$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json) Hash identifier: nt1RUtXK2HBNDvsQvnuY3D/ObXHYcCFsbV+iO+yYXJ8= Subject key identifier: DC:5C:E2:E9:62:58:21:AB:D2:64:08:D7:D5:FB:6A:B1:D4:B8:DC:71 Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 1530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft Manifest number: 1525 Signing time: Sat 18 Oct 2025 17:15:29 +0000 Manifest this update: Sat 18 Oct 2025 17:15:28 +0000 Manifest next update: Sat 25 Oct 2025 17:15:28 +0000 Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: dyAtnjY76c5qarvPyMeNjLsX0NXcDUI18LJerRh/WyA=) 2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: 73TnPaYse5Jq88UH3d/+sChGvcrApkf6vCKZhwuKess=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5424 (0x1530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Validity Not Before: Oct 18 17:15:28 2025 GMT Not After : Oct 25 17:15:28 2025 GMT Subject: CN=68f3cb31-8a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:a5:41:fe:5e:2f:3a:25:94:72:05:8b:2d: 7e:7e:b3:e5:8e:7f:fb:93:dd:92:89:ab:95:46:9b: 56:1f:cc:27:d4:91:b6:b2:2f:c8:26:88:4b:08:75: 80:5e:df:d7:cd:6b:bc:f8:2d:16:d7:b1:23:be:a7: 0e:be:65:6a:a2:d4:28:4e:cc:22:4e:4a:67:92:0e: 54:c4:40:2e:fe:4c:dc:8e:ab:2f:81:b7:92:6a:45: 8d:68:10:10:b4:63:72:31:17:f2:94:b6:88:13:14: 3f:b9:d8:b9:42:c7:16:22:8d:21:29:84:55:ed:ac: ea:8f:c2:a7:e6:33:07:99:8d:f9:67:1f:2d:4c:5b: 45:23:b2:d5:c8:7b:f1:cc:21:65:38:ce:c7:cf:9c: 65:f1:91:70:08:16:03:2c:aa:65:6f:32:cb:85:93: 7f:0d:23:cb:71:49:00:7c:ea:34:f1:c4:aa:a2:d3: 1a:ba:9e:e7:59:35:82:dd:af:df:62:7e:c6:c4:9f: 96:1c:6a:25:9f:bb:92:f5:da:f1:5d:fd:7d:60:7a: da:d5:d8:5a:bd:86:ee:ec:85:57:73:1f:c9:ba:7d: 07:4f:5a:73:34:d0:76:2d:3c:81:e2:74:2b:51:18: 69:d1:b2:b1:f4:fb:b6:4d:b8:ba:e0:f4:b2:29:f4: d2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:E2:E9:62:58:21:AB:D2:64:08:D7:D5:FB:6A:B1:D4:B8:DC:71 X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ee:6f:9b:c1:ba:d3:86:e8:c2:c4:11:2a:ff:4e:fb:5d:c9: a9:77:45:17:2c:16:13:d2:fa:ba:92:e3:2d:0b:3e:d0:9c:82: 22:dd:9f:2e:48:81:29:1e:37:d5:fe:de:de:28:b0:ea:96:16: a6:a9:32:f6:26:bd:ba:44:78:c9:53:46:df:24:97:0c:a5:b6: d7:e0:bb:ef:06:a4:8b:1b:be:7b:28:8e:e4:82:49:92:ea:ef: 14:c0:c8:ba:d0:f9:0a:a3:e6:0b:0c:13:fa:74:c9:6d:69:b5: 6d:05:0d:1a:f8:32:9d:63:7e:e0:ee:7d:57:92:72:57:2f:65: 32:64:33:9f:09:fa:32:6e:a1:60:5f:ad:72:63:8b:66:3c:ad: 7d:db:da:0b:3c:a9:53:c1:d8:55:7a:a6:95:83:35:df:7c:bd: 59:1e:5b:27:82:cf:39:0d:4a:51:4f:24:97:a8:2e:63:f0:83: 54:2b:23:e5:82:d6:3a:22:4c:b2:36:5a:63:cd:f5:9b:2e:1d: b3:b2:ea:5d:75:14:33:52:12:37:3b:88:30:2c:52:35:b4:83: cc:dc:2f:13:a2:b6:9c:13:72:4d:9d:1d:66:cf:6c:7b:ea:35: d0:e8:ad:28:1c:7b:a8:f2:f6:67:9e:0c:bf:06:2a:83:cc:d7: 8a:6c:19:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjUxMDE4MTcxNTI4WhcNMjUxMDI1MTcxNTI4WjAYMRYwFAYD VQQDEw02OGYzY2IzMS04YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzelQf5eLzollHIFiy1+frPljn/7k92SiauVRptWH8wn1JG2si/IJohLCHWA Xt/XzWu8+C0W17EjvqcOvmVqotQoTswiTkpnkg5UxEAu/kzcjqsvgbeSakWNaBAQ tGNyMRfylLaIExQ/udi5QscWIo0hKYRV7azqj8Kn5jMHmY35Zx8tTFtFI7LVyHvx zCFlOM7Hz5xl8ZFwCBYDLKplbzLLhZN/DSPLcUkAfOo08cSqotMaup7nWTWC3a/f Yn7GxJ+WHGoln7uS9drxXf19YHra1dhavYbu7IVXcx/Jun0HT1pzNNB2LTyB4nQr URhp0bKx9Pu2Tbi64PSyKfTSLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxc4uli WCGr0mQI19X7arHUuNxxMB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH7m+bwbrThujCxBEq/077Xcmpd0UXLBYT0vq6kuMtCz7QnIIi3Z8u SIEpHjfV/t7eKLDqlhamqTL2Jr26RHjJU0bfJJcMpbbX4LvvBqSLG757KI7kgkmS 6u8UwMi60PkKo+YLDBP6dMltabVtBQ0a+DKdY37g7n1XknJXL2UyZDOfCfoybqFg X61yY4tmPK1929oLPKlTwdhVeqaVgzXffL1ZHlsngs85DUpRTySXqC5j8INUKyPl gtY6IkyyNlpjzfWbLh2zsupddRQzUhI3O4gwLFI1tIPM3C8ToracE3JNnR1mz2x7 6jXQ6K0oHHuo8vZnngy/BiqDzNeKbBnh -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:14 2025 by rpki-client