$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: vFeA7Bv06wjlYw7yjBK3qxO9oaNYtTHfr9FI3nn8zfc= Subject key identifier: 8B:01:3F:19:F3:30:9C:5B:76:15:6D:B2:92:54:A1:9A:89:3A:23:EB Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: 0128 Signing time: Mon 03 Nov 2025 04:39:59 +0000 Manifest this update: Mon 03 Nov 2025 04:39:59 +0000 Manifest next update: Mon 10 Nov 2025 04:39:59 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: SRPXypdFRnRZULgMInrSy046Kpu5C5CMhH7pj+eWJ/s=) 2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=) 4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Nov 3 04:39:59 2025 GMT Not After : Nov 10 04:39:59 2025 GMT Subject: CN=6908321f-2ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:42:3d:ae:d5:91:a5:3b:65:f3:38:00:3b: e2:90:0b:1d:28:ac:d4:ed:64:6d:da:e3:69:43:b3: bf:61:b9:d4:ab:e9:fb:c3:2b:17:db:44:64:36:3c: 8a:bd:cf:07:5e:af:43:91:98:07:30:a1:24:cc:4f: fc:e7:2b:7d:2f:31:cd:5e:88:4d:ea:6a:0b:d1:95: 5c:b5:1f:3c:67:e0:7d:f2:d1:fd:33:47:fa:20:a2: d4:54:fd:12:1a:3b:80:11:a6:53:99:1f:d6:5f:25: 25:00:7b:97:66:d9:ec:84:1a:20:e8:6d:2a:a3:94: b3:2d:49:c5:6b:d4:e6:7b:6c:c2:f3:50:56:43:c5: fb:67:ce:d0:a2:d7:ec:00:e3:e7:1a:6a:09:39:62: ae:c0:e9:d5:d3:a4:c3:b0:aa:bb:40:98:de:fd:0a: ac:17:da:7b:22:d7:d2:db:75:7c:23:d4:1a:10:46: 43:6a:11:c0:20:aa:2a:d7:eb:1d:a0:d9:e1:c1:d6: f9:b0:1d:84:4f:c6:de:cf:af:16:8d:94:34:77:ea: 0b:af:f5:4e:12:5c:7b:d5:26:de:51:b5:78:52:00: 61:05:a1:e5:99:9f:dc:4f:21:ab:82:8e:c9:4a:0d: 17:12:e5:59:c5:f9:5d:3c:68:c2:f7:f5:09:d7:02: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:3F:19:F3:30:9C:5B:76:15:6D:B2:92:54:A1:9A:89:3A:23:EB X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9c:d2:41:2e:d1:1f:95:97:db:91:7c:5b:60:a7:06:8a:89: 48:e8:5d:8e:59:bb:78:67:9b:ff:1e:ff:ca:2d:d5:e2:a5:24: 6b:45:94:88:24:72:06:99:55:6f:14:9d:c4:e8:6e:d4:40:d9: 06:bc:16:39:92:77:4e:15:6b:96:48:4f:eb:96:b6:80:58:30: 93:43:c4:c3:8e:01:de:6b:c2:ca:66:4a:66:a9:85:c2:c9:5a: 7c:79:e0:5f:a7:5d:62:4a:49:3b:27:1d:ee:29:74:eb:cd:af: b8:68:9c:04:82:03:5f:c6:32:63:13:3f:f2:07:47:5c:de:13: 8c:31:e5:5e:88:d8:3e:8d:ce:ef:65:a4:85:c5:f1:3a:20:18: ec:79:cb:e2:39:3d:5b:ac:4e:ea:2f:57:61:db:cb:64:d4:9a: 05:69:48:43:6b:1a:98:6f:79:c3:a1:46:a9:8d:c3:12:6d:b9: 58:2e:98:b8:9c:bc:bc:bc:72:2f:68:4d:8e:ef:bf:f3:5c:0e: cc:e8:c9:f4:a0:7f:d2:85:32:9b:4b:c5:48:39:60:c6:c1:f6: 72:79:7f:02:1a:06:03:a0:7d:73:d9:5b:c8:90:5f:61:1f:f0: a2:02:ec:82:6e:ca:08:59:d3:08:9c:e5:9d:eb:3a:eb:92:6a: 8c:78:ac:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjUxMTAzMDQzOTU5WhcNMjUxMTEwMDQzOTU5WjAYMRYwFAYD VQQDEw02OTA4MzIxZi0yZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7tCPa7VkaU7ZfM4ADvikAsdKKzU7WRt2uNpQ7O/YbnUq+n7wysX20RkNjyK vc8HXq9DkZgHMKEkzE/85yt9LzHNXohN6moL0ZVctR88Z+B98tH9M0f6IKLUVP0S GjuAEaZTmR/WXyUlAHuXZtnshBog6G0qo5SzLUnFa9Tme2zC81BWQ8X7Z87Qotfs AOPnGmoJOWKuwOnV06TDsKq7QJje/QqsF9p7ItfS23V8I9QaEEZDahHAIKoq1+sd oNnhwdb5sB2ET8bez68WjZQ0d+oLr/VOElx71SbeUbV4UgBhBaHlmZ/cTyGrgo7J Sg0XEuVZxfldPGjC9/UJ1wLXXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsBPxnz MJxbdhVtspJUoZqJOiPrMB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKnNJBLtEflZfbkXxbYKcGiolI6F2OWbt4Z5v/Hv/KLdXipSRrRZSI JHIGmVVvFJ3E6G7UQNkGvBY5kndOFWuWSE/rlraAWDCTQ8TDjgHea8LKZkpmqYXC yVp8eeBfp11iSkk7Jx3uKXTrza+4aJwEggNfxjJjEz/yB0dc3hOMMeVeiNg+jc7v ZaSFxfE6IBjsecviOT1brE7qL1dh28tk1JoFaUhDaxqYb3nDoUapjcMSbblYLpi4 nLy8vHIvaE2O77/zXA7M6Mn0oH/ShTKbS8VIOWDGwfZyeX8CGgYDoH1z2VvIkF9h H/CiAuyCbsoIWdMInOWd6zrrkmqMeKxK -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:43 2025 by rpki-client