$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: uhbP2rvDehExEe2/4TlK/gPGc20SLTgOWUT3LRW/S8Q= Subject key identifier: D4:36:D5:4B:15:E3:30:36:E6:00:F0:2E:59:B1:E0:AC:C1:BF:3D:F2 Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 197E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 1F3D Signing time: Thu 18 Sep 2025 16:31:15 +0000 Manifest this update: Thu 18 Sep 2025 16:31:15 +0000 Manifest next update: Thu 25 Sep 2025 16:31:15 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: 28xyFAJS1NMcTAcVYWx9L6fWFfn8FoZH+GynXKSFPw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6526 (0x197e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: Sep 18 16:31:15 2025 GMT Not After : Sep 25 16:31:15 2025 GMT Subject: CN=68cc33d3-2631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:51:06:32:bc:83:44:4e:5a:56:cc:35:62: c1:fd:18:75:ef:7d:79:68:23:b2:7e:45:3d:7e:a7: 11:de:57:93:50:4f:80:2b:40:68:05:c9:4e:f2:1a: 50:20:0d:e3:55:d7:a6:43:64:05:fd:f3:6c:b5:1a: 51:38:51:f9:38:25:c1:c2:7d:19:e6:24:bd:b6:ef: 26:2c:9f:e9:72:2e:5b:53:9f:b0:06:14:5f:7e:b9: a3:e7:57:e9:56:a9:ec:c5:49:f2:32:4d:25:7a:ca: 5f:25:2a:04:ef:e2:9b:81:7a:42:7e:ba:7c:02:81: d1:e0:56:c9:bf:23:14:73:80:53:0f:33:54:8b:aa: 44:10:60:68:fb:31:98:2e:e8:70:c1:cf:fd:ad:45: 38:45:cd:85:7f:33:62:4d:0c:61:dd:bb:ca:7e:4c: 49:c3:68:89:98:24:6b:5a:3b:04:96:d2:06:f2:a3: 3a:eb:cc:c2:72:eb:fd:95:27:ee:a4:cd:19:bc:3b: e3:6a:00:ee:4c:d2:71:1c:60:4f:8f:a2:f1:e1:6c: c2:1b:f8:8a:03:55:6d:29:f4:e3:8c:2d:cd:52:16: 6e:b3:8d:83:17:d3:4d:aa:c5:8d:b7:27:b3:85:64: 4d:53:5a:48:49:93:77:5d:07:97:2d:0f:c6:bd:ac: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:D5:4B:15:E3:30:36:E6:00:F0:2E:59:B1:E0:AC:C1:BF:3D:F2 X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:22:81:a9:0b:fb:16:b5:13:b1:c0:d8:19:5e:37:cc:64:5b: 25:fa:9e:76:84:f6:c3:34:3a:1b:f0:7c:13:6e:b7:dd:66:af: 72:09:01:8a:6f:b8:3f:49:f3:38:dd:a6:b7:a6:b1:6b:03:9f: 4e:dd:4b:d1:02:51:f0:a2:60:20:00:ce:cc:67:85:45:fe:4f: 0c:14:39:38:80:dc:9e:6c:40:97:53:21:4b:29:ce:89:d6:22: 89:82:8d:c0:1c:0b:27:12:c1:b3:cf:c6:8b:1e:3b:ca:0b:79: 4b:45:73:9b:d3:bf:91:d1:0f:da:60:49:97:3a:af:90:8c:1b: 1a:77:0f:c2:de:0f:fa:a0:d4:7d:28:fb:ad:e8:ac:18:f3:ca: 8f:ad:e6:8d:3b:02:52:6a:d7:b5:32:ca:c6:19:4d:bb:3d:22: 7b:5b:fe:7e:ae:f1:9b:b6:45:ef:7e:f6:35:a3:42:9b:b7:e8: a6:39:f1:ee:26:21:54:39:28:e6:a0:ca:8b:be:86:c0:3b:e3: 84:97:93:d1:ed:98:c4:e9:16:87:92:a8:3a:e6:10:85:4b:9c: c1:d2:18:25:9b:75:bb:b5:f0:df:11:cb:e8:05:5c:ec:9d:38: 3b:ac:6f:8a:5d:f2:8f:bf:28:d4:13:d3:d0:7a:75:53:2f:93: 0a:e6:1d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjUwOTE4MTYzMTE1WhcNMjUwOTI1MTYzMTE1WjAYMRYwFAYD VQQDEw02OGNjMzNkMy0yNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TxRBjK8g0ROWlbMNWLB/Rh17315aCOyfkU9fqcR3leTUE+AK0BoBclO8hpQ IA3jVdemQ2QF/fNstRpROFH5OCXBwn0Z5iS9tu8mLJ/pci5bU5+wBhRffrmj51fp VqnsxUnyMk0lespfJSoE7+KbgXpCfrp8AoHR4FbJvyMUc4BTDzNUi6pEEGBo+zGY Luhwwc/9rUU4Rc2FfzNiTQxh3bvKfkxJw2iJmCRrWjsEltIG8qM668zCcuv9lSfu pM0ZvDvjagDuTNJxHGBPj6Lx4WzCG/iKA1VtKfTjjC3NUhZus42DF9NNqsWNtyez hWRNU1pISZN3XQeXLQ/GvaxHtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ21UsV 4zA25gDwLlmx4KzBvz3yMB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEIoGpC/sWtROxwNgZXjfMZFsl+p52hPbDNDob8HwTbrfdZq9yCQGK b7g/SfM43aa3prFrA59O3UvRAlHwomAgAM7MZ4VF/k8MFDk4gNyebECXUyFLKc6J 1iKJgo3AHAsnEsGzz8aLHjvKC3lLRXOb07+R0Q/aYEmXOq+QjBsadw/C3g/6oNR9 KPut6KwY88qPreaNOwJSate1MsrGGU27PSJ7W/5+rvGbtkXvfvY1o0Kbt+imOfHu JiFUOSjmoMqLvobAO+OEl5PR7ZjE6RaHkqg65hCFS5zB0hglm3W7tfDfEcvoBVzs nTg7rG+KXfKPvyjUE9PQenVTL5MK5h0P -----END CERTIFICATE-----Generated at Fri Sep 19 08:50:57 2025 by rpki-client