$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: B2IvHRa16YTznnhtjt9DJHHh+qDB5PS8CYRk3U03DCQ= Subject key identifier: 2F:42:2C:E8:E1:F3:9A:56:91:E9:3E:3E:54:FD:7A:50:B7:F7:83:3D Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 1310 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 12FA Signing time: Sat 18 Oct 2025 17:32:07 +0000 Manifest this update: Sat 18 Oct 2025 17:32:06 +0000 Manifest next update: Sat 25 Oct 2025 17:32:06 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: /PA0JVvil0FCdau2+2URPvkCjeBk/awA5bZEeUqVs28=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4880 (0x1310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Oct 18 17:32:06 2025 GMT Not After : Oct 25 17:32:06 2025 GMT Subject: CN=68f3cf16-8d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:34:9c:3f:a5:f0:4d:ab:88:74:65:82:1c:13: aa:cf:16:86:8b:69:48:04:e4:94:b1:57:b8:dd:ab: 83:b2:38:54:66:d1:61:12:15:88:12:5a:70:7f:1b: fd:94:a4:79:a7:ea:54:43:fe:ed:c5:c1:9f:8a:8f: e6:20:55:d2:0e:19:88:a6:dd:b2:76:8d:c5:91:7b: 0a:55:d6:46:c5:e4:ca:b2:33:25:34:b0:b5:0b:5c: 0b:2e:15:d8:30:e4:ad:a4:b1:8d:37:b4:17:9f:56: fb:bc:35:50:a0:fd:c8:52:e3:4a:90:6b:b4:2c:c8: 0c:91:e0:7d:bc:67:4a:04:96:47:fd:61:53:27:8b: 3c:65:dd:b7:1e:bb:c5:13:bf:48:dc:a6:41:a5:3e: 32:73:d0:d6:67:b3:ad:98:a1:ab:f1:e8:e8:bb:68: d1:5d:11:00:f2:bd:9a:4b:76:a4:1b:22:db:8e:e6: 1d:81:95:17:d4:2a:89:4a:5a:bd:6e:06:a2:43:49: e4:d2:db:63:43:04:5a:63:d9:b0:00:2e:d0:11:ef: d4:63:9c:7b:00:46:86:ad:85:37:ee:eb:3c:3d:b1: ea:50:5d:1e:cb:cb:9c:d1:c3:df:5e:62:0c:a5:8a: cf:34:f1:39:44:01:7e:17:63:7c:e5:b6:b8:37:a2: 27:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:42:2C:E8:E1:F3:9A:56:91:E9:3E:3E:54:FD:7A:50:B7:F7:83:3D X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e8:ba:c2:86:94:1a:cb:6f:a0:a9:b2:72:ac:7c:db:b4:b3: eb:54:89:c4:1f:de:fa:e9:23:c9:74:0c:e9:9a:3e:68:e6:7b: 65:e0:4e:ae:dc:8b:a6:d6:bb:ee:42:da:ec:45:a1:56:6b:7a: 24:5e:37:26:72:d4:d6:77:34:fb:12:f3:24:c9:12:aa:17:b6: e4:4c:a9:a2:6e:67:b8:d8:cf:2f:ba:48:08:d2:c3:fb:9c:6b: 0e:2f:a1:e2:1c:c1:35:eb:f3:a4:f5:fe:c6:55:df:5d:79:2b: 20:72:8f:37:cb:7a:1e:90:9a:22:0a:ba:7b:46:b8:45:06:58: a1:7a:e5:fd:c6:b2:57:83:c9:8b:5d:c4:5c:2e:cb:e9:21:6e: 12:05:22:30:ee:13:c2:74:64:4d:28:b2:cb:5e:e1:ff:8b:87: 92:1e:e3:35:2b:dc:61:b6:8d:1e:03:e2:40:e7:01:d2:e3:4b: db:61:69:41:a5:94:96:f1:9b:b9:f4:02:67:06:2f:9b:be:03: ed:fa:1a:22:37:3b:9b:e9:9c:f9:cc:2e:1d:18:35:ea:4e:ba: 65:31:50:c7:e9:e4:53:1c:95:dc:71:4a:af:16:ae:1b:6a:37: 01:36:5b:ba:3f:96:9d:18:9f:8a:95:eb:15:e9:88:d6:63:65: ed:f6:c4:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUxMDE4MTczMjA2WhcNMjUxMDI1MTczMjA2WjAYMRYwFAYD VQQDEw02OGYzY2YxNi04ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zScP6XwTauIdGWCHBOqzxaGi2lIBOSUsVe43auDsjhUZtFhEhWIElpwfxv9 lKR5p+pUQ/7txcGfio/mIFXSDhmIpt2ydo3FkXsKVdZGxeTKsjMlNLC1C1wLLhXY MOStpLGNN7QXn1b7vDVQoP3IUuNKkGu0LMgMkeB9vGdKBJZH/WFTJ4s8Zd23HrvF E79I3KZBpT4yc9DWZ7OtmKGr8ejou2jRXREA8r2aS3akGyLbjuYdgZUX1CqJSlq9 bgaiQ0nk0ttjQwRaY9mwAC7QEe/UY5x7AEaGrYU37us8PbHqUF0ey8uc0cPfXmIM pYrPNPE5RAF+F2N85ba4N6InWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9CLOjh 85pWkek+PlT9elC394M9MB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq6LrChpQay2+gqbJyrHzbtLPrVInEH9766SPJdAzpmj5o5ntl4E6u 3Ium1rvuQtrsRaFWa3okXjcmctTWdzT7EvMkyRKqF7bkTKmibme42M8vukgI0sP7 nGsOL6HiHME16/Ok9f7GVd9deSsgco83y3oekJoiCrp7RrhFBliheuX9xrJXg8mL XcRcLsvpIW4SBSIw7hPCdGRNKLLLXuH/i4eSHuM1K9xhto0eA+JA5wHS40vbYWlB pZSW8Zu59AJnBi+bvgPt+hoiNzub6Zz5zC4dGDXqTrplMVDH6eRTHJXccUqvFq4b ajcBNlu6P5adGJ+KlesV6YjWY2Xt9sSe -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:30 2025 by rpki-client