$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: B3Lm+a3oj1LRcyj2KcnjmF1ams8+uUuL72GEFeYYsH0= Subject key identifier: AF:18:04:D4:A1:3A:B3:7E:BE:AD:05:57:F4:4A:48:CA:2C:C9:39:54 Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 350A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 34F4 Signing time: Sun 02 Nov 2025 14:35:06 +0000 Manifest this update: Sun 02 Nov 2025 14:35:05 +0000 Manifest next update: Sun 09 Nov 2025 14:35:05 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: tsRdMjYRXkkVOr+slFS2wi1mHXY1XfD7L+XePKekFAE=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: 24BjWAqe2qRsQURE8DMBPNk7l6vHhbx1QB6qiJta7cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Nov 2 14:35:05 2025 GMT Not After : Nov 9 14:35:05 2025 GMT Subject: CN=69076c1a-89cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:b2:1b:46:42:70:81:26:76:3f:eb:83:9f: 56:a2:bd:e0:ab:cd:2a:1f:1e:48:26:ef:37:5f:6b: fe:7a:cf:12:05:8a:b6:6d:a5:98:86:1a:f9:1b:ab: eb:d1:4c:23:4a:37:2f:90:ab:04:15:49:99:35:fc: 0b:88:c1:16:0f:9a:8d:5f:e6:1a:40:53:5f:95:21: 7e:e7:3a:17:1c:7c:11:a1:08:50:74:36:cf:a5:5b: 83:54:64:07:f4:51:67:ae:7b:0a:b3:a4:a8:39:9b: e1:17:54:7b:e9:65:28:23:1f:0f:a1:c6:eb:83:b1: d5:c3:f6:ac:a4:25:63:e4:84:bf:57:e1:8a:b5:82: 7b:1e:18:5e:f7:b8:68:ff:39:4e:b9:2d:8a:ba:08: 7f:00:8a:8a:05:d5:99:dc:39:2f:b1:b4:fc:3a:8e: 06:8d:47:0a:63:08:d2:53:ea:fd:94:d1:a8:c2:33: bc:95:26:2f:a4:c7:03:32:6d:17:12:4b:aa:ca:72: 1d:fa:e1:6a:e1:73:ec:8f:46:8c:c3:d1:28:2c:1a: 56:f6:ff:5b:ad:8e:34:e4:9d:57:ef:fe:04:d2:83: 18:5d:84:c5:89:80:42:75:28:05:0e:59:0d:38:44: 69:3b:d9:77:1a:9c:45:ab:a1:00:29:8d:53:77:c6: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:18:04:D4:A1:3A:B3:7E:BE:AD:05:57:F4:4A:48:CA:2C:C9:39:54 X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:67:bd:10:8b:ef:5b:91:d3:be:2f:8f:c9:b1:a2:fc:dc:eb: 11:8d:db:c3:45:31:2f:da:32:36:9e:09:97:10:bf:09:a7:3b: b6:14:3e:0b:25:21:ac:a1:e9:57:e0:fa:35:aa:c2:6e:1a:c5: ed:a1:36:31:3b:4b:4f:56:a8:4e:df:61:44:6a:b3:fc:8d:c8: 66:50:85:b4:8d:65:05:c5:d0:e0:34:2c:a2:a3:de:6b:6c:ef: b3:6f:21:10:20:07:ea:24:9f:f2:b3:86:9b:38:aa:d7:fd:be: 3f:87:68:99:cd:d9:7d:f8:4a:0e:86:3d:ca:58:e3:3f:4b:e9: 5c:2c:07:4b:94:b7:37:bb:4c:e9:0f:c3:00:cc:4d:7e:fa:50: 19:c8:4d:01:0e:6a:6e:dd:bc:c1:a6:53:ee:f9:9c:11:aa:9b: 6c:3f:5a:40:e5:fa:08:06:27:fb:50:7f:83:a1:2e:6c:21:28: 1b:7f:fa:de:8f:5d:c0:92:1f:ba:72:9a:02:67:37:e8:22:df: a6:65:0d:ce:f6:61:3b:3f:a5:e9:eb:f2:bb:c1:b4:e0:5f:20: cf:a0:a0:4b:3b:28:67:18:5a:c7:45:7d:e7:a3:1e:4a:c7:b0: 41:6f:92:af:6d:8c:ec:b4:ee:58:0d:85:fd:7b:cf:f7:2b:a3: f8:eb:ec:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUxMTAyMTQzNTA1WhcNMjUxMTA5MTQzNTA1WjAYMRYwFAYD VQQDEw02OTA3NmMxYS04OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjWyG0ZCcIEmdj/rg59Wor3gq80qHx5IJu83X2v+es8SBYq2baWYhhr5G6vr 0UwjSjcvkKsEFUmZNfwLiMEWD5qNX+YaQFNflSF+5zoXHHwRoQhQdDbPpVuDVGQH 9FFnrnsKs6SoOZvhF1R76WUoIx8Pocbrg7HVw/aspCVj5IS/V+GKtYJ7Hhhe97ho /zlOuS2Kugh/AIqKBdWZ3DkvsbT8Oo4GjUcKYwjSU+r9lNGowjO8lSYvpMcDMm0X EkuqynId+uFq4XPsj0aMw9EoLBpW9v9brY405J1X7/4E0oMYXYTFiYBCdSgFDlkN OERpO9l3GpxFq6EAKY1Td8YanwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8YBNSh OrN+vq0FV/RKSMosyTlUMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWZ70Qi+9bkdO+L4/JsaL83OsRjdvDRTEv2jI2ngmXEL8Jpzu2FD4L JSGsoelX4Po1qsJuGsXtoTYxO0tPVqhO32FEarP8jchmUIW0jWUFxdDgNCyio95r bO+zbyEQIAfqJJ/ys4abOKrX/b4/h2iZzdl9+EoOhj3KWOM/S+lcLAdLlLc3u0zp D8MAzE1++lAZyE0BDmpu3bzBplPu+ZwRqptsP1pA5foIBif7UH+DoS5sISgbf/re j13Akh+6cpoCZzfoIt+mZQ3O9mE7P6Xp6/K7wbTgXyDPoKBLOyhnGFrHRX3nox5K x7BBb5KvbYzstO5YDYX9e8/3K6P46+yQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:08 2025 by rpki-client