$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json) Hash identifier: fi65dF9oy29yyTMPzIUDZ+ZESV9Mvv6Z+3a2T7dkb4I= Subject key identifier: 52:27:05:BA:63:45:E3:C7:3E:83:C6:E8:1A:4E:35:90:D6:C5:79:E0 Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Certificate serial: 15AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft Manifest number: 15A5 Signing time: Thu 18 Sep 2025 16:54:08 +0000 Manifest this update: Thu 18 Sep 2025 16:54:08 +0000 Manifest next update: Thu 25 Sep 2025 16:54:08 +0000 Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: iwEVwSXf/yX0OtOuuoHj6a0aEtNtltOvxQFlezxrRaI=) 2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: xdBFNPkazDP5YP2MUntpZBwPWV+oy0u7bSlxk8ZVSa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5551 (0x15af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Validity Not Before: Sep 18 16:54:08 2025 GMT Not After : Sep 25 16:54:08 2025 GMT Subject: CN=68cc3930-c6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:ac:b9:fa:80:b5:3e:08:0c:41:32:58:df: 04:4b:85:cf:a5:62:be:9f:fd:0e:a7:b1:73:3e:ba: 69:b4:56:db:05:5e:41:e0:14:fb:8d:b3:b9:f0:5a: ab:79:37:af:0a:a3:49:94:88:4f:f2:ce:3f:a2:e1: b0:20:36:a1:02:d7:b0:7a:39:d3:f3:b3:36:08:d6: 56:e9:bd:61:67:6e:b5:93:0a:42:a6:c3:1d:c8:48: ce:d2:cf:ad:bb:21:fe:52:30:14:3c:7e:7e:61:cf: b7:a4:37:64:39:c4:0f:96:4d:a7:21:08:02:76:0a: 2a:ec:72:35:c4:e2:63:51:2b:29:ca:62:bd:de:66: 89:15:8e:cf:21:03:08:ef:be:51:f8:b9:9a:73:d5: f4:92:c1:17:dc:89:1f:52:23:60:55:6a:21:81:70: 01:d5:a2:c7:a2:d9:ce:2b:fa:5c:b4:67:88:02:1b: d4:9d:9f:89:a4:3d:c1:7b:f8:a7:f5:f1:2a:54:b3: 46:7f:15:4d:df:ed:49:b4:ef:f0:32:36:7f:a6:37: 64:17:6d:2e:63:b1:3b:88:a0:6a:c2:28:a5:b4:32: e4:cd:7a:26:80:78:07:a9:2b:48:dc:2e:20:dc:48: 5b:b8:1a:f7:c8:b9:b0:21:8f:65:da:d1:cc:8e:9c: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:27:05:BA:63:45:E3:C7:3E:83:C6:E8:1A:4E:35:90:D6:C5:79:E0 X509v3 Authority Key Identifier: keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e3:7a:61:3d:f0:77:89:e1:27:a0:8b:41:9e:f4:7f:2e:de: 5a:b9:43:53:35:a8:c8:ef:c4:1c:ad:8c:dd:b3:87:01:2a:ad: 1c:3a:65:5f:55:c9:48:aa:04:dd:80:fc:e8:f4:ec:75:60:de: 1f:a2:14:00:ab:59:84:10:09:2a:24:57:8a:07:a6:e0:37:af: 6d:c7:27:90:82:33:9d:13:e9:2a:af:f8:15:c3:5c:76:a7:48: 08:cc:52:66:90:87:fa:22:23:a0:b0:04:e2:41:99:c6:c5:6b: f3:d1:12:de:ed:45:69:94:a7:dc:e5:0a:75:2d:d5:f9:b1:db: ac:c0:92:18:e4:8d:de:f2:7d:7a:6b:72:d1:f5:84:e3:df:38: a5:0a:eb:22:f8:96:f0:32:6a:0f:36:a1:0d:2a:a8:9c:dd:c9: 5d:7c:8e:d0:63:4a:08:78:6a:61:cc:15:01:8f:cd:ac:0f:3a: b0:50:c7:7c:c3:89:62:05:99:78:c0:a1:a6:9f:54:58:23:db: 28:86:ff:99:a1:c8:5e:40:cc:01:b1:b0:dd:6b:ce:92:f2:89: 2a:25:b0:47:d5:6f:fa:55:33:a9:61:70:75:b9:03:e3:9c:cf: e9:e9:e5:05:72:60:86:0c:17:7c:3d:17:f7:4d:e1:60:a7:13: 72:27:b5:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5 NjNDM0Y2MzgwHhcNMjUwOTE4MTY1NDA4WhcNMjUwOTI1MTY1NDA4WjAYMRYwFAYD VQQDEw02OGNjMzkzMC1jNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcasufqAtT4IDEEyWN8ES4XPpWK+n/0Op7FzPrpptFbbBV5B4BT7jbO58Fqr eTevCqNJlIhP8s4/ouGwIDahAtewejnT87M2CNZW6b1hZ261kwpCpsMdyEjO0s+t uyH+UjAUPH5+Yc+3pDdkOcQPlk2nIQgCdgoq7HI1xOJjUSspymK93maJFY7PIQMI 775R+Lmac9X0ksEX3IkfUiNgVWohgXAB1aLHotnOK/pctGeIAhvUnZ+JpD3Be/in 9fEqVLNGfxVN3+1JtO/wMjZ/pjdkF20uY7E7iKBqwiiltDLkzXomgHgHqStI3C4g 3EhbuBr3yLmwIY9l2tHMjpxGfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFInBbpj RePHPoPG6BpONZDWxXngMB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4 RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDAwRS84MDBFM0Y3MjM4RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85 a2Qya1hEZW1JbE9XUEQ5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA043phPfB3ieEnoItBnvR/Lt5auUNTNajI78QcrYzds4cBKq0cOmVf VclIqgTdgPzo9Ox1YN4fohQAq1mEEAkqJFeKB6bgN69txyeQgjOdE+kqr/gVw1x2 p0gIzFJmkIf6IiOgsATiQZnGxWvz0RLe7UVplKfc5Qp1LdX5sduswJIY5I3e8n16 a3LR9YTj3zilCusi+JbwMmoPNqENKqic3cldfI7QY0oIeGphzBUBj82sDzqwUMd8 w4liBZl4wKGmn1RYI9sohv+ZocheQMwBsbDda86S8okqJbBH1W/6VTOpYXB1uQPj nM/p6eUFcmCGDBd8PRf3TeFgpxNyJ7X3 -----END CERTIFICATE-----Generated at Thu Sep 18 20:46:19 2025 by rpki-client