$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json) Hash identifier: Xy+q20VqIx9FcyigOCMedQ3w7GLTDKcxcTR84vT9sB4= Subject key identifier: DC:9E:CF:E8:36:79:8C:34:14:03:1D:9C:F9:1C:00:A8:7E:1B:6C:E6 Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Certificate serial: 15C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft Manifest number: 15BC Signing time: Sun 02 Nov 2025 16:45:47 +0000 Manifest this update: Sun 02 Nov 2025 16:45:47 +0000 Manifest next update: Sun 09 Nov 2025 16:45:47 +0000 Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: EaDDmOW17K5kAkzF3t+9w1fcG+Blw70ykVbQVim6lMw=) 2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: xdBFNPkazDP5YP2MUntpZBwPWV+oy0u7bSlxk8ZVSa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5574 (0x15c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Validity Not Before: Nov 2 16:45:47 2025 GMT Not After : Nov 9 16:45:47 2025 GMT Subject: CN=69078abb-a85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:13:75:58:d9:03:7b:67:57:10:67:74:29: 5d:0d:70:34:86:79:96:a5:35:f0:47:32:cd:74:18: ce:9e:c6:dd:c4:bf:30:15:ef:f0:f7:c0:ed:b6:e7: 75:5f:de:b3:67:7b:5e:0a:63:fe:d0:a2:d5:95:60: 6a:cd:59:af:35:af:b1:3b:b2:0b:fa:32:79:fb:e0: 57:19:be:1a:d8:d6:c2:fb:be:5d:ba:a6:f8:56:2d: aa:4a:c7:10:1f:0f:2b:d1:5d:23:31:8d:2a:f8:11: 96:9e:93:2e:63:e9:99:83:a0:b4:ea:14:f7:c2:e6: e1:57:48:de:21:c8:cc:62:11:6e:19:e0:14:46:b7: 16:64:16:42:65:f0:a2:92:5b:a9:e4:0c:a0:68:5f: 4e:96:0b:87:c2:2f:be:da:de:cf:c0:5c:0a:0d:44: e8:85:6b:97:47:c6:76:64:bf:25:e4:8f:60:d2:c0: b6:b6:bb:da:09:0b:0f:f7:ae:fb:b4:1c:f0:72:49: 6c:07:a6:e4:9b:d9:92:2c:91:e2:ce:14:24:9c:04: ee:1a:f2:57:8b:5e:ec:b5:b7:66:16:b8:e3:3f:a8: e1:00:e7:d7:c6:54:72:cd:c4:6a:33:0f:21:bd:1d: bf:ce:cf:9f:67:6a:b5:f2:ee:99:65:30:e6:b3:a7: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9E:CF:E8:36:79:8C:34:14:03:1D:9C:F9:1C:00:A8:7E:1B:6C:E6 X509v3 Authority Key Identifier: keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e1:dc:51:0d:aa:98:58:15:a1:0c:4b:b0:03:9a:34:f2:55: ea:d1:f2:3b:4e:6e:94:6c:b5:43:5f:be:bf:85:ec:1f:b8:3e: 76:79:94:ad:95:12:c4:13:99:ed:d3:32:d5:7a:35:67:54:08: ff:ba:01:f7:8d:ec:e9:e0:a5:2c:20:10:59:ca:13:61:9c:b0: e7:bd:50:fb:72:01:d0:0b:6b:ca:42:cf:a6:d1:42:ee:16:fa: bc:58:05:67:31:a6:37:9e:2d:e8:a8:cf:5e:63:65:83:6a:11: ea:d2:5d:c2:21:a8:1a:93:62:e5:d8:6c:92:13:bf:f5:87:2a: d4:58:d7:f9:99:97:83:95:ec:5a:fd:8f:ee:dc:b9:57:b2:fe: ed:aa:77:f2:0e:88:6e:27:ef:d1:3d:ea:8e:00:f6:39:96:6a: a6:a0:6f:32:a8:c3:a8:45:4e:a1:7b:7c:a4:ed:68:b3:7e:fc: a7:2a:cf:c4:77:12:6c:a0:5f:13:57:2d:81:ea:9f:c0:0a:56: ab:a1:01:49:0c:f3:16:7f:0e:91:55:50:ad:05:5b:98:16:86: de:b3:35:42:02:90:7c:38:45:34:2f:19:c8:15:1a:96:ec:f4: a7:6c:07:76:6e:aa:13:d8:9d:e9:09:12:cc:38:0b:2d:cd:30: da:51:65:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5 NjNDM0Y2MzgwHhcNMjUxMTAyMTY0NTQ3WhcNMjUxMTA5MTY0NTQ3WjAYMRYwFAYD VQQDEw02OTA3OGFiYi1hODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc4TdVjZA3tnVxBndCldDXA0hnmWpTXwRzLNdBjOnsbdxL8wFe/w98Dttud1 X96zZ3teCmP+0KLVlWBqzVmvNa+xO7IL+jJ5++BXGb4a2NbC+75duqb4Vi2qSscQ Hw8r0V0jMY0q+BGWnpMuY+mZg6C06hT3wubhV0jeIcjMYhFuGeAURrcWZBZCZfCi klup5AygaF9OlguHwi++2t7PwFwKDUTohWuXR8Z2ZL8l5I9g0sC2trvaCQsP9677 tBzwcklsB6bkm9mSLJHizhQknATuGvJXi17stbdmFrjjP6jhAOfXxlRyzcRqMw8h vR2/zs+fZ2q18u6ZZTDms6ej8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyez+g2 eYw0FAMdnPkcAKh+G2zmMB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4 RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDAwRS84MDBFM0Y3MjM4RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85 a2Qya1hEZW1JbE9XUEQ5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp4dxRDaqYWBWhDEuwA5o08lXq0fI7Tm6UbLVDX76/hewfuD52eZSt lRLEE5nt0zLVejVnVAj/ugH3jezp4KUsIBBZyhNhnLDnvVD7cgHQC2vKQs+m0ULu Fvq8WAVnMaY3ni3oqM9eY2WDahHq0l3CIagak2Ll2GySE7/1hyrUWNf5mZeDlexa /Y/u3LlXsv7tqnfyDohuJ+/RPeqOAPY5lmqmoG8yqMOoRU6he3yk7WizfvynKs/E dxJsoF8TVy2B6p/AClaroQFJDPMWfw6RVVCtBVuYFobeszVCApB8OEU0LxnIFRqW 7PSnbAd2bqoT2J3pCRLMOAstzTDaUWWH -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:03 2025 by rpki-client