$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: nN60jT7WjNFa4h8nsfxwekCe54WXLGqeque1nAgqZV8= Subject key identifier: B5:91:F3:C8:C4:DE:8A:3B:0A:EB:8B:13:28:8E:B0:C7:2E:EF:D3:04 Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 03FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03F6 Signing time: Sun 19 Oct 2025 02:25:09 +0000 Manifest this update: Sun 19 Oct 2025 02:25:08 +0000 Manifest next update: Sun 26 Oct 2025 02:25:08 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: iOeGQqz6ypir/9/E28d9WKRNTQ58ICQd3Zaymdpawq8=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1020 (0x3fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Oct 19 02:25:08 2025 GMT Not After : Oct 26 02:25:08 2025 GMT Subject: CN=68f44c04-bbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:65:8c:c5:c8:d1:63:e0:ed:00:77:c6:05: d2:21:cc:b4:81:0e:dd:da:14:78:c6:32:31:d7:69: 86:0e:8f:f9:77:79:6c:43:68:2a:c8:47:b3:5e:9d: b6:14:ac:97:99:8c:e6:40:44:3b:d0:f7:ef:cb:5f: 1b:28:f2:3b:74:7a:65:5a:ff:49:f1:2e:23:c9:9b: c7:85:81:bb:45:e2:94:e0:e7:53:72:95:6b:84:6c: 9a:37:39:cd:a4:52:cd:79:f7:fc:e7:17:49:0f:ff: 51:90:33:a2:49:d1:39:18:f6:70:54:e2:6d:04:0a: 81:7e:7f:11:26:61:bd:b9:62:13:4f:48:0a:61:23: 5f:c4:5e:96:76:c2:8a:38:e4:4b:c4:0a:80:50:87: 9c:73:15:05:5b:a9:a4:5f:69:ca:8d:6e:37:27:97: 80:b9:05:ed:bf:c8:96:10:d0:04:81:89:89:d4:84: bf:a6:c5:3b:78:8a:46:82:bb:17:c6:d8:c8:09:dc: 3b:51:c3:4e:e9:ee:89:1b:0a:88:b5:38:2a:a8:00: f4:49:ce:a6:9c:bd:af:db:27:d7:df:57:ef:b9:58: c2:f9:2f:f3:85:e5:85:e8:84:a5:3b:71:68:1f:6d: 44:7a:36:f6:a0:3e:7c:0a:b2:df:76:a4:5e:f6:cc: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:F3:C8:C4:DE:8A:3B:0A:EB:8B:13:28:8E:B0:C7:2E:EF:D3:04 X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:47:d4:f5:a8:60:b2:01:f7:ce:09:fd:1c:24:9f:c4:8e:d7: 21:3a:c6:79:bb:3e:e6:6c:95:f5:7b:09:75:6a:a7:60:be:8c: 91:61:9f:56:09:f9:bc:8c:c9:b2:cc:b4:7c:0b:08:4d:da:42: 4a:1b:d6:2d:c2:b0:24:2d:21:a1:e6:62:b5:ef:2d:d4:8d:c4: 7f:42:46:25:3c:f5:cc:f1:f4:15:f8:e4:16:25:cd:00:fd:4f: 9b:34:f4:df:9c:28:33:21:fc:09:10:a4:2b:a1:6c:af:e6:15: 65:ae:bc:ef:93:25:06:e8:bc:bd:f6:7b:14:e4:71:11:10:77: 53:56:c6:80:a7:a7:28:e0:92:8f:da:6c:74:28:64:86:9d:2c: 89:5d:b2:c6:5e:3c:57:b7:aa:e8:d8:17:1c:25:ba:42:25:b9: f1:1e:4e:63:20:e2:f2:bb:2e:e4:42:fe:20:8c:92:9c:ba:fb: 6f:21:1a:f0:6f:61:3e:a0:fd:34:49:67:ab:83:a8:70:a0:73: c1:4f:66:ce:1e:79:98:3e:8f:66:ae:dc:3c:52:7b:3d:1f:1c: 23:c6:a9:4b:d5:70:b1:24:57:52:ef:79:1f:d0:a7:b1:97:1d: e5:c5:ec:bd:ef:41:38:8a:d3:7c:03:64:18:bc:17:75:00:94: 14:a8:d1:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUxMDE5MDIyNTA4WhcNMjUxMDI2MDIyNTA4WjAYMRYwFAYD VQQDEw02OGY0NGMwNC1iYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwohljMXI0WPg7QB3xgXSIcy0gQ7d2hR4xjIx12mGDo/5d3lsQ2gqyEezXp22 FKyXmYzmQEQ70Pfvy18bKPI7dHplWv9J8S4jyZvHhYG7ReKU4OdTcpVrhGyaNznN pFLNeff85xdJD/9RkDOiSdE5GPZwVOJtBAqBfn8RJmG9uWITT0gKYSNfxF6WdsKK OORLxAqAUIeccxUFW6mkX2nKjW43J5eAuQXtv8iWENAEgYmJ1IS/psU7eIpGgrsX xtjICdw7UcNO6e6JGwqItTgqqAD0Sc6mnL2v2yfX31fvuVjC+S/zheWF6ISlO3Fo H21Eejb2oD58CrLfdqRe9syMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWR88jE 3oo7CuuLEyiOsMcu79MEMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWR9T1qGCyAffOCf0cJJ/EjtchOsZ5uz7mbJX1ewl1aqdgvoyRYZ9W Cfm8jMmyzLR8CwhN2kJKG9YtwrAkLSGh5mK17y3UjcR/QkYlPPXM8fQV+OQWJc0A /U+bNPTfnCgzIfwJEKQroWyv5hVlrrzvkyUG6Ly99nsU5HEREHdTVsaAp6co4JKP 2mx0KGSGnSyJXbLGXjxXt6ro2BccJbpCJbnxHk5jIOLyuy7kQv4gjJKcuvtvIRrw b2E+oP00SWerg6hwoHPBT2bOHnmYPo9mrtw8Uns9HxwjxqlL1XCxJFdS73kf0Kex lx3lxey970E4itN8A2QYvBd1AJQUqNHf -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:37 2025 by rpki-client