$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft File: gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json) Hash identifier: TPRwSJ6fY3jvH9x0btesnIkAflxSyqzcnJm8sNkA5Kg= Subject key identifier: 89:51:16:F8:8E:19:E2:8F:FB:59:60:B2:01:60:69:CF:66:E6:99:DB Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft Manifest number: 31 Signing time: Sun 19 Oct 2025 11:12:18 +0000 Manifest this update: Sun 19 Oct 2025 11:12:17 +0000 Manifest next update: Sun 26 Oct 2025 11:12:17 +0000 Files and hashes: 1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: RPOIJP7tqZPZV7DyVyhcwiG+M/a5HzNa3Y1dN2OE51E=) 2: B92859F46EF611F0BEAA5130C4F9AE02.roa (hash: KxrlmGdN300w3GzZo2NWvwcNeTUF77b4vkK7jJtow4Y=) 3: 90BDD67E6EF611F0B80A0E30C4F9AE02.roa (hash: YAsradZ2aJS18fpOaKgFCMVexkVrOXolStNUtaxy12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Validity Not Before: Oct 19 11:12:17 2025 GMT Not After : Oct 26 11:12:17 2025 GMT Subject: CN=68f4c792-4214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:74:93:6f:14:58:2a:66:82:f6:fa:8d:08: 23:d9:c1:b1:99:75:41:b4:1c:2a:01:83:4d:99:93: 57:76:91:47:fd:62:49:ef:83:57:a5:e6:40:a3:b7: ea:cf:c5:d2:76:d5:7e:14:21:27:ef:4d:70:03:dd: 17:94:22:17:9f:cc:59:4f:82:8d:83:ba:75:0e:34: cb:58:c1:f2:1e:d0:fa:dc:15:36:4b:d3:d2:46:07: 60:1b:36:ee:0e:07:43:2b:0b:39:66:d9:8e:25:f8: 04:dd:28:f9:f4:1d:cd:8d:a6:07:25:13:62:76:02: 34:94:9e:06:ed:ae:ee:64:dd:d0:db:2d:90:ad:bf: f2:73:b5:70:02:a4:79:46:5d:64:27:4b:3a:c8:bc: 30:97:19:2a:5b:52:a9:8e:f9:7d:e7:39:c0:77:fc: 23:f3:8a:9b:e1:e5:52:8e:73:a8:2c:41:65:05:31: a6:d2:03:b3:99:52:81:da:c8:11:2a:23:15:f5:54: bf:fb:d0:7c:30:8c:ca:56:c1:09:d4:47:49:8b:77: 91:ab:c7:4c:84:31:2c:79:d2:2c:7b:b6:d2:3a:26: 39:1e:4e:56:25:a0:d7:1b:7d:97:2d:6e:c0:59:f8: 3b:1c:75:96:49:6c:0d:f9:21:aa:ba:47:2d:d9:a8: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:51:16:F8:8E:19:E2:8F:FB:59:60:B2:01:60:69:CF:66:E6:99:DB X509v3 Authority Key Identifier: keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ea:9a:f0:55:63:9f:63:41:07:75:39:23:e8:f9:51:89:d0: fd:3e:62:97:46:4d:d1:54:b8:0c:96:cd:ed:72:dc:4a:2f:d4: 69:02:2e:26:7d:a7:bb:85:54:22:48:a2:99:0e:5e:54:d2:1d: 1a:ae:6a:f9:f2:ae:6a:5f:a5:39:3b:b6:05:b1:3d:f5:b8:80: 09:13:2c:c5:ac:73:1d:f9:c0:75:e3:af:f8:f2:f3:8c:b7:ea: f4:d0:c4:8c:bf:00:47:2b:29:3c:d8:37:38:07:8e:b8:b8:20: 26:0d:af:d2:85:eb:6d:d6:47:ee:cc:28:6b:05:3a:5d:26:0b: 68:c2:80:ba:b0:ab:1e:db:1b:e3:d5:52:bf:36:3a:25:35:88: 06:f6:f7:62:26:a0:6e:30:66:ab:09:fb:12:d1:9a:3d:93:95: 0a:7d:7a:c6:9a:63:ae:8b:38:f5:1d:3b:fd:49:7d:03:05:0d: 8d:3c:30:03:72:05:d8:b8:69:3b:78:38:f3:b7:71:ee:22:4e: 79:13:d0:53:7c:bc:b6:87:aa:53:63:a7:75:aa:6e:66:1a:83: 94:af:dd:94:b1:2f:b0:5d:b2:f5:fc:9d:f9:4c:ac:94:a3:9e: f8:b9:75:1d:f4:36:73:b9:89:e9:1a:48:3c:e9:37:d3:f4:f2: 9e:42:75:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoODI2QjQ0NzRCQzZGNEYzQkU0MEI1RTc1MTFGMTA1Q0FF N0ZFOEMwQzAeFw0yNTEwMTkxMTEyMTdaFw0yNTEwMjYxMTEyMTdaMBgxFjAUBgNV BAMTDTY4ZjRjNzkyLTQyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQ63STbxRYKmaC9vqNCCPZwbGZdUG0HCoBg02Zk1d2kUf9Yknvg1el5kCjt+rP xdJ21X4UISfvTXAD3ReUIhefzFlPgo2DunUONMtYwfIe0PrcFTZL09JGB2AbNu4O B0MrCzlm2Y4l+ATdKPn0Hc2NpgclE2J2AjSUngbtru5k3dDbLZCtv/JztXACpHlG XWQnSzrIvDCXGSpbUqmO+X3nOcB3/CPzipvh5VKOc6gsQWUFMabSA7OZUoHayBEq IxX1VL/70HwwjMpWwQnUR0mLd5Grx0yEMSx50ix7ttI6JjkeTlYloNcbfZctbsBZ +DscdZZJbA35Iaq6Ry3ZqCjhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiVEW+I4Z 4o/7WWCyAWBpz2bmmdswHwYDVR0jBBgwFoAUgmtEdLxvTzvkC151EfEFyuf+jAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDLzk5MUVBREZFNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ210RWRMeHZUenZrQzE1MUVmRUZ5dWYtakF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDLzk5MUVBREZFNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL2dtdEVkTHh2VHp2 a0MxNTFFZkVGeXVmLWpBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTqmvBVY59jQQd1OSPo+VGJ0P0+YpdGTdFUuAyWze1y3Eov1GkCLiZ9 p7uFVCJIopkOXlTSHRquavnyrmpfpTk7tgWxPfW4gAkTLMWscx35wHXjr/jy84y3 6vTQxIy/AEcrKTzYNzgHjri4ICYNr9KF623WR+7MKGsFOl0mC2jCgLqwqx7bG+PV Ur82OiU1iAb292ImoG4wZqsJ+xLRmj2TlQp9esaaY66LOPUdO/1JfQMFDY08MANy Bdi4aTt4OPO3ce4iTnkT0FN8vLaHqlNjp3WqbmYag5Sv3ZSxL7BdsvX8nflMrJSj nvi5dR30NnO5iekaSDzpN9P08p5CdRQ= -----END CERTIFICATE-----Generated at Thu Oct 23 09:53:33 2025 by rpki-client