$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json) Hash identifier: 06P+Fr8qJCdd2uzdk2EKtPdfPy2hgoG/vk2PfK03+cg= Subject key identifier: E0:43:D2:18:26:C3:9F:23:C0:C0:48:8B:CA:D6:2F:D9:D7:7B:C4:A9 Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft Manifest number: 0330 Signing time: Wed 17 Sep 2025 01:35:22 +0000 Manifest this update: Wed 17 Sep 2025 01:35:22 +0000 Manifest next update: Wed 24 Sep 2025 01:35:22 +0000 Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: IB6JYvO9dGRWEU/Er9C0oWG3NF6BlIAg7TeD4whQH3Q=) 2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: 4Q9eSoyybwKkbe+OvPprVAkVlq22srO6Z2iGnnSJ3hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Validity Not Before: Sep 17 01:35:22 2025 GMT Not After : Sep 24 01:35:22 2025 GMT Subject: CN=68ca105a-1ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:64:d9:f3:73:dd:8c:69:9f:ab:09:02:cf: dc:72:14:7b:18:f5:8f:86:7d:1a:1c:db:07:e7:d9: c1:67:07:c6:62:c9:29:c9:a1:b6:99:27:dc:09:04: 5d:f1:55:af:e3:37:cb:be:99:73:05:99:f6:ea:3e: fe:b4:32:b8:17:6e:9e:78:b2:11:f7:d5:2f:a4:4d: ba:47:7f:59:1a:2c:04:5d:77:ab:92:76:0e:32:86: ae:34:78:96:fb:dc:76:8a:aa:7c:84:f5:1b:c3:a3: e0:d6:4b:c4:82:b6:94:3f:38:65:37:79:de:d5:72: 42:02:03:26:20:8f:31:4a:98:c5:ba:ed:c7:b7:84: 4d:13:19:35:44:d0:c6:96:0f:ac:c6:60:f7:0e:56: 35:03:ee:46:23:36:37:71:a3:b2:e2:8c:28:7b:99: 4c:cb:e9:78:79:12:17:9d:7c:48:9a:a6:ec:12:18: 2b:ac:03:fd:33:b9:fd:31:29:fa:6c:cd:9a:1f:17: de:1d:16:fd:8a:79:12:5c:f9:52:eb:13:d1:20:1a: 17:0c:57:69:f9:8e:bc:7a:e4:0d:ee:21:19:37:26: 3b:3b:7f:bb:f6:e2:af:ac:e2:dd:f2:f8:3b:c4:b4: 21:72:6f:bd:d8:80:ec:75:ea:65:33:29:5b:c6:02: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:D2:18:26:C3:9F:23:C0:C0:48:8B:CA:D6:2F:D9:D7:7B:C4:A9 X509v3 Authority Key Identifier: keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1c:6b:ff:58:9b:6c:55:d6:80:63:6e:3a:e3:cc:c7:e6:94: f5:d6:3f:6f:e1:b2:a7:45:e9:4b:b6:33:96:ec:7c:a8:fa:54: 34:56:a8:18:4d:95:19:35:3e:78:7e:b1:62:c9:0f:3b:9d:f9: c1:d0:f9:dd:12:0a:7f:b2:46:a9:cd:0a:c5:a6:96:4b:d9:26: b2:5a:53:64:bf:6c:b7:d4:b7:bf:f1:b6:d1:38:b6:b9:e4:e0: 22:a8:64:84:e0:dd:53:ac:07:ad:0d:b8:b1:ab:fd:37:36:0b: 52:88:15:4d:85:c3:e5:fe:fc:c3:a4:c3:cc:2b:26:f2:99:e0: be:e2:14:fb:0c:34:5c:d0:75:75:80:9d:5d:ff:94:f4:85:a5: 17:0c:73:39:a2:c5:90:f9:aa:19:c0:14:18:bf:08:05:a4:ae: 28:dc:a2:b0:86:4e:41:bd:13:53:3c:82:dd:7a:3c:0e:b3:5b: 8f:24:f9:9a:79:ff:b5:92:5f:f6:e7:98:ac:fc:7f:93:ad:9e: fc:28:50:0d:29:5b:8c:44:37:3b:9f:d3:d4:b0:d1:fb:ae:9d: 91:30:56:f0:80:cb:06:e6:0f:91:bd:6d:ee:8a:f6:68:b9:0f: b3:1f:70:06:32:7a:73:ba:3a:b3:5b:72:8b:95:98:fc:e3:b7: 37:ff:c2:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE NDk1QUIzMzIwHhcNMjUwOTE3MDEzNTIyWhcNMjUwOTI0MDEzNTIyWjAYMRYwFAYD VQQDEw02OGNhMTA1YS0xZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxRk2fNz3Yxpn6sJAs/cchR7GPWPhn0aHNsH59nBZwfGYskpyaG2mSfcCQRd 8VWv4zfLvplzBZn26j7+tDK4F26eeLIR99UvpE26R39ZGiwEXXerknYOMoauNHiW +9x2iqp8hPUbw6Pg1kvEgraUPzhlN3ne1XJCAgMmII8xSpjFuu3Ht4RNExk1RNDG lg+sxmD3DlY1A+5GIzY3caOy4owoe5lMy+l4eRIXnXxImqbsEhgrrAP9M7n9MSn6 bM2aHxfeHRb9inkSXPlS6xPRIBoXDFdp+Y68euQN7iEZNyY7O3+79uKvrOLd8vg7 xLQhcm+92IDsdeplMylbxgL3FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBD0hgm w58jwMBIi8rWL9nXe8SpMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG NEQ1d3BnWEpsTVhVbGFzekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtHGv/WJtsVdaAY24648zH5pT11j9v4bKnRelLtjOW7Hyo+lQ0VqgY TZUZNT54frFiyQ87nfnB0PndEgp/skapzQrFppZL2SayWlNkv2y31Le/8bbROLa5 5OAiqGSE4N1TrAetDbixq/03NgtSiBVNhcPl/vzDpMPMKybymeC+4hT7DDRc0HV1 gJ1d/5T0haUXDHM5osWQ+aoZwBQYvwgFpK4o3KKwhk5BvRNTPILdejwOs1uPJPma ef+1kl/255is/H+TrZ78KFANKVuMRDc7n9PUsNH7rp2RMFbwgMsG5g+RvW3uivZo uQ+zH3AGMnpzujqzW3KLlZj847c3/8Ln -----END CERTIFICATE-----Generated at Thu Sep 18 20:46:18 2025 by rpki-client