$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: 6prCj5WW+kFQBauLwwQxgZ11MM1DdBa28OUMu2v35E0= Subject key identifier: D0:36:DB:FC:53:B5:7B:9B:3B:89:B7:48:94:6C:E5:01:F9:8E:9D:3B Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 0197 Signing time: Mon 03 Nov 2025 03:28:13 +0000 Manifest this update: Mon 03 Nov 2025 03:28:12 +0000 Manifest next update: Mon 10 Nov 2025 03:28:12 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: YT6jmSRgm/epdlMJz257/9Y9qW7xOv12ZyQdk3XcIkk=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: 2wLVZsO1YLWnfKEgyqwWeI7d6uTw73iY7K/Cbc0W2X0=) 3: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: 5lyCUd1mysctWfVlvXwlmX0rzKEQmNZ6o4CWCKrOtng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Nov 3 03:28:12 2025 GMT Not After : Nov 10 03:28:12 2025 GMT Subject: CN=6908214d-89d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:a1:75:9f:50:be:af:a8:eb:d0:75:69:ca: 08:84:32:e2:17:76:00:91:5e:82:aa:4f:d8:33:a6: a5:8b:48:00:a3:85:27:96:6e:37:02:34:4e:c7:ae: 9f:59:fe:f1:63:98:4d:8d:37:ac:7b:25:6e:9b:2d: 5d:7a:a1:de:10:a1:d9:f8:05:7b:64:85:d1:c0:43: a0:dd:6a:43:79:17:44:aa:5b:47:6a:40:d8:3c:6a: 27:6a:3e:f3:a0:f3:41:89:68:81:b8:2a:2e:e4:73: 68:05:b0:5d:02:c6:df:9c:1b:3e:24:28:42:98:23: 74:94:de:66:49:f0:90:a3:65:79:cc:73:9e:1a:b6: b4:a3:a8:16:ac:bf:33:c2:15:e3:7e:5e:8e:8f:10: 16:e3:cb:85:cb:d6:f6:4c:0f:47:9b:57:21:6d:11: 04:a3:96:0d:1e:d2:f8:36:96:a2:6e:1d:f6:b8:8b: ae:48:b9:ef:6d:04:17:65:af:37:06:38:0d:51:50: 89:95:32:25:0f:dc:4a:e5:8c:2d:35:f3:f4:38:69: cf:34:ff:4a:a3:48:6a:c1:aa:9b:22:a7:70:85:e3: b1:be:2c:09:93:45:31:3e:c0:f0:d9:c8:8c:e8:ab: 39:6a:77:50:2a:12:a4:bd:59:e6:8a:79:08:b5:4f: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:36:DB:FC:53:B5:7B:9B:3B:89:B7:48:94:6C:E5:01:F9:8E:9D:3B X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f8:37:8b:d8:64:e9:65:56:97:77:20:f8:dc:f4:68:d4:58: 53:6d:43:f4:dd:1d:3f:2b:78:50:6b:af:a3:68:5d:45:b5:4f: 04:26:76:ed:92:56:32:03:20:4f:dc:f6:5c:aa:3f:da:d7:25: 84:5e:e3:28:b9:09:a2:95:db:bf:7b:43:80:30:a7:0c:f3:9b: da:a5:ee:35:00:a1:1f:df:9c:97:b8:4e:7c:fe:c7:cd:21:20: 3d:bd:29:5b:24:07:df:28:89:48:f9:5f:d2:e7:59:70:75:0b: a0:a0:d8:eb:bc:b9:3f:08:b5:7f:d0:8f:e6:9a:9c:ba:32:c7: 90:3f:b1:f3:27:27:4c:9c:b5:76:77:90:34:97:61:2c:63:5d: 0d:11:41:2c:3e:23:fa:26:12:f3:1b:23:02:85:fb:e8:21:b6: c6:ed:26:41:2a:30:b3:76:57:26:e3:98:b9:67:c1:af:20:53: 23:fd:b2:aa:09:69:4b:0f:f0:98:00:3d:12:a0:24:68:46:a8: 56:fa:a2:3d:d0:17:63:fa:ac:34:bc:d6:1c:97:35:c6:37:e4: 0a:97:05:a2:58:c0:e3:7b:dc:d4:d9:04:22:ed:f7:07:ae:3f: ae:39:10:8e:4e:3b:99:bf:2b:34:e0:7d:12:dc:da:fa:78:7a: 9b:20:66:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjUxMTAzMDMyODEyWhcNMjUxMTEwMDMyODEyWjAYMRYwFAYD VQQDEw02OTA4MjE0ZC04OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCmhdZ9Qvq+o69B1acoIhDLiF3YAkV6Cqk/YM6ali0gAo4Unlm43AjROx66f Wf7xY5hNjTeseyVumy1deqHeEKHZ+AV7ZIXRwEOg3WpDeRdEqltHakDYPGonaj7z oPNBiWiBuCou5HNoBbBdAsbfnBs+JChCmCN0lN5mSfCQo2V5zHOeGra0o6gWrL8z whXjfl6OjxAW48uFy9b2TA9Hm1chbREEo5YNHtL4Npaibh32uIuuSLnvbQQXZa83 BjgNUVCJlTIlD9xK5YwtNfP0OGnPNP9Ko0hqwaqbIqdwheOxviwJk0UxPsDw2ciM 6Ks5andQKhKkvVnminkItU/HAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA22/xT tXubO4m3SJRs5QH5jp07MB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd+DeL2GTpZVaXdyD43PRo1FhTbUP03R0/K3hQa6+jaF1FtU8EJnbt klYyAyBP3PZcqj/a1yWEXuMouQmildu/e0OAMKcM85vape41AKEf35yXuE58/sfN ISA9vSlbJAffKIlI+V/S51lwdQugoNjrvLk/CLV/0I/mmpy6MseQP7HzJydMnLV2 d5A0l2EsY10NEUEsPiP6JhLzGyMChfvoIbbG7SZBKjCzdlcm45i5Z8GvIFMj/bKq CWlLD/CYAD0SoCRoRqhW+qI90Bdj+qw0vNYclzXGN+QKlwWiWMDje9zU2QQi7fcH rj+uORCOTjuZvys04H0S3Nr6eHqbIGY7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:44 2025 by rpki-client