$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: YPbi6ENmJ6HsxeQxAW/ftoIlMZdJmmszM7XNrUuxbfQ= Subject key identifier: AA:D0:98:AA:80:FB:08:3A:0E:A5:B6:CE:55:D4:A1:53:45:FB:EF:5C Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 09E6 Signing time: Wed 22 Oct 2025 20:36:57 +0000 Manifest this update: Wed 22 Oct 2025 20:36:57 +0000 Manifest next update: Wed 29 Oct 2025 20:36:57 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: 6RVcAxxuNzYJqWnl4XINjBQjGzVFrqW+dqE3ya+0SII=) 2: E09840C4D5B511EFB22A647DC4F9AE02.roa (hash: UUua9CtlmlNUMxfEXymhiloAwqTpKtC9fDGIWh1Bzk8=) 3: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: +YzJrYGnbGLCjVsOBK3rhph4HgKiBqVFBpU2hsaMvKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Oct 22 20:36:57 2025 GMT Not After : Oct 29 20:36:57 2025 GMT Subject: CN=68f94069-6e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:fa:9b:ed:55:8d:af:d9:22:45:4c:df:7a: 96:9d:6b:2c:99:c5:2c:e1:1b:88:3c:23:ab:d0:e7: e3:e9:01:e9:82:59:f6:00:c9:e8:51:18:eb:90:8a: 04:d2:c3:07:38:02:7d:9a:5d:d7:ec:5a:f4:16:3c: 48:7d:84:ac:83:be:29:69:03:cd:af:d3:d9:49:bb: 93:0b:44:ef:c5:ce:1d:64:c1:59:43:2c:f8:a7:a0: 6f:2b:be:3d:f8:4c:2d:41:3d:13:ce:7b:75:f9:2b: 96:ad:41:b4:ff:53:bb:5c:ea:d8:36:7f:e2:a5:61: c5:55:a0:01:49:aa:52:02:c7:75:0a:d6:ef:5a:67: cb:17:fb:fa:13:27:57:07:3d:7f:be:2a:d5:d5:b7: 53:a4:2b:73:c4:53:26:0d:35:09:df:73:ae:0b:e8: b0:48:fa:49:b7:51:96:47:e2:35:10:b2:6f:a8:97: 8b:43:20:51:15:db:16:00:c3:17:a7:03:23:b3:fc: e6:14:96:f8:e1:6f:8a:33:0e:7c:e6:4c:0f:9c:6f: c5:9a:2a:3d:9a:e3:fa:33:ff:99:53:67:3b:8d:f0: f5:bf:45:d4:25:cf:0e:6e:97:d2:44:3a:0d:93:d1: 10:29:55:8c:b0:dd:69:ec:3a:87:a7:f0:7e:d7:75: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D0:98:AA:80:FB:08:3A:0E:A5:B6:CE:55:D4:A1:53:45:FB:EF:5C X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:60:ca:1b:95:b0:91:f0:05:e6:09:15:e8:b5:44:85:c8:17: a4:47:d6:88:f7:d5:1c:ed:23:ed:bb:07:bf:78:14:11:34:b2: 7e:d0:35:be:24:ec:a1:bd:be:43:d2:e9:9f:25:90:59:69:09: 78:ef:b8:82:9d:db:c3:0c:f5:8a:95:bb:5f:d5:54:3f:86:21: b4:ae:45:1e:11:84:98:95:40:be:49:f2:31:c6:1b:72:dd:79: a1:45:83:fd:fd:e0:ae:32:25:d2:d2:9c:dd:77:2e:6f:af:1f: 4b:72:62:c1:b7:65:56:a2:f8:e1:e9:f3:79:26:ef:6b:c6:00: 6e:3d:27:6e:2d:25:b8:77:74:c5:42:67:21:84:bb:34:07:20: 5d:a7:77:c8:b7:2e:04:5e:f3:73:67:ce:61:29:a0:eb:38:cc: 5e:d1:bb:ee:bb:f9:d0:86:14:a6:9f:ad:b5:8e:07:96:35:86: 60:5d:17:38:83:8e:25:e0:49:b6:de:d6:ce:89:ff:e5:cd:15: 88:b5:6d:35:73:fa:37:dd:b7:cd:57:7f:23:7e:5d:37:7b:7f: 57:2c:cf:42:7f:f0:0e:09:8a:6e:47:34:f3:dd:82:d4:1a:d6: 96:e1:b5:d1:a2:2e:43:cf:fe:f0:6d:b6:2f:a5:b5:01:b7:36: e1:23:1b:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUxMDIyMjAzNjU3WhcNMjUxMDI5MjAzNjU3WjAYMRYwFAYD VQQDEw02OGY5NDA2OS02ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbL6m+1Vja/ZIkVM33qWnWssmcUs4RuIPCOr0Ofj6QHpgln2AMnoURjrkIoE 0sMHOAJ9ml3X7Fr0FjxIfYSsg74paQPNr9PZSbuTC0Tvxc4dZMFZQyz4p6BvK749 +EwtQT0Tznt1+SuWrUG0/1O7XOrYNn/ipWHFVaABSapSAsd1CtbvWmfLF/v6EydX Bz1/virV1bdTpCtzxFMmDTUJ33OuC+iwSPpJt1GWR+I1ELJvqJeLQyBRFdsWAMMX pwMjs/zmFJb44W+KMw585kwPnG/Fmio9muP6M/+ZU2c7jfD1v0XUJc8ObpfSRDoN k9EQKVWMsN1p7DqHp/B+13UJNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrQmKqA +wg6DqW2zlXUoVNF++9cMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3YMoblbCR8AXmCRXotUSFyBekR9aI99Uc7SPtuwe/eBQRNLJ+0DW+ JOyhvb5D0umfJZBZaQl477iCndvDDPWKlbtf1VQ/hiG0rkUeEYSYlUC+SfIxxhty 3XmhRYP9/eCuMiXS0pzddy5vrx9LcmLBt2VWovjh6fN5Ju9rxgBuPSduLSW4d3TF QmchhLs0ByBdp3fIty4EXvNzZ85hKaDrOMxe0bvuu/nQhhSmn621jgeWNYZgXRc4 g44l4Em23tbOif/lzRWItW01c/o33bfNV38jfl03e39XLM9Cf/AOCYpuRzTz3YLU GtaW4bXRoi5Dz/7wbbYvpbUBtzbhIxvz -----END CERTIFICATE-----Generated at Fri Oct 24 00:15:13 2025 by rpki-client