$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: 8K4sN9bcIN8nrGSAT1FexV+qvw7RX09sYR2D7IEAXWM= Subject key identifier: 65:FE:54:04:F6:F8:F8:8F:24:14:48:84:CA:BE:9F:E6:77:36:BF:FF Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: C3 Signing time: Wed 05 Nov 2025 06:06:25 +0000 Manifest this update: Wed 05 Nov 2025 06:06:25 +0000 Manifest next update: Wed 12 Nov 2025 06:06:24 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: It+deB5C9w2C2lo3CLsXLOcQCtpdK8f4bFn46Z8gHR4=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: b7PxFokUIXPBGz+iss/nauBD0ImGfyI3acw64tuMWC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Nov 5 06:06:25 2025 GMT Not After : Nov 12 06:06:24 2025 GMT Subject: CN=690ae961-a792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:b9:3d:87:c7:cb:e9:07:a5:95:d8:6d:a1: ca:03:82:3f:f8:4a:7b:cf:18:bf:5b:f2:eb:23:c7: dc:6c:77:f8:ff:d5:31:d9:81:1d:ec:eb:6f:0c:6a: 99:02:d2:cc:fd:d2:fa:46:d8:f5:bc:6c:55:57:26: 30:6a:89:d5:20:69:95:45:9d:45:cc:32:e9:5d:31: 7b:e8:b5:60:0e:cd:4b:2e:29:5d:8c:44:1b:e6:bc: b1:a7:93:32:b2:eb:a9:36:99:27:66:57:af:2b:40: f1:81:f5:8f:e9:4f:26:5e:52:c6:69:08:e1:31:4c: 06:72:c3:a7:2b:79:4c:da:b2:ce:98:13:15:c2:50: 7b:52:d1:2d:2d:30:92:fb:66:82:66:4e:8f:92:b5: 4d:18:88:13:c7:5b:e7:0f:59:e6:5a:67:91:6b:77: 08:62:45:56:2d:34:ae:36:40:a2:d0:63:cb:d3:e3: fe:42:6c:12:14:a9:58:e4:a9:cc:07:3e:76:4c:53: 9c:d0:52:0e:53:35:c3:fb:40:f9:9d:46:f1:e5:c3: 36:47:29:5a:84:5f:80:cc:08:02:92:79:0a:1b:60: 61:6c:22:b8:04:4d:04:09:3b:64:44:b2:6d:70:41: a6:e1:9e:de:5e:bb:75:90:32:1b:f4:f7:19:41:85: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FE:54:04:F6:F8:F8:8F:24:14:48:84:CA:BE:9F:E6:77:36:BF:FF X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5d:53:05:2a:2e:de:bb:8e:bc:8a:fd:89:7f:9b:7f:4a:3e: 02:7d:64:bc:fd:90:e3:6f:ba:29:5a:4a:4c:62:84:57:aa:5f: 22:8e:a4:c6:45:25:ed:f5:ee:86:9d:22:ff:14:d0:24:2e:e7: 7a:f3:80:be:3b:a1:df:46:7b:04:7e:c8:31:08:b2:31:8b:f2: e3:64:cb:77:0d:70:5c:be:4a:49:4d:cb:4a:08:45:99:83:46: 19:81:ed:9b:82:da:94:44:1e:51:a8:59:9f:3e:c6:e9:60:65: bd:af:88:23:f6:20:66:43:88:53:f6:99:1f:2c:f5:a5:9a:45: 19:10:ce:a3:f0:a5:59:f5:5f:c5:fa:2d:81:12:9b:dc:66:ab: 38:5d:73:27:e4:d2:65:4a:fc:e3:29:25:c9:13:f6:7b:54:b0: e7:b0:d7:91:40:41:cd:e6:f8:9e:0a:54:b7:ca:2d:bd:9b:c1: 5c:84:fe:3b:20:40:09:b5:03:da:d7:7a:49:47:d2:0b:44:08: b2:b1:f9:7e:cb:f1:e6:50:30:fe:9d:71:a7:5d:71:7a:db:0a: 39:8c:67:34:14:c4:d4:69:ab:c8:c9:6e:60:0a:d4:45:7a:66: 60:00:9d:24:3f:60:dc:32:83:16:2d:da:b8:f7:63:38:e6:7b: e0:9c:24:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy NDIyRUI2NkYwHhcNMjUxMTA1MDYwNjI1WhcNMjUxMTEyMDYwNjI0WjAYMRYwFAYD VQQDEw02OTBhZTk2MS1hNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtu5PYfHy+kHpZXYbaHKA4I/+Ep7zxi/W/LrI8fcbHf4/9Ux2YEd7OtvDGqZ AtLM/dL6Rtj1vGxVVyYwaonVIGmVRZ1FzDLpXTF76LVgDs1LLildjEQb5ryxp5My suupNpknZlevK0DxgfWP6U8mXlLGaQjhMUwGcsOnK3lM2rLOmBMVwlB7UtEtLTCS +2aCZk6PkrVNGIgTx1vnD1nmWmeRa3cIYkVWLTSuNkCi0GPL0+P+QmwSFKlY5KnM Bz52TFOc0FIOUzXD+0D5nUbx5cM2RylahF+AzAgCknkKG2BhbCK4BE0ECTtkRLJt cEGm4Z7eXrt1kDIb9PcZQYUoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX+VAT2 +PiPJBRIhMq+n+Z3Nr//MB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0 bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51 VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeXVMFKi7eu468iv2Jf5t/Sj4CfWS8/ZDjb7opWkpMYoRXql8ijqTG RSXt9e6GnSL/FNAkLud684C+O6HfRnsEfsgxCLIxi/LjZMt3DXBcvkpJTctKCEWZ g0YZge2bgtqURB5RqFmfPsbpYGW9r4gj9iBmQ4hT9pkfLPWlmkUZEM6j8KVZ9V/F +i2BEpvcZqs4XXMn5NJlSvzjKSXJE/Z7VLDnsNeRQEHN5vieClS3yi29m8FchP47 IEAJtQPa13pJR9ILRAiysfl+y/HmUDD+nXGnXXF62wo5jGc0FMTUaavIyW5gCtRF emZgAJ0kP2DcMoMWLdq492M45nvgnCRz -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:54 2025 by rpki-client