$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json) Hash identifier: Heh3Fzzal3mEwaRfSSDwp0dc0UGS2YZuTguwS4q+ItU= Subject key identifier: B5:A5:D1:03:17:35:EE:FD:A0:7D:0C:21:A0:08:D6:ED:8C:06:7B:2D Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft Manifest number: 0680 Signing time: Thu 18 Sep 2025 22:43:14 +0000 Manifest this update: Thu 18 Sep 2025 22:43:13 +0000 Manifest next update: Thu 25 Sep 2025 22:43:13 +0000 Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: Hx5KWNFtYYCjFR7jpwoXsIgzO72AqEI62WsRAjYE+SQ=) 2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: rIs0TSp/FOVS2yEmJo3gyqgsWO9NpZnz1xIrp85P4OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Validity Not Before: Sep 18 22:43:13 2025 GMT Not After : Sep 25 22:43:13 2025 GMT Subject: CN=68cc8b02-f3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:6e:76:14:d3:d0:cf:1c:a1:91:f7:d5:a3: d0:4c:be:a2:0f:87:78:b6:62:ea:2e:ea:6f:5d:ea: ef:2b:22:ce:fa:ab:d7:1c:55:19:c0:1f:a1:fe:96: cc:f7:16:9f:63:39:3b:6a:d7:d6:88:51:4c:1b:1a: 8b:61:24:98:b3:3d:ce:88:20:dc:8b:ca:22:83:53: 71:45:0f:4a:d8:01:16:0f:f0:3f:a3:db:3b:ce:b5: 1a:1b:70:00:25:88:0a:25:93:f7:bd:03:cb:cc:a6: 14:71:3d:94:fd:26:67:20:65:e4:41:69:bd:b0:74: ce:a7:80:e2:2c:aa:1b:ef:3d:c5:3c:be:b9:fe:d6: 09:af:21:d0:31:3b:3e:e4:30:08:b3:d6:1e:ea:e2: 16:01:11:e1:d1:8b:a9:b6:b2:47:7b:72:00:7c:6d: 77:53:d7:fe:8c:f1:ed:aa:ba:76:2f:0b:01:db:9c: 7d:09:aa:87:69:db:87:b0:f8:26:45:65:21:38:e0: f1:11:91:55:dc:d9:1b:7a:eb:f3:31:1f:b5:be:5b: 19:1c:21:6f:3f:df:fb:08:78:94:6b:59:e3:e1:a6: c4:7e:fc:52:68:6d:50:d0:77:3e:36:2b:c2:43:fa: c7:4c:bc:21:5d:e5:09:e1:c9:e6:a5:28:6f:7c:26: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:D1:03:17:35:EE:FD:A0:7D:0C:21:A0:08:D6:ED:8C:06:7B:2D X509v3 Authority Key Identifier: keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:37:f5:d8:63:10:3b:a7:84:0e:a0:2f:7a:1c:d4:06:9a:6a: b3:73:94:20:a3:ca:33:d3:74:6b:12:3a:d4:d9:d8:08:09:1a: a1:f9:d9:1a:de:be:45:e0:11:ae:e2:cc:67:bd:22:cf:d6:f2: ca:52:62:e1:d3:2f:fb:24:d1:26:99:1c:d6:da:f8:bc:90:86: ba:5f:bd:7e:2e:cb:08:d0:cb:35:cb:44:42:8b:51:08:05:74: 25:e9:f7:e0:36:d0:3e:db:00:37:f1:7e:2b:c0:05:2f:59:85: 0c:e6:c9:6a:10:c9:92:c1:82:73:65:7e:51:b8:44:f6:c1:a3: 7a:1b:71:fe:33:ac:0b:52:f3:fa:d1:62:06:7f:7f:d7:b1:a7: 89:e9:c9:1b:7b:9e:e2:d1:71:df:fe:9c:70:d3:5b:1a:91:19: 36:51:06:4c:92:75:a6:b9:3f:08:e1:4a:52:93:d9:49:26:a6: fb:24:d1:57:d2:34:2e:51:7e:92:1b:78:75:a9:5c:ee:1e:4d: e4:d6:9d:fc:da:3a:d6:1d:9d:03:3c:db:4e:c7:6f:9f:86:17: 8d:ea:2a:6d:53:53:36:5b:80:3f:f7:38:47:f5:84:36:d4:16: 36:8a:97:81:51:e6:4e:58:f8:97:e6:fc:df:c3:90:00:24:db: 56:1c:be:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2 RjkwQkZDNjAwHhcNMjUwOTE4MjI0MzEzWhcNMjUwOTI1MjI0MzEzWjAYMRYwFAYD VQQDEw02OGNjOGIwMi1mM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5R5udhTT0M8coZH31aPQTL6iD4d4tmLqLupvXervKyLO+qvXHFUZwB+h/pbM 9xafYzk7atfWiFFMGxqLYSSYsz3OiCDci8oig1NxRQ9K2AEWD/A/o9s7zrUaG3AA JYgKJZP3vQPLzKYUcT2U/SZnIGXkQWm9sHTOp4DiLKob7z3FPL65/tYJryHQMTs+ 5DAIs9Ye6uIWARHh0YuptrJHe3IAfG13U9f+jPHtqrp2LwsB25x9CaqHaduHsPgm RWUhOODxEZFV3NkbeuvzMR+1vlsZHCFvP9/7CHiUa1nj4abEfvxSaG1Q0Hc+NivC Q/rHTLwhXeUJ4cnmpShvfCb6qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWl0QMX Ne79oH0MIaAI1u2MBnstMB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBRC80QjY1MDY1ODhERTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpj MTR2Y09pRXJDMzV2a0xfR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMN/XYYxA7p4QOoC96HNQGmmqzc5Qgo8oz03RrEjrU2dgICRqh+dka 3r5F4BGu4sxnvSLP1vLKUmLh0y/7JNEmmRzW2vi8kIa6X71+LssI0Ms1y0RCi1EI BXQl6ffgNtA+2wA38X4rwAUvWYUM5slqEMmSwYJzZX5RuET2waN6G3H+M6wLUvP6 0WIGf3/XsaeJ6ckbe57i0XHf/pxw01sakRk2UQZMknWmuT8I4UpSk9lJJqb7JNFX 0jQuUX6SG3h1qVzuHk3k1p382jrWHZ0DPNtOx2+fhheN6iptU1M2W4A/9zhH9YQ2 1BY2ipeBUeZOWPiX5vzfw5AAJNtWHL43 -----END CERTIFICATE-----Generated at Fri Sep 19 02:50:18 2025 by rpki-client