$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json) Hash identifier: 2k7eaQwtCOF7u4zyBbhkZ5FRfDq5i84wfDSpyN46Wo8= Subject key identifier: 75:DF:C8:49:18:D9:3F:5F:DA:19:BB:DC:63:4D:F5:0B:6E:24:E4:F2 Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft Manifest number: 0491 Signing time: Wed 17 Sep 2025 00:50:29 +0000 Manifest this update: Wed 17 Sep 2025 00:50:29 +0000 Manifest next update: Wed 24 Sep 2025 00:50:29 +0000 Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: Y51xjz2xxqUzggVpMmc+yE718WgbA9STNj4aWdutADQ=) 2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: O1MkwGdKDfVHdsOhHQrlU/aFTqc21EnEwMBW12Asebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Validity Not Before: Sep 17 00:50:29 2025 GMT Not After : Sep 24 00:50:29 2025 GMT Subject: CN=68ca05d5-a7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2f:81:fb:a9:bc:8c:56:43:5d:04:87:3e:ef: d8:42:10:fe:79:50:5c:de:e8:0e:1d:4e:bc:02:17: 92:82:ca:1c:32:05:f1:8c:55:f4:6b:c0:de:fe:82: ca:2c:ac:8e:97:e8:75:e2:88:a1:06:5e:b9:b8:24: 3a:12:3e:b9:ad:73:dd:5b:af:da:03:83:06:bf:c9: 24:46:5d:ae:de:4d:c8:85:56:d5:f2:ee:0e:c3:67: ed:c6:46:8a:63:6a:1e:ab:57:18:00:12:c7:41:cf: 64:85:c7:9f:f9:14:cc:6b:67:9b:8e:6f:cf:00:10: ca:a6:bd:a3:6c:00:8d:6f:50:4f:bb:67:84:2d:83: 53:80:5c:61:48:54:da:50:ae:6a:1f:c4:f9:3f:1f: 37:62:26:05:b3:54:d8:64:8c:95:d1:d8:ff:85:f5: 16:64:4b:50:42:bb:e9:c2:15:c4:00:e0:a9:c2:4b: 5f:00:93:3d:a9:f7:df:76:49:c1:43:b4:da:b1:f8: 90:35:ed:8c:c5:cd:af:4c:da:ed:8d:fa:ab:d7:ad: d8:63:0c:c7:fe:f9:a2:e1:45:74:70:88:9f:e0:38: cc:00:b5:90:81:b1:ac:87:ff:b5:3c:5e:91:0a:7c: f9:98:f4:4a:ac:65:9c:68:37:f5:c7:77:63:10:6c: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:C8:49:18:D9:3F:5F:DA:19:BB:DC:63:4D:F5:0B:6E:24:E4:F2 X509v3 Authority Key Identifier: keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f5:d4:8b:25:c2:c5:75:d0:c7:58:b8:d4:35:c5:fd:89:b6: ce:15:03:9e:0e:34:76:56:35:91:e3:c3:45:7d:7b:fd:f5:52: cc:74:37:8e:ab:d0:48:e3:7c:8a:d8:c0:de:7f:f2:b0:7b:e0: 5d:48:16:4b:1b:16:a0:91:1e:9c:d8:f9:9a:93:6f:3d:28:89: f9:8b:0d:5d:8d:45:2d:dc:c3:35:19:49:90:e3:22:47:e2:cc: 44:3b:d1:7b:4c:42:fe:8e:eb:00:29:d7:4d:5e:fe:f5:b5:18: 6c:d1:f0:7b:7f:a0:ac:19:28:e3:f7:bc:e2:ad:ce:14:07:21: a0:4f:f8:9b:dd:d6:64:a2:a8:ef:ec:73:08:00:63:45:2e:7a: 9e:87:8b:b9:d4:39:1b:73:be:ca:01:b9:11:83:a3:45:3c:ec: 61:6b:a7:fc:75:0b:f5:a3:95:b7:d0:b4:22:21:32:fb:9f:67: 21:16:3e:a0:4a:aa:fb:4e:bf:de:73:0e:f2:f2:f1:e9:e5:3b: 62:da:d1:12:03:08:52:ec:0b:04:2f:d0:dc:36:39:86:cd:8b: 2c:4d:b0:55:ee:f2:f0:50:92:55:ed:48:da:53:55:f5:28:27: 1f:c5:f6:be:b4:97:02:3c:f0:a2:6c:7c:04:db:cc:a4:2e:54: a7:a2:28:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUE4RDExMC8GA1UEBRMoODJEODE4ODYxREQ0QTcwRjc3MDhEMjA1RTRCODlFODUx NENBMUY2QzAeFw0yNTA5MTcwMDUwMjlaFw0yNTA5MjQwMDUwMjlaMBgxFjAUBgNV BAMTDTY4Y2EwNWQ1LWE3ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhL4H7qbyMVkNdBIc+79hCEP55UFze6A4dTrwCF5KCyhwyBfGMVfRrwN7+gsos rI6X6HXiiKEGXrm4JDoSPrmtc91br9oDgwa/ySRGXa7eTciFVtXy7g7DZ+3GRopj ah6rVxgAEsdBz2SFx5/5FMxrZ5uOb88AEMqmvaNsAI1vUE+7Z4Qtg1OAXGFIVNpQ rmofxPk/HzdiJgWzVNhkjJXR2P+F9RZkS1BCu+nCFcQA4KnCS18Akz2p9992ScFD tNqx+JA17YzFza9M2u2N+qvXrdhjDMf++aLhRXRwiJ/gOMwAtZCBsayH/7U8XpEK fPmY9EqsZZxoN/XHd2MQbDSlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdd/ISRjZ P1/aGbvcY031C24k5PIwHwYDVR0jBBgwFoAUgtgYhh3Upw93CNIF5LiehRTKH2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QThELzMyRjFGNEMyODNF OTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3RnWWhoM1VwdzkzQ05JRjVMaWVoUlRLSDJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5 M0NOSUY1TGllaFJUS0gydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACH11IslwsV10MdYuNQ1xf2Jts4VA54ONHZWNZHjw0V9e/31Usx0N46r 0EjjfIrYwN5/8rB74F1IFksbFqCRHpzY+ZqTbz0oifmLDV2NRS3cwzUZSZDjIkfi zEQ70XtMQv6O6wAp101e/vW1GGzR8Ht/oKwZKOP3vOKtzhQHIaBP+Jvd1mSiqO/s cwgAY0Uuep6Hi7nUORtzvsoBuRGDo0U87GFrp/x1C/WjlbfQtCIhMvufZyEWPqBK qvtOv95zDvLy8enlO2La0RIDCFLsCwQv0Nw2OYbNiyxNsFXu8vBQklXtSNpTVfUo Jx/F9r60lwI88KJsfATbzKQuVKeiKLw= -----END CERTIFICATE-----Generated at Fri Sep 19 00:44:18 2025 by rpki-client