$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: qbnnPY1hCgYkdcRZYEBumCoPo/pNW2gC4H9GfIWUE5c= Subject key identifier: D5:F8:47:E4:DE:87:65:48:17:95:E9:F3:46:32:2D:7D:62:78:CB:01 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 2D Signing time: Mon 03 Nov 2025 07:39:23 +0000 Manifest this update: Mon 03 Nov 2025 07:39:22 +0000 Manifest next update: Mon 10 Nov 2025 07:39:22 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: BIxEFC0vSa9YIfs/Vm7h1s36e3IcT39+pobQQMnhY08=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Nov 3 07:39:22 2025 GMT Not After : Nov 10 07:39:22 2025 GMT Subject: CN=69085c2b-cab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:0d:c1:a6:14:61:90:75:0b:4f:44:28:46: d6:c6:9b:95:67:62:6d:fc:cc:a9:08:4a:74:ff:bb: fe:e9:b5:a2:c9:9d:7f:f2:6e:8e:01:54:ec:b4:43: 4a:ca:d0:4c:bb:12:a3:fa:e4:f5:e3:06:16:5e:25: 0c:2a:d2:36:6d:ed:cb:6c:f2:38:45:5a:31:30:6a: 67:e3:6e:b4:f8:a6:fe:e4:0c:3f:ea:e9:36:db:97: 84:8f:10:bc:f0:bc:45:9d:37:4f:26:aa:f3:2c:22: cd:e9:49:5f:3c:97:72:3e:2a:4e:6e:54:9a:ea:da: d0:31:d0:f7:7f:48:3c:53:e8:b4:fc:36:fe:e0:3c: 61:49:5d:b7:d2:88:9e:d6:b7:8a:be:d6:71:0b:98: 54:4a:3e:a4:7a:20:67:c2:1c:d0:f9:bf:20:9e:98: c8:d7:c3:6e:57:19:a4:6e:e8:7b:ca:63:ae:78:cd: f3:81:64:13:cb:89:94:44:49:d0:21:33:9a:7e:6f: de:83:57:64:e7:3c:89:f3:aa:68:1a:a2:3b:c0:30: ba:08:25:62:c7:80:e1:c7:83:4f:5a:cc:c0:a6:ad: db:b0:b2:9c:11:d6:fe:10:ba:77:b5:c4:c8:b9:b0: 1e:cb:7b:da:93:dc:3f:9c:79:e8:75:f2:38:b0:43: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F8:47:E4:DE:87:65:48:17:95:E9:F3:46:32:2D:7D:62:78:CB:01 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d7:79:36:e7:3e:af:17:8a:71:7b:62:f4:42:b3:a1:ed:82: fb:8e:cd:40:be:1f:6f:6c:61:25:e2:86:e4:f4:f3:7f:76:24: 94:21:fc:48:7b:29:81:65:f9:9b:c5:4c:c3:4b:2d:1c:5c:a4: 0f:14:67:b3:1a:5c:34:1a:9d:52:b7:24:32:13:7d:16:a7:91: 1b:9e:25:bf:43:82:d8:67:87:cf:51:70:a2:a0:91:00:36:69: 95:16:42:1b:0f:91:d1:39:49:9b:3a:c1:35:79:20:15:49:08: c8:af:cc:bb:8c:03:28:d1:2e:9b:74:19:48:a4:cb:00:40:ba: 23:7c:e0:43:c4:f0:5a:bf:5c:6f:f6:68:8b:56:e5:d7:02:45: ef:5a:dc:fa:78:9f:bf:8e:9a:f5:3e:b3:72:78:b4:df:8e:3e: 5b:ad:7e:a9:03:45:58:7f:0f:ec:f7:eb:1d:32:ff:de:ea:e1: f2:eb:c4:90:b9:1d:4d:70:3e:d3:17:97:6e:c8:d5:7a:53:68: 2a:b6:38:39:e5:8f:4e:8e:4a:76:f9:ad:7b:89:9b:87:14:d9: 95:48:af:60:96:51:77:90:c7:b6:19:1b:5a:52:00:53:ce:ff: 68:1b:e0:c3:fe:d4:1a:6b:34:90:f9:76:9b:de:78:86:f5:eb: dd:be:e7:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNTExMDMwNzM5MjJaFw0yNTExMTAwNzM5MjJaMBgxFjAUBgNV BAMTDTY5MDg1YzJiLWNhYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLcQ3BphRhkHULT0QoRtbGm5VnYm38zKkISnT/u/7ptaLJnX/ybo4BVOy0Q0rK 0Ey7EqP65PXjBhZeJQwq0jZt7cts8jhFWjEwamfjbrT4pv7kDD/q6Tbbl4SPELzw vEWdN08mqvMsIs3pSV88l3I+Kk5uVJrq2tAx0Pd/SDxT6LT8Nv7gPGFJXbfSiJ7W t4q+1nELmFRKPqR6IGfCHND5vyCemMjXw25XGaRu6HvKY654zfOBZBPLiZRESdAh M5p+b96DV2TnPInzqmgaojvAMLoIJWLHgOHHg09azMCmrduwspwR1v4Qune1xMi5 sB7Le9qT3D+ceeh18jiwQxPlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1fhH5N6H ZUgXlenzRjItfWJ4ywEwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrXeTbnPq8XinF7YvRCs6HtgvuOzUC+H29sYSXihuT08392JJQh/Eh7 KYFl+ZvFTMNLLRxcpA8UZ7MaXDQanVK3JDITfRankRueJb9Dgthnh89RcKKgkQA2 aZUWQhsPkdE5SZs6wTV5IBVJCMivzLuMAyjRLpt0GUikywBAuiN84EPE8Fq/XG/2 aItW5dcCRe9a3Pp4n7+OmvU+s3J4tN+OPlutfqkDRVh/D+z36x0y/97q4fLrxJC5 HU1wPtMXl27I1XpTaCq2ODnlj06OSnb5rXuJm4cU2ZVIr2CWUXeQx7YZG1pSAFPO /2gb4MP+1BprNJD5dpveeIb1692+5yM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:14 2025 by rpki-client