsy0Do7K8fmEVBy/WRqcLH9oMVdobJ1Zd09Ala7KYEjvn tQnvdeGfwUIqEMRO9nsNjh0RJthuXrWGW31G4FH4KtQKyF+FgJS6BYviP8RSXy3G PgYEn4XygSQZzPgtXiaITSsLk+nfsbldOZvR/fwxO2JpMQBfyRUQrhgP1+qSnmsf ev2/vdzetP3XTQ6q2WuYRCsCXE6TG7op4bDYiHm0MQaCudB0ix4x1pWZMtUlO9JU WzESF3X1zgfsIpidT7MFU5vn6yIiFbnN4p4lw6L6VJQHP0UkCU2hJnUVv9TOhLAr hds4+ryPAcXSzT/wamkrkmnZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTD+q3VrQ SrgkUMqOxiszS4tJiGYwHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RURFLzU5MDREOTcwRkI1QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1D SWFPWW5VZ29hRFlxSDhFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJSsbjkJJQm7Kx3Ug6znF8qnoECixRXkeDwbF6fdaKklJOgE+GF54dxX qZLtCWVrnmIyPrXIlHp1M0jLlGOa/Jzcr9rdkYFCZJurY/kfB1aDqm4oxG3tKCvS JJ2Eo6W4UHAoCeRAW1a1+iYq2XbIQbJZqM+HaxF2veZMUIcq9s8UhgqvQMx6+e9G f+FpwdO2WmN5LmHhU86Z6Q35lXXeHceV2jc+bA3L5dFi8g5L2m0tsncsxQ4+u2zZ oQYT/9GgSocLHcP/L6musU9KCxqGASDg8QTqDyxuaQ7ofCY3keaX6+xDogQAq339 EjdAUcG5i9utGTSVSk+T/W0ixcEGMDo= -----END CERTIFICATE-----Generated at Fri Sep 19 12:20:31 2025 by rpki-client