$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: gdmaUBRwnyxQvHii65tK9FUq8I4rV5L8QCcq/VaMQBI= Subject key identifier: B7:76:68:F7:AE:89:C0:D8:D0:9D:66:53:A1:48:99:74:8F:68:23:FA Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 022B Signing time: Mon 27 Oct 2025 03:29:38 +0000 Manifest this update: Mon 27 Oct 2025 03:29:37 +0000 Manifest next update: Mon 03 Nov 2025 03:29:37 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: hv21JiGRHvnBenOMPoTaswV4UQa/+vA0LcCIz8Jdqfc=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: Oct 27 03:29:37 2025 GMT Not After : Nov 3 03:29:37 2025 GMT Subject: CN=68fee722-cc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:a5:c8:bd:67:b2:3e:be:dd:6f:1c:78:d1: b4:3d:6e:aa:cf:e3:39:c1:ca:c7:de:ce:dd:4b:df: 0e:a0:9e:b2:22:4a:aa:3b:64:e6:59:32:8c:8b:05: d8:40:1b:b9:a1:f8:b7:7e:cc:75:b2:70:82:ba:8b: c9:43:02:1c:bb:a7:57:58:5d:4e:d2:b7:8a:d2:de: 67:e3:32:17:34:2d:d2:94:0c:8c:9b:cd:60:91:54: 9a:01:f5:23:07:5e:43:af:93:90:f9:83:f8:7c:e5: 90:c6:a0:ff:e2:00:73:f7:d7:50:1f:a3:1c:2a:1d: 1c:b5:d7:c7:78:00:55:43:47:ed:d3:86:25:32:fb: 69:40:4f:c4:c0:d1:b4:73:eb:51:0d:8c:b3:a0:93: 8d:1f:35:e2:6c:97:1f:92:75:e8:11:6d:90:bf:3c: de:2f:fd:8f:96:34:9c:a5:2b:c8:bf:d5:b0:33:d4: 23:b5:cb:26:b4:a2:84:bc:32:5d:d1:10:b6:95:67: 0c:b9:25:45:7d:1a:8a:a0:41:c7:f1:93:8a:8d:c8: 7b:91:9e:4a:73:51:fa:fe:ea:ac:db:ff:18:10:e0: c7:2c:62:c4:e1:65:03:d0:a8:a1:39:fe:0a:25:f9: 9d:77:14:48:82:00:9f:99:97:a1:90:02:7c:67:d2: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:76:68:F7:AE:89:C0:D8:D0:9D:66:53:A1:48:99:74:8F:68:23:FA X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:15:99:8a:f8:3d:df:ba:a8:41:05:23:e8:63:76:70:48:d6: f1:db:62:63:bb:1c:3d:10:50:dc:c7:05:5c:72:44:5f:5f:c5: 34:5c:72:eb:31:36:ea:13:7d:42:ef:66:19:7d:31:d5:cb:ef: 4d:56:c2:19:1b:1d:73:2b:4a:d0:55:73:2d:34:01:fa:ab:c0: 84:97:1b:96:f3:fc:e9:8a:a9:00:c8:64:e9:23:69:9e:01:61: 4f:ae:18:4e:79:bc:4c:4e:01:71:1e:d3:88:42:1a:83:67:62: cf:a5:ba:89:4b:23:bf:a0:a9:10:4a:22:91:72:78:69:35:da: e3:cb:6a:e9:d2:7a:80:74:bb:4f:fd:a4:ee:d0:6e:3c:76:a2: 30:18:8c:4e:ba:a7:b4:d5:15:4e:e9:c7:de:c8:d6:0a:47:98: 56:ea:8a:2f:8b:83:f8:2f:f1:61:a1:4b:46:c0:3d:9f:fb:3a: 3b:2f:31:29:1c:9e:60:92:94:e8:ec:dd:f5:1c:9b:2a:79:ee: 91:1e:14:8b:84:6b:0f:21:a4:1b:d8:65:6b:c0:07:81:e7:b9: d2:c4:bb:0c:1e:ab:d7:d9:a6:1a:60:dc:3e:99:fb:1e:2e:2d: 00:3c:a2:cf:5b:0c:53:e5:64:e5:17:a1:64:e7:b8:f1:35:29: b3:41:4e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjUxMDI3MDMyOTM3WhcNMjUxMTAzMDMyOTM3WjAYMRYwFAYD VQQDEw02OGZlZTcyMi1jYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DqlyL1nsj6+3W8ceNG0PW6qz+M5wcrH3s7dS98OoJ6yIkqqO2TmWTKMiwXY QBu5ofi3fsx1snCCuovJQwIcu6dXWF1O0reK0t5n4zIXNC3SlAyMm81gkVSaAfUj B15Dr5OQ+YP4fOWQxqD/4gBz99dQH6McKh0ctdfHeABVQ0ft04YlMvtpQE/EwNG0 c+tRDYyzoJONHzXibJcfknXoEW2QvzzeL/2PljScpSvIv9WwM9QjtcsmtKKEvDJd 0RC2lWcMuSVFfRqKoEHH8ZOKjch7kZ5Kc1H6/uqs2/8YEODHLGLE4WUD0KihOf4K JfmddxRIggCfmZehkAJ8Z9LJTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd2aPeu icDY0J1mU6FImXSPaCP6MB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsFZmK+D3fuqhBBSPoY3ZwSNbx22Jjuxw9EFDcxwVcckRfX8U0XHLr MTbqE31C72YZfTHVy+9NVsIZGx1zK0rQVXMtNAH6q8CElxuW8/zpiqkAyGTpI2me AWFPrhhOebxMTgFxHtOIQhqDZ2LPpbqJSyO/oKkQSiKRcnhpNdrjy2rp0nqAdLtP /aTu0G48dqIwGIxOuqe01RVO6cfeyNYKR5hW6oovi4P4L/FhoUtGwD2f+zo7LzEp HJ5gkpTo7N31HJsqee6RHhSLhGsPIaQb2GVrwAeB57nSxLsMHqvX2aYaYNw+mfse Li0APKLPWwxT5WTlF6Fk57jxNSmzQU4Z -----END CERTIFICATE-----Generated at Tue Oct 28 18:43:01 2025 by rpki-client