$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: uf7pslKwSICtWOY+zsQGNypWcqPuXNvesJXuUsbinu8= Subject key identifier: 32:B1:FC:95:D3:0A:AA:70:B3:22:32:7B:50:A7:95:1A:F8:22:0B:7A Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 0212 Signing time: Mon 03 Nov 2025 02:11:42 +0000 Manifest this update: Mon 03 Nov 2025 02:11:42 +0000 Manifest next update: Mon 10 Nov 2025 02:11:42 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: 40Vw9OrtEts5L6eDEILbvW9zCqR7GsB3AUOhw+B3kMw=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: Nov 3 02:11:42 2025 GMT Not After : Nov 10 02:11:42 2025 GMT Subject: CN=69080f5e-fa25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:99:76:bd:31:15:bc:db:44:d9:2b:08:6c:71: c6:35:46:e7:60:18:44:c4:59:1a:9b:56:c2:01:64: c7:9d:b0:66:3e:98:16:b9:52:90:98:27:8d:9e:7a: 97:ba:ac:29:4b:8f:da:02:88:71:f0:45:85:2d:4b: 4b:06:16:d3:0c:b8:7b:23:c6:ad:1c:b6:05:33:a9: 50:a2:41:ab:1d:ce:61:9f:37:a0:8f:b5:d5:15:a8: 30:4c:78:ef:f1:e9:ff:5c:e1:51:80:e7:75:04:69: 35:70:40:c8:52:71:ef:07:2a:08:46:c6:c9:04:75: 20:45:3d:88:86:f4:1b:79:be:b5:b7:8b:95:be:c0: 04:8c:ff:8c:f3:4a:dc:03:88:12:6a:e6:7c:15:3e: d7:75:b9:d5:f6:03:e1:38:52:51:25:06:38:6c:3c: 25:0e:ae:72:d5:a9:9a:e6:7d:4b:c6:f1:56:a7:be: b5:08:1b:4a:30:ab:a8:e5:b5:4f:d9:fe:c2:45:2a: 5e:d7:dd:07:89:48:51:57:30:89:26:2f:32:5f:9f: c1:1d:45:66:c6:f9:44:96:ad:14:d1:4e:fe:7a:c9: 56:86:16:69:93:48:3d:cd:45:b4:0e:cf:43:6c:c2: 50:e0:50:9a:af:6f:0e:93:0c:ff:24:8a:e5:b4:eb: 47:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B1:FC:95:D3:0A:AA:70:B3:22:32:7B:50:A7:95:1A:F8:22:0B:7A X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:41:2c:15:22:b3:bd:58:a7:1d:ac:1f:53:90:4e:01:d8:1d: 7d:c6:ad:34:e4:6f:05:a3:ce:3a:9a:1a:7d:6a:d3:c3:95:11: 79:cd:e4:ca:b2:d8:3b:b4:e4:f2:5f:e0:a7:6b:94:75:57:f9: ad:e8:cd:a1:74:24:4e:97:65:0f:ac:4a:40:5d:b4:c4:e1:f3: aa:3d:c7:03:d2:98:b9:a8:66:d0:95:73:43:88:5d:e1:e7:38: b1:35:13:24:16:2d:6f:26:fd:ca:f3:e4:ad:68:30:55:9b:b1: bd:67:01:0b:e1:a8:03:d7:ff:98:a9:1b:89:c6:10:2c:dd:c1: a9:7f:b8:87:1e:b7:77:69:cd:60:ee:6d:35:12:73:1b:28:ef: dd:9b:a6:e4:c6:ae:fc:fd:16:23:70:3a:52:42:c1:ab:4a:4b: a6:f6:2c:7e:ae:6b:b1:24:9b:ad:00:f5:08:c2:6a:57:c7:51: 86:e5:a0:e4:23:04:5c:32:ad:52:08:dc:64:d0:0b:d2:88:37: 37:50:25:e1:06:6b:1e:db:d1:62:0b:80:3b:9c:d5:64:6d:3a: 9a:48:9e:bf:a6:31:f7:54:3d:7d:ed:7c:77:93:94:40:9b:6b: 6e:b5:c1:9e:ac:48:1e:4c:e6:99:86:3f:2d:1e:d6:bd:a2:d5: 8c:89:46:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUxMTAzMDIxMTQyWhcNMjUxMTEwMDIxMTQyWjAYMRYwFAYD VQQDEw02OTA4MGY1ZS1mYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pl2vTEVvNtE2SsIbHHGNUbnYBhExFkam1bCAWTHnbBmPpgWuVKQmCeNnnqX uqwpS4/aAohx8EWFLUtLBhbTDLh7I8atHLYFM6lQokGrHc5hnzegj7XVFagwTHjv 8en/XOFRgOd1BGk1cEDIUnHvByoIRsbJBHUgRT2IhvQbeb61t4uVvsAEjP+M80rc A4gSauZ8FT7XdbnV9gPhOFJRJQY4bDwlDq5y1ama5n1LxvFWp761CBtKMKuo5bVP 2f7CRSpe190HiUhRVzCJJi8yX5/BHUVmxvlElq0U0U7+eslWhhZpk0g9zUW0Ds9D bMJQ4FCar28Okwz/JIrltOtHDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKx/JXT CqpwsyIye1CnlRr4Igt6MB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiQSwVIrO9WKcdrB9TkE4B2B19xq005G8Fo846mhp9atPDlRF5zeTK stg7tOTyX+Cna5R1V/mt6M2hdCROl2UPrEpAXbTE4fOqPccD0pi5qGbQlXNDiF3h 5zixNRMkFi1vJv3K8+StaDBVm7G9ZwEL4agD1/+YqRuJxhAs3cGpf7iHHrd3ac1g 7m01EnMbKO/dm6bkxq78/RYjcDpSQsGrSkum9ix+rmuxJJutAPUIwmpXx1GG5aDk IwRcMq1SCNxk0AvSiDc3UCXhBmse29FiC4A7nNVkbTqaSJ6/pjH3VD197Xx3k5RA m2tutcGerEgeTOaZhj8tHta9otWMiUYs -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:47 2025 by rpki-client