$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json) Hash identifier: j/+CZ9VR7Zcx7qEsifYBqH+jVs7lfPwxxYShRMleXdE= Subject key identifier: 22:1E:66:69:DB:BC:FE:B9:31:BA:D2:F1:00:91:02:A0:04:02:D4:61 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft Manifest number: 0130 Signing time: Mon 03 Nov 2025 04:32:20 +0000 Manifest this update: Mon 03 Nov 2025 04:32:20 +0000 Manifest next update: Mon 10 Nov 2025 04:32:20 +0000 Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: O+ocxNgD3P0ohiA4LbX0R4ZLi2oqFfKDtdlEv8nt6ZY=) 2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: DySwA8C4czN5vHz0fLCB/xltzHfCwXmq3TdjlNfOwqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: Nov 3 04:32:20 2025 GMT Not After : Nov 10 04:32:20 2025 GMT Subject: CN=69083054-b680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:62:87:68:62:27:99:2e:c9:f6:a8:d2:93: 19:19:52:27:59:73:23:87:aa:5d:80:b1:7c:c4:ea: 36:c9:b7:62:0f:ff:4a:10:69:2c:b7:ae:72:78:1b: db:ca:24:28:3b:c8:37:dc:67:72:07:f5:c9:63:4e: 54:8b:bf:51:0b:a2:7a:7b:17:0a:e1:0b:56:07:59: e7:0a:d2:b6:8d:4f:db:49:05:f2:b3:4d:62:22:0d: de:e1:be:6c:84:7c:c5:82:7e:9a:28:07:38:ad:ce: 17:a9:06:45:a7:bc:1d:9b:f7:09:e5:05:b9:85:79: fa:30:1f:08:94:26:ad:6c:12:ca:c7:d5:6d:af:e6: 2b:a9:0d:b8:48:ed:3d:0c:85:ca:46:0a:1a:9d:6c: c9:c9:db:e5:fb:3e:ea:1b:29:a9:e3:f8:3c:6f:0e: ee:81:07:9d:4a:ea:c2:a4:87:3d:35:dd:f0:b4:72: a2:40:c0:06:e3:5f:bb:7e:33:e6:23:44:22:dd:cd: de:1c:8a:af:77:8e:1d:dc:24:d0:a9:14:46:19:45: 02:8e:e3:0a:b9:82:58:a1:44:b2:7c:f5:33:3a:5a: 76:03:4a:ff:43:54:61:c7:93:54:97:8e:38:9b:86: da:57:dc:3c:70:8a:aa:88:e0:14:f1:10:62:86:51: 3e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1E:66:69:DB:BC:FE:B9:31:BA:D2:F1:00:91:02:A0:04:02:D4:61 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:49:a9:b2:09:fe:fb:c2:1c:a2:79:2a:a8:b2:9a:ba:b1:4d: 71:d8:49:db:af:ad:c0:ba:ac:cc:9f:c5:99:a9:1b:57:87:2e: ea:63:9b:05:91:37:d7:f8:24:1c:83:56:fd:7d:10:9a:22:ac: ea:26:86:05:ce:36:9c:58:de:29:2d:2a:6f:00:0a:9a:c1:25: 2a:e4:d2:45:7d:51:c2:eb:52:7e:74:01:31:50:de:11:b9:ed: 11:eb:08:d7:3c:4c:ff:41:40:89:50:a5:86:65:aa:2d:ba:3d: 2e:6f:82:a8:30:9a:40:4d:38:50:04:0d:d9:7c:d8:81:f1:b8: 4c:42:7b:12:79:60:dc:19:38:c7:8d:b1:60:21:30:22:1e:4b: cf:33:07:dc:60:a0:34:24:80:ad:db:21:e3:d0:e5:7a:fb:7b: 0e:7f:3e:5b:07:e7:89:6c:64:2c:d3:b6:28:0f:a8:c1:a4:f5: 95:40:18:13:c9:41:ed:17:a5:d8:be:46:93:68:d6:d1:41:9e: 6e:a6:e4:a0:3d:73:c1:8e:5e:d3:d6:8c:41:8c:09:2f:f5:bf: 85:dd:43:1b:92:cb:d6:1d:69:d2:0f:b2:be:44:50:0b:e8:c2: 72:c7:9b:59:6f:35:21:66:0a:16:3a:8e:38:de:49:dd:b0:63: 44:d9:f0:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUxMTAzMDQzMjIwWhcNMjUxMTEwMDQzMjIwWjAYMRYwFAYD VQQDEw02OTA4MzA1NC1iNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0S5ih2hiJ5kuyfao0pMZGVInWXMjh6pdgLF8xOo2ybdiD/9KEGkst65yeBvb yiQoO8g33GdyB/XJY05Ui79RC6J6excK4QtWB1nnCtK2jU/bSQXys01iIg3e4b5s hHzFgn6aKAc4rc4XqQZFp7wdm/cJ5QW5hXn6MB8IlCatbBLKx9Vtr+YrqQ24SO09 DIXKRgoanWzJydvl+z7qGymp4/g8bw7ugQedSurCpIc9Nd3wtHKiQMAG41+7fjPm I0Qi3c3eHIqvd44d3CTQqRRGGUUCjuMKuYJYoUSyfPUzOlp2A0r/Q1Rhx5NUl444 m4baV9w8cIqqiOAU8RBihlE+UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIeZmnb vP65MbrS8QCRAqAEAtRhMB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1T Nmkyc2hybUtPWXp3eGIxdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAASamyCf77whyieSqospq6sU1x2Enbr63AuqzMn8WZqRtXhy7qY5sF kTfX+CQcg1b9fRCaIqzqJoYFzjacWN4pLSpvAAqawSUq5NJFfVHC61J+dAExUN4R ue0R6wjXPEz/QUCJUKWGZaotuj0ub4KoMJpATThQBA3ZfNiB8bhMQnsSeWDcGTjH jbFgITAiHkvPMwfcYKA0JICt2yHj0OV6+3sOfz5bB+eJbGQs07YoD6jBpPWVQBgT yUHtF6XYvkaTaNbRQZ5upuSgPXPBjl7T1oxBjAkv9b+F3UMbksvWHWnSD7K+RFAL 6MJyx5tZbzUhZgoWOo443kndsGNE2fDX -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:00 2025 by rpki-client