$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: zm64AjhyndMiC682FrrDTywdI3EZpChdK1FJeCHDVhQ= Subject key identifier: E1:50:7D:EB:75:94:46:BB:82:FC:7B:2F:2A:74:8F:29:71:63:EB:8D Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 027E Signing time: Sun 19 Oct 2025 03:52:00 +0000 Manifest this update: Sun 19 Oct 2025 03:51:59 +0000 Manifest next update: Sun 26 Oct 2025 03:51:59 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: 91RjAzvDvVsGFH0NPiIqRNtge5/1hXuofGjBh3k/Lt0=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: exVLBxR9pxtqc5cvsQFpU7WzBwIbqGPyCKYDoLeIqwE=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: qN+LRpSVnBxJ+EVMhollH7lNOxo/HzDT+qSzlpuJsAY=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: Uy1qQgtN2hy74kMiTUs5n5WOsga0Z6eI2tl5HqgZZRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Oct 19 03:51:59 2025 GMT Not After : Oct 26 03:51:59 2025 GMT Subject: CN=68f46060-c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:b6:bf:4a:72:43:3f:54:ac:7d:0f:74:2b: cb:23:a7:e5:67:ae:8e:ee:2f:fe:34:98:6e:27:da: 0f:84:86:21:b7:21:db:b8:7d:25:7c:84:36:e7:cb: 34:98:9b:1b:6c:2d:31:36:42:a5:67:33:6f:6b:8c: 5a:ef:91:3c:5e:77:e3:a9:96:e6:b5:85:4c:81:1b: b3:31:0d:82:27:86:eb:9e:3a:6e:13:c8:cd:af:ac: ad:24:33:14:96:a7:15:8c:99:ab:43:09:3f:0e:54: e8:64:96:ed:3f:2b:dc:c0:c1:19:2d:29:07:2c:80: 81:d0:7d:db:03:50:2c:6b:75:35:29:5c:7d:b9:0c: b8:41:07:9e:19:4d:8f:87:29:f3:53:9c:f7:23:ec: 35:b1:4e:6d:54:97:06:74:47:d3:35:14:db:f1:b1: 6f:49:7a:07:8b:f7:36:11:f6:04:9c:0b:86:28:04: 67:d1:51:1a:1b:9f:6c:af:c8:c2:55:f9:f7:51:83: cd:8b:79:a7:db:37:ac:fb:e1:3d:f6:62:35:25:18: 08:ee:44:f5:f9:02:cb:31:93:86:60:d0:6c:29:81: e1:10:c5:95:bc:0e:7b:a5:28:14:46:4b:7c:3d:29: 0b:61:b4:3c:dc:1e:2e:c6:0e:f6:40:06:c4:e0:17: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:50:7D:EB:75:94:46:BB:82:FC:7B:2F:2A:74:8F:29:71:63:EB:8D X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:58:de:2e:b2:61:70:93:34:db:5a:05:13:45:cd:55:02:38: a3:e5:04:12:95:3a:78:17:33:f8:7e:28:91:fd:74:24:ba:13: 2d:3d:9e:ea:58:ba:61:75:8c:28:12:35:58:44:5f:34:d6:dc: a9:f1:2e:9f:45:9a:82:8e:4c:0b:29:0a:b0:98:c3:70:8c:ad: 7e:da:5b:81:a6:ba:37:9e:82:3d:26:c6:ac:d3:a0:10:11:4e: 84:13:20:9c:15:d8:07:ae:db:dd:3e:d8:21:ae:b3:e3:89:78: 2d:23:2d:36:79:ec:90:90:a5:26:22:90:4a:a5:b6:6f:5e:e2: dd:a7:4e:90:37:a5:c4:ab:fb:ad:13:88:bc:31:65:9b:1d:d2: d4:05:79:45:af:f6:dc:3e:03:57:39:24:41:a9:1e:7b:4c:da: 7c:79:ac:e9:c4:be:e8:43:00:36:37:77:87:77:da:be:ef:7d: 47:65:3b:15:27:0f:05:03:d0:c6:ab:c1:6d:99:6e:8a:d3:f0: 98:c7:3c:d1:15:2c:12:99:13:27:e9:2d:19:cd:e1:74:02:93: 58:97:a0:4d:f6:83:3d:52:83:a3:ee:55:c9:4f:ee:f6:36:b7: 5e:25:5d:6c:fc:2a:6a:c3:3a:68:02:df:e3:9a:6f:44:8f:6a: 1e:4d:6a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUxMDE5MDM1MTU5WhcNMjUxMDI2MDM1MTU5WjAYMRYwFAYD VQQDEw02OGY0NjA2MC1jNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucC2v0pyQz9UrH0PdCvLI6flZ66O7i/+NJhuJ9oPhIYhtyHbuH0lfIQ258s0 mJsbbC0xNkKlZzNva4xa75E8XnfjqZbmtYVMgRuzMQ2CJ4brnjpuE8jNr6ytJDMU lqcVjJmrQwk/DlToZJbtPyvcwMEZLSkHLICB0H3bA1Asa3U1KVx9uQy4QQeeGU2P hynzU5z3I+w1sU5tVJcGdEfTNRTb8bFvSXoHi/c2EfYEnAuGKARn0VEaG59sr8jC Vfn3UYPNi3mn2zes++E99mI1JRgI7kT1+QLLMZOGYNBsKYHhEMWVvA57pSgURkt8 PSkLYbQ83B4uxg72QAbE4Bc/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFQfet1 lEa7gvx7Lyp0jylxY+uNMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdWN4usmFwkzTbWgUTRc1VAjij5QQSlTp4FzP4fiiR/XQkuhMtPZ7q WLphdYwoEjVYRF801typ8S6fRZqCjkwLKQqwmMNwjK1+2luBpro3noI9Jsas06AQ EU6EEyCcFdgHrtvdPtghrrPjiXgtIy02eeyQkKUmIpBKpbZvXuLdp06QN6XEq/ut E4i8MWWbHdLUBXlFr/bcPgNXOSRBqR57TNp8eazpxL7oQwA2N3eHd9q+731HZTsV Jw8FA9DGq8FtmW6K0/CYxzzRFSwSmRMn6S0ZzeF0ApNYl6BN9oM9UoOj7lXJT+72 NrdeJV1s/CpqwzpoAt/jmm9Ej2oeTWoH -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:19 2025 by rpki-client