$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json) Hash identifier: PchT7LQ5MGtOxbe73D+mcNfP4YU1fGYle1sGLVbjEC0= Subject key identifier: 89:3F:6C:BB:7A:9A:C9:D5:50:02:BD:A2:74:0A:70:65:0D:56:CE:87 Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft Manifest number: 076C Signing time: Tue 04 Nov 2025 21:41:26 +0000 Manifest this update: Tue 04 Nov 2025 21:41:25 +0000 Manifest next update: Tue 11 Nov 2025 21:41:25 +0000 Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: ghT+eLjvIsuz7iKuTTcld6q4iDz9gu859R9Dl9fg4Nk=) 2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: vYc0h4qvjuE88FDf7yqk3rmrIjWt9VABoOzgwIDoM5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Validity Not Before: Nov 4 21:41:25 2025 GMT Not After : Nov 11 21:41:25 2025 GMT Subject: CN=690a7305-1426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:ab:d2:3c:a2:4b:6d:48:ca:3b:af:60:12: ca:90:55:fb:a8:e8:89:6e:c2:2a:a1:c7:a3:e2:6a: 82:e1:21:30:5f:0f:60:ac:87:7f:1a:f2:a1:ec:37: 08:17:6f:3b:54:f9:0e:9a:8c:2f:2f:6b:4b:f3:6c: 3d:81:24:00:24:ad:4e:c2:49:81:c4:83:7a:45:b9: 89:a2:b9:2a:03:3a:ca:9c:9c:66:3d:96:ad:a2:1e: e9:f6:a0:bc:27:fb:5a:f8:80:9d:58:7e:20:6f:c3: 2f:5f:2c:ee:1b:3e:f0:bc:71:0e:a7:79:92:51:da: 96:c1:d2:38:f0:17:a5:15:83:d4:6b:5a:81:b8:af: 3a:42:1a:92:2f:97:cb:d7:ca:33:4e:07:c1:ce:99: bd:1b:05:a0:0a:d2:f5:ec:6e:08:a1:fd:a4:22:b3: 70:4a:86:28:90:42:09:48:55:71:1d:6f:d3:d9:29: de:c6:e4:81:b3:61:13:22:5f:98:d7:e4:c9:70:dc: ed:50:d6:28:a0:93:38:1b:93:7e:ee:f0:ba:bc:ce: 77:35:b5:3a:ed:c6:5e:4c:ce:cd:d9:14:39:36:76: 12:97:b8:6f:f8:68:0f:eb:9e:cf:c8:9f:4e:e1:4d: bd:88:e6:75:44:e2:fa:fd:19:09:c6:ec:36:25:aa: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3F:6C:BB:7A:9A:C9:D5:50:02:BD:A2:74:0A:70:65:0D:56:CE:87 X509v3 Authority Key Identifier: keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8b:7d:d8:19:9f:5c:a8:ce:1c:2e:46:f1:5a:8a:cf:bf:1f: e8:5f:fd:7d:1f:7a:52:0e:d1:a6:6b:91:b1:46:00:c2:4d:8e: 5d:80:a3:c1:e8:58:b4:f0:28:97:6a:61:1d:eb:b5:c2:07:b6: 05:0a:40:27:d9:0f:b4:cb:d2:68:1a:18:ec:fb:91:d9:3a:9c: ad:0a:7b:76:04:a6:35:ca:95:5a:11:bf:32:8f:32:01:1b:80: 8d:c3:aa:12:0e:fe:7e:1b:2d:e6:b4:95:c9:3d:6a:9e:87:da: 6e:8a:c2:7b:da:42:69:a6:d8:40:19:6e:f3:9f:62:d4:28:37: 4b:5c:e2:b1:82:2e:3b:01:c8:63:87:e5:f6:4e:7d:a9:84:5f: 61:97:cd:3a:d2:9d:f1:63:93:e4:ec:28:99:77:36:94:ea:77: 85:e1:4f:bd:eb:45:6a:6c:45:90:b4:31:51:d8:93:26:8f:0b: 97:cf:9a:d2:fd:ad:82:d0:b0:92:49:d6:9e:f7:dd:bb:7c:a4: 21:44:d4:52:d2:82:57:df:d0:db:bd:c0:2a:a0:9b:2f:f4:ea: ee:fe:59:66:7c:a1:93:34:67:09:12:5e:bd:7a:47:28:69:98: e4:4e:f1:d5:a3:d4:b2:59:ad:17:d4:26:96:28:c6:4b:4b:49: 2b:ad:6d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF Q0FDODM1MTUwHhcNMjUxMTA0MjE0MTI1WhcNMjUxMTExMjE0MTI1WjAYMRYwFAYD VQQDEw02OTBhNzMwNS0xNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTOr0jyiS21IyjuvYBLKkFX7qOiJbsIqocej4mqC4SEwXw9grId/GvKh7DcI F287VPkOmowvL2tL82w9gSQAJK1OwkmBxIN6RbmJorkqAzrKnJxmPZatoh7p9qC8 J/ta+ICdWH4gb8MvXyzuGz7wvHEOp3mSUdqWwdI48BelFYPUa1qBuK86QhqSL5fL 18ozTgfBzpm9GwWgCtL17G4Iof2kIrNwSoYokEIJSFVxHW/T2SnexuSBs2ETIl+Y 1+TJcNztUNYooJM4G5N+7vC6vM53NbU67cZeTM7N2RQ5NnYSl7hv+GgP657PyJ9O 4U29iOZ1ROL6/RkJxuw2JapghwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk/bLt6 msnVUAK9onQKcGUNVs6HMB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4 NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFGNS8xNTEwRkI1QzM4NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhR QXlWU3hDYkVOVFBzcklOUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3i33YGZ9cqM4cLkbxWorPvx/oX/19H3pSDtGma5GxRgDCTY5dgKPB 6Fi08CiXamEd67XCB7YFCkAn2Q+0y9JoGhjs+5HZOpytCnt2BKY1ypVaEb8yjzIB G4CNw6oSDv5+Gy3mtJXJPWqeh9puisJ72kJppthAGW7zn2LUKDdLXOKxgi47Achj h+X2Tn2phF9hl8060p3xY5Pk7CiZdzaU6neF4U+960VqbEWQtDFR2JMmjwuXz5rS /a2C0LCSSdae9927fKQhRNRS0oJX39DbvcAqoJsv9Oru/llmfKGTNGcJEl69ekco aZjkTvHVo9SyWa0X1CaWKMZLS0krrW3o -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:35 2025 by rpki-client