$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json) Hash identifier: hBWoCYTq+ixsoKb+8VRvHfZkmhFslF8n6eCkRH0naL0= Subject key identifier: 93:C2:4A:2A:AC:C0:80:D1:B4:F1:51:7B:D7:E4:2F:F2:25:AA:20:D7 Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft Manifest number: 021B Signing time: Sun 19 Oct 2025 04:23:51 +0000 Manifest this update: Sun 19 Oct 2025 04:23:50 +0000 Manifest next update: Sun 26 Oct 2025 04:23:50 +0000 Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: vEYSv9iDWVRKFO6vaxjD6IEFXt5VwJMbh43SKPJoBxI=) 2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: YPKVhjI0QOxJDGKIkbhIcG0QRVYBhpe0iKALRG6i8e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Validity Not Before: Oct 19 04:23:50 2025 GMT Not After : Oct 26 04:23:50 2025 GMT Subject: CN=68f467d7-69e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:8c:a4:e4:9e:8a:00:45:0c:99:82:f0:8e: 74:2c:1d:c4:33:56:e5:b0:93:ec:ab:45:9c:14:7b: a7:bf:03:a4:23:3b:3a:47:6e:af:cc:54:e7:03:08: de:c3:5e:8a:de:5a:bd:a0:c5:af:06:12:dd:34:eb: d3:55:4d:f7:93:c0:24:08:a2:41:c7:4b:65:5e:52: 7f:45:da:21:3a:c8:6f:d3:05:f8:db:d8:11:c8:8b: a8:e9:25:77:87:4e:be:56:c0:7f:e0:e4:a6:35:53: ce:9a:c4:e6:36:4a:75:6e:9f:66:f8:0e:9b:4b:a1: 0e:77:df:67:d3:45:a0:cf:8e:e0:6b:47:e7:fc:1e: 20:fa:22:b2:d4:c9:73:9b:26:c5:58:bd:6c:30:f6: c7:61:c7:69:23:85:16:0e:73:53:9c:c7:86:bd:4e: a4:32:01:ec:d6:39:72:ad:8b:9a:48:e2:8b:6d:cc: cd:eb:dc:06:6b:0a:16:63:67:28:fa:84:dd:ce:b0: 40:e8:8e:cc:f0:a5:9c:5f:01:29:f0:ff:22:01:a8: 7e:d2:e9:2f:03:c2:3a:88:59:c1:47:4e:a4:7f:93: 73:f8:e9:9f:70:05:14:8a:cd:a9:7c:74:7f:5f:dd: da:63:0c:8b:fd:15:f3:39:03:07:6e:1a:8e:3a:44: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C2:4A:2A:AC:C0:80:D1:B4:F1:51:7B:D7:E4:2F:F2:25:AA:20:D7 X509v3 Authority Key Identifier: keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:bf:ce:19:6f:6c:c4:67:c6:42:55:bb:5c:f6:10:eb:64:8c: 3f:86:6e:eb:77:c9:46:08:19:10:71:7e:3c:be:f7:c1:77:8d: e3:8c:17:91:21:6f:75:d7:62:1b:34:95:85:95:84:86:b9:55: b8:1c:32:eb:d1:d4:db:94:60:aa:65:f4:76:f9:71:d4:c3:d6: 9e:fa:cd:29:ff:a7:9c:67:a7:65:5d:8f:6b:02:86:bb:88:78: f4:e5:c4:d3:59:5e:dd:49:57:f7:cb:14:ab:da:75:23:a6:9b: 0d:e9:e5:9b:de:70:6c:93:ae:28:58:d1:6d:ce:d6:f3:d3:f5: 27:a9:72:6d:d5:74:40:fb:0e:79:03:1c:e9:b5:77:4e:0a:d5: 81:8c:86:fc:05:c1:e7:45:3f:d8:d2:db:65:98:69:fa:53:3a: 9f:37:3c:d2:86:fc:20:81:a3:ac:64:2c:cd:a5:64:d3:ca:ea: 03:bc:48:9a:e9:31:d8:6a:37:26:fc:d0:a9:6c:d3:af:58:6f: 93:26:82:89:35:19:12:44:79:4b:df:3f:46:85:28:91:da:93: 02:db:cd:39:ef:e4:60:e8:67:8e:5b:6b:50:ff:f2:ce:eb:ff: 57:18:d1:01:6f:c7:28:06:a5:96:30:08:2f:e7:5f:52:0f:ed: 46:ec:b0:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY3QjQxMTAvBgNVBAUTKDE4N0VFRUVBMkFENjA3QkNBNTQyMkQwOTJEREFDQzE5 OTA4RjJGRDcwHhcNMjUxMDE5MDQyMzUwWhcNMjUxMDI2MDQyMzUwWjAYMRYwFAYD VQQDEw02OGY0NjdkNy02OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLSMpOSeigBFDJmC8I50LB3EM1blsJPsq0WcFHunvwOkIzs6R26vzFTnAwje w16K3lq9oMWvBhLdNOvTVU33k8AkCKJBx0tlXlJ/RdohOshv0wX429gRyIuo6SV3 h06+VsB/4OSmNVPOmsTmNkp1bp9m+A6bS6EOd99n00Wgz47ga0fn/B4g+iKy1Mlz mybFWL1sMPbHYcdpI4UWDnNTnMeGvU6kMgHs1jlyrYuaSOKLbczN69wGawoWY2co +oTdzrBA6I7M8KWcXwEp8P8iAah+0ukvA8I6iFnBR06kf5Nz+OmfcAUUis2pfHR/ X93aYwyL/RXzOQMHbhqOOkQ3CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPCSiqs wIDRtPFRe9fkL/IlqiDXMB8GA1UdIwQYMBaAFBh+7uoq1ge8pUItCS3azBmQjy/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCNC84MDI2RjM5NDcw ODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3eWxRaTBKTGRyTUdaQ1BM OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIN3U2aXJXQjd5bFFpMEpMZHJNR1pDUEw5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjdCNC84MDI2RjM5NDcwODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3 eWxRaTBKTGRyTUdaQ1BMOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlv84Zb2zEZ8ZCVbtc9hDrZIw/hm7rd8lGCBkQcX48vvfBd43jjBeR IW9112IbNJWFlYSGuVW4HDLr0dTblGCqZfR2+XHUw9ae+s0p/6ecZ6dlXY9rAoa7 iHj05cTTWV7dSVf3yxSr2nUjppsN6eWb3nBsk64oWNFtztbz0/UnqXJt1XRA+w55 AxzptXdOCtWBjIb8BcHnRT/Y0ttlmGn6UzqfNzzShvwggaOsZCzNpWTTyuoDvEia 6THYajcm/NCpbNOvWG+TJoKJNRkSRHlL3z9GhSiR2pMC28057+Rg6GeOW2tQ//LO 6/9XGNEBb8coBqWWMAgv519SD+1G7LAW -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:42 2025 by rpki-client