$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: 7QRPApr3/GSKFoBg3iB5MBboD3Dojg/6DqSyiUXLZAA= Subject key identifier: B9:04:69:E8:CC:EE:55:E3:FB:3A:51:B5:E5:A4:E6:49:DF:C5:4D:B8 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A53 Signing time: Tue 04 Nov 2025 16:26:51 +0000 Manifest this update: Tue 04 Nov 2025 16:26:51 +0000 Manifest next update: Tue 11 Nov 2025 16:26:51 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: I5W3aMDRp9nPt5oZRuRVcEJ0Qy0qpjdlJTZmZ8KIBjA=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: GKqNBD5V71h0LJHoO121osmAczldGj86vre7flmyl/s=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: byvxwIxUmbdh0bP7R33Ns0I16OD6QTEmSRLJ7M5XZ6s=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: eoxU71y8QTEqx+M0m1aW0+InRIR2E5b4rwucrZ2tLw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6776 (0x1a78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Nov 4 16:26:51 2025 GMT Not After : Nov 11 16:26:51 2025 GMT Subject: CN=690a294b-4480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:ee:b3:6f:a1:ef:2b:2c:ea:7e:da:c9:93: 2f:58:22:7c:e4:c8:8b:37:4e:55:de:7d:f2:81:05: 38:54:fb:91:7b:9e:e5:f8:83:90:e0:ce:5e:ac:39: 33:b6:01:bd:d1:62:51:37:56:1c:ca:ea:28:21:f6: ae:83:57:2a:10:6c:eb:c0:7a:e8:dc:9a:cb:2c:26: 23:5e:51:ef:15:3d:9c:b4:a3:69:7e:ba:ec:82:53: 37:bc:9e:14:ca:17:71:c8:91:c4:99:03:ce:3c:78: 63:07:b7:94:c4:0f:b4:4e:b3:95:eb:1d:25:61:43: b3:bd:4e:04:7f:53:dd:62:62:d9:d8:16:fc:50:de: 44:67:ca:05:3a:84:a6:37:c5:e6:b7:1e:5f:f2:1c: d3:3f:4b:d4:a3:3d:8e:ea:c7:b9:35:c0:6d:f3:1c: d3:7d:07:e5:48:28:8b:c4:b5:6f:84:d8:ab:e4:6d: 11:c9:71:c7:cb:8e:75:e5:44:f7:78:ff:77:56:94: ee:56:ff:10:52:12:40:ef:a6:b7:fe:07:12:06:f6: 26:0a:bc:33:f9:24:4f:f4:5b:d3:9f:f0:cf:9f:0f: cc:b1:90:f0:3c:27:a8:a2:5e:74:be:05:5f:e9:07: f6:ae:36:d5:f4:aa:74:1c:e4:76:43:ec:e3:58:0c: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:69:E8:CC:EE:55:E3:FB:3A:51:B5:E5:A4:E6:49:DF:C5:4D:B8 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:45:01:85:0c:a3:34:a3:42:d8:51:92:18:8a:9d:4d:10:af: a2:9b:5d:a5:6a:da:0d:38:b4:76:ae:ca:53:74:2b:e0:c5:ef: 2c:e2:d7:84:ef:de:59:f0:4c:8d:b4:de:0e:e5:db:cc:aa:72: cd:46:fe:33:2a:03:fb:8f:59:12:92:33:f3:37:b5:25:f9:6d: 22:11:5b:45:fb:53:e9:3e:fa:13:1c:21:f3:54:f1:b4:fc:88: be:c2:cb:fd:2e:2b:80:b2:9f:52:f0:0f:5d:c2:2d:8b:c9:e0: 17:e1:9a:f5:bf:3e:3c:c9:1f:15:67:b7:7b:cb:fc:46:f5:fb: e3:54:6f:79:90:87:ee:72:c1:93:94:51:78:38:55:77:eb:16: 24:c1:b8:e5:23:1b:a2:52:67:32:b6:22:6f:d9:23:06:52:42: bc:c2:c7:83:aa:40:24:dc:b5:5a:10:dc:80:30:01:ae:df:da: 4b:b5:c0:c8:e5:a7:80:ff:90:44:ce:ee:a0:97:95:f7:ef:2b: 96:65:d4:1d:13:39:f3:1f:d6:8b:0e:83:0c:fc:21:e1:de:93: 93:85:53:92:1b:e2:c7:ea:92:30:07:33:c0:49:aa:be:9e:14: ed:5b:cc:b9:b7:37:9e:54:66:45:16:50:d8:0a:de:cd:64:fb: 6b:3d:be:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUxMTA0MTYyNjUxWhcNMjUxMTExMTYyNjUxWjAYMRYwFAYD VQQDEw02OTBhMjk0Yi00NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1zus2+h7yss6n7ayZMvWCJ85MiLN05V3n3ygQU4VPuRe57l+IOQ4M5erDkz tgG90WJRN1YcyuooIfaug1cqEGzrwHro3JrLLCYjXlHvFT2ctKNpfrrsglM3vJ4U yhdxyJHEmQPOPHhjB7eUxA+0TrOV6x0lYUOzvU4Ef1PdYmLZ2Bb8UN5EZ8oFOoSm N8Xmtx5f8hzTP0vUoz2O6se5NcBt8xzTfQflSCiLxLVvhNir5G0RyXHHy4515UT3 eP93VpTuVv8QUhJA76a3/gcSBvYmCrwz+SRP9FvTn/DPnw/MsZDwPCeool50vgVf 6Qf2rjbV9Kp0HOR2Q+zjWAwt7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkEaejM 7lXj+zpRteWk5knfxU24MB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTRQGFDKM0o0LYUZIYip1NEK+im12latoNOLR2rspTdCvgxe8s4teE 795Z8EyNtN4O5dvMqnLNRv4zKgP7j1kSkjPzN7Ul+W0iEVtF+1PpPvoTHCHzVPG0 /Ii+wsv9LiuAsp9S8A9dwi2LyeAX4Zr1vz48yR8VZ7d7y/xG9fvjVG95kIfucsGT lFF4OFV36xYkwbjlIxuiUmcytiJv2SMGUkK8wseDqkAk3LVaENyAMAGu39pLtcDI 5aeA/5BEzu6gl5X37yuWZdQdEznzH9aLDoMM/CHh3pOThVOSG+LH6pIwBzPASaq+ nhTtW8y5tzeeVGZFFlDYCt7NZPtrPb50 -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:33 2025 by rpki-client