$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: mjeKOKA2V8oRlxwMUYPIFKwo9YjEqj7qfapBThMH8x0= Subject key identifier: 91:BC:93:C6:A7:AA:FA:95:78:7E:F6:88:88:46:2A:F9:41:25:A5:8D Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 22F8 Signing time: Sun 26 Oct 2025 15:58:24 +0000 Manifest this update: Sun 26 Oct 2025 15:58:24 +0000 Manifest next update: Sun 02 Nov 2025 15:58:24 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: VYov5KTtzN9PAo4NqeRZB15GF8E778OYoYJkRaQiezc=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: K3fvldT9Mc/lZb+wx6WzuwlTVaS/fmxJVle6WcpqwVI=) 3: ECB36EBCA54211F08D0FD466C4F9AE02.roa (hash: SuKYaB6T0tGfEKvGlTa0CLqgp2xb848WliNxbdmfrSw=) 4: 55D95690A13811F0BF53567FC4F9AE02.roa (hash: wfIg4YQ25Mg9FB53wM9axrO11ggNzJyyDGc+cl9NhDU=) 5: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (hash: EqPoHokWPSQ1L2lcAAXRF+UXl8dKiWjU9iYk2iUWo3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 15:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9031 (0x2347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Oct 26 15:58:24 2025 GMT Not After : Nov 2 15:58:24 2025 GMT Subject: CN=68fe4520-443b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:5c:98:89:52:22:c1:3d:5d:7c:f0:3a:8d: 34:da:46:27:a2:85:73:db:68:e6:9d:1b:81:f9:6e: b5:16:ce:26:50:c8:db:f4:ea:69:52:62:e8:0e:39: c9:08:a7:76:1b:b5:3d:0e:86:59:50:e6:21:f3:7d: e4:4e:81:69:71:62:1f:d9:94:45:58:24:d6:27:4f: 79:5d:fd:3a:31:c5:9d:0f:4c:4f:0a:19:a4:d5:8e: 1e:cc:ac:20:60:f7:17:d4:a2:f2:59:6a:62:03:63: ca:21:3b:4a:20:55:b3:bc:ff:a4:78:f3:b8:6b:ed: 52:b6:8d:cc:a2:c5:31:fc:b2:03:a7:2a:cd:99:33: fb:03:37:63:55:be:bc:61:07:00:ab:f6:e4:61:2b: 4b:7e:c1:52:ac:e0:88:10:ff:43:0d:36:59:0d:bc: 11:8e:53:cd:32:e1:50:69:3d:bf:8b:1e:1d:fc:ff: e8:03:d5:3c:80:2c:3d:51:8f:cf:c4:e3:69:3d:fd: a0:0e:f4:0f:fa:1e:02:1e:fa:22:c9:03:22:b3:8b: 2a:c6:4b:07:e4:4b:1c:36:35:5e:d0:ae:e9:9c:2e: d4:81:8c:6e:7d:d9:e9:1d:bb:c2:c6:87:47:6f:5a: b1:8c:55:e1:99:4d:78:1c:c6:27:83:77:34:c5:e3: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BC:93:C6:A7:AA:FA:95:78:7E:F6:88:88:46:2A:F9:41:25:A5:8D X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b9:26:d3:7c:ce:9f:ec:d7:93:96:1f:1c:2c:0c:83:6a:88: 90:bf:b1:8f:4b:41:21:a3:31:c8:5c:66:23:bd:cb:38:17:4a: ae:f8:9c:9c:2a:a5:f4:08:24:b1:48:e0:f1:33:f6:1f:58:33: c6:13:78:85:7f:87:0f:8d:33:ba:dd:71:9d:d4:45:70:76:d9: af:e4:ac:21:03:60:f3:5b:56:d9:1f:45:8a:50:aa:86:c0:af: 7d:6a:ba:b6:72:38:14:e4:05:95:67:e7:c4:5a:62:c7:0a:58: 3e:3b:06:b6:f3:87:06:26:1c:f2:93:27:18:bc:52:34:eb:11: cb:12:57:fe:e6:79:d1:18:54:ac:c9:c3:ce:25:df:68:34:46: e4:e4:e5:03:73:2f:15:8a:1d:a8:7e:d8:e9:4e:da:1d:cc:f6: 3d:bf:13:fd:95:f4:64:d7:75:98:ab:0f:89:c1:97:83:81:7c: 3d:9d:58:20:a2:ec:33:db:75:43:9c:a9:8d:23:fe:29:49:15: 02:aa:46:1f:92:cc:69:24:ee:6d:79:bb:85:93:2d:56:56:ef: 93:d1:91:8c:e5:76:4a:86:82:44:ea:99:c0:54:37:a4:c0:7a: 0a:91:0a:15:b4:7a:12:27:9e:4b:ff:a4:15:af:09:8f:61:7f: f8:20:2a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUxMDI2MTU1ODI0WhcNMjUxMTAyMTU1ODI0WjAYMRYwFAYD VQQDEw02OGZlNDUyMC00NDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7JcmIlSIsE9XXzwOo002kYnooVz22jmnRuB+W61Fs4mUMjb9OppUmLoDjnJ CKd2G7U9DoZZUOYh833kToFpcWIf2ZRFWCTWJ095Xf06McWdD0xPChmk1Y4ezKwg YPcX1KLyWWpiA2PKITtKIFWzvP+kePO4a+1Sto3MosUx/LIDpyrNmTP7AzdjVb68 YQcAq/bkYStLfsFSrOCIEP9DDTZZDbwRjlPNMuFQaT2/ix4d/P/oA9U8gCw9UY/P xONpPf2gDvQP+h4CHvoiyQMis4sqxksH5EscNjVe0K7pnC7UgYxufdnpHbvCxodH b1qxjFXhmU14HMYng3c0xePzbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG8k8an qvqVeH72iIhGKvlBJaWNMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6uSbTfM6f7NeTlh8cLAyDaoiQv7GPS0EhozHIXGYjvcs4F0qu+Jyc KqX0CCSxSODxM/YfWDPGE3iFf4cPjTO63XGd1EVwdtmv5KwhA2DzW1bZH0WKUKqG wK99arq2cjgU5AWVZ+fEWmLHClg+Owa284cGJhzykycYvFI06xHLElf+5nnRGFSs ycPOJd9oNEbk5OUDcy8Vih2oftjpTtodzPY9vxP9lfRk13WYqw+JwZeDgXw9nVgg ouwz23VDnKmNI/4pSRUCqkYfksxpJO5tebuFky1WVu+T0ZGM5XZKhoJE6pnAVDek wHoKkQoVtHoSJ55L/6QVrwmPYX/4ICph -----END CERTIFICATE-----Generated at Tue Oct 28 06:25:16 2025 by rpki-client