$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: waf15qKrw8JxynW9PEuqy06bgMv7YGqzC/ZSwtitGp8= Subject key identifier: DC:50:DE:7E:0F:35:FA:86:73:2F:BA:65:6D:DF:67:A3:B4:81:96:5F Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: E3 Signing time: Mon 27 Oct 2025 07:35:22 +0000 Manifest this update: Mon 27 Oct 2025 07:35:21 +0000 Manifest next update: Mon 03 Nov 2025 07:35:21 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: CLrXY427kUt3Z6qQw/A8rMfA4/k+B7q4Q+/IxEumi/E=) 2: 997D587CABD011F0AA576211C4F9AE02.roa (hash: eqFr7d/2/7J+tBqwKqs+V3n0lNlzzsND/P+LSGAEIcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Oct 27 07:35:21 2025 GMT Not After : Nov 3 07:35:21 2025 GMT Subject: CN=68ff20b9-5eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:62:5f:6e:91:cb:1b:1a:fe:3c:02:3e:92: 3e:43:9d:9f:5e:b3:ab:3c:bf:d4:f0:2e:3a:f1:d1: 41:d2:8d:90:3e:d9:0e:8d:c3:72:34:35:06:5e:ef: 24:8e:e7:58:6f:2c:e2:58:30:a6:4d:02:c3:d4:aa: 6d:5c:8e:29:88:a5:b6:c9:a8:eb:de:bf:7a:85:24: 68:23:4b:73:6f:0f:d4:c6:8e:04:d5:7d:03:d4:ca: 27:2f:c4:a6:e7:a5:f4:c6:14:39:e8:d6:66:28:b1: cf:79:4a:e4:f1:0c:0a:9c:0c:d6:81:5e:e1:68:b8: 03:d6:da:8d:05:73:aa:b7:a9:3d:4e:d1:0a:38:9b: ae:95:d3:67:b3:62:7c:37:f5:43:81:b6:46:cc:2a: 51:d9:01:f0:68:fa:07:88:21:14:b5:57:75:1c:e7: 73:84:29:4e:a9:de:f5:a8:65:d5:11:ac:00:b5:37: 8d:88:69:f3:57:34:17:7e:ab:47:a8:ec:95:50:1e: 95:00:18:d5:d7:4e:30:7d:67:61:9a:4e:3d:5e:37: 15:7e:b0:46:41:87:f4:6b:7e:21:2f:d3:a4:79:87: f3:3a:16:91:3c:7c:f7:23:cd:ea:a9:73:65:c0:85: 4e:de:73:f4:86:30:78:e8:21:1d:45:7b:77:3d:ec: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:DE:7E:0F:35:FA:86:73:2F:BA:65:6D:DF:67:A3:B4:81:96:5F X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:77:17:ba:e2:bb:96:31:c0:6b:0c:ac:63:78:8c:fb:a7:83: 3d:69:d3:63:75:5d:77:ba:13:b8:3d:c0:6e:c9:0b:f9:42:c0: f4:89:29:21:dc:77:43:80:3a:28:8e:91:01:45:d5:76:68:8b: c5:27:2f:c6:8e:3d:5d:45:6d:f4:e2:f7:cf:6f:97:d6:94:55: b9:23:6b:b9:47:51:64:4b:f2:29:ca:7b:e6:dd:6e:c4:2b:64: 3e:5a:a4:56:38:c2:33:f3:0c:f3:f1:c5:d4:52:db:f4:af:02: 82:f0:50:9b:4c:9e:97:98:b1:2b:3b:60:23:35:0c:ad:5e:46: 69:69:f4:3f:1c:16:23:ad:e8:13:d2:ff:05:be:f5:90:75:09: dd:91:86:00:e1:06:3e:bb:07:bb:40:21:6a:24:46:c2:bf:8e: e3:c4:df:56:72:4f:f7:31:3d:55:13:4f:2a:77:1e:ac:0f:a6: f4:d0:1c:bd:5d:00:ee:3e:d2:b4:06:26:1f:4f:47:58:63:63: 85:b1:b1:24:36:85:40:b8:56:ff:fc:3d:bc:7c:2d:2f:20:52: 99:e8:eb:f2:02:f0:d4:74:88:5a:bf:36:73:17:e4:0f:f6:ea: 11:9e:97:d6:09:86:06:64:b0:e7:4d:aa:0f:fa:1d:99:cc:a1: 4d:53:dd:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZGNkJBMEI2RUQ2 Q0M0MUUxMEIwHhcNMjUxMDI3MDczNTIxWhcNMjUxMTAzMDczNTIxWjAYMRYwFAYD VQQDEw02OGZmMjBiOS01ZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliNiX26Ryxsa/jwCPpI+Q52fXrOrPL/U8C468dFB0o2QPtkOjcNyNDUGXu8k judYbyziWDCmTQLD1KptXI4piKW2yajr3r96hSRoI0tzbw/Uxo4E1X0D1MonL8Sm 56X0xhQ56NZmKLHPeUrk8QwKnAzWgV7haLgD1tqNBXOqt6k9TtEKOJuuldNns2J8 N/VDgbZGzCpR2QHwaPoHiCEUtVd1HOdzhClOqd71qGXVEawAtTeNiGnzVzQXfqtH qOyVUB6VABjV104wfWdhmk49XjcVfrBGQYf0a34hL9OkeYfzOhaRPHz3I83qqXNl wIVO3nP0hjB46CEdRXt3Pez0XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxQ3n4P NfqGcy+6ZW3fZ6O0gZZfMB8GA1UdIwQYMBaAFIGZSTrSZa0txzOW9roLbtbMQeEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREMzMi8wRjA5Mjg1NDVB REUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJTM0hNNWIydWd0dTFzeEI0 UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJT M0hNNWIydWd0dTFzeEI0UXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCydxe64ruWMcBrDKxjeIz7p4M9adNjdV13uhO4PcBuyQv5QsD0iSkh 3HdDgDoojpEBRdV2aIvFJy/Gjj1dRW304vfPb5fWlFW5I2u5R1FkS/Ipynvm3W7E K2Q+WqRWOMIz8wzz8cXUUtv0rwKC8FCbTJ6XmLErO2AjNQytXkZpafQ/HBYjregT 0v8FvvWQdQndkYYA4QY+uwe7QCFqJEbCv47jxN9Wck/3MT1VE08qdx6sD6b00By9 XQDuPtK0BiYfT0dYY2OFsbEkNoVAuFb//D28fC0vIFKZ6OvyAvDUdIhavzZzF+QP 9uoRnpfWCYYGZLDnTaoP+h2ZzKFNU92Q -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:48 2025 by rpki-client