$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: adTT/e/U8YF/qmPi4VJy42XWXV7NJQUtBufVRy0I+PA= Subject key identifier: 50:02:45:03:4D:99:08:7F:27:9C:61:9A:DD:C6:C9:39:DB:41:DA:6E Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 021C Signing time: Sun 19 Oct 2025 04:22:48 +0000 Manifest this update: Sun 19 Oct 2025 04:22:48 +0000 Manifest next update: Sun 26 Oct 2025 04:22:48 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: ccsAjBuh5vsqIvj0Yt0E/oTK0LS6Goc/xxBIJgjn3Eg=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Oct 19 04:22:48 2025 GMT Not After : Oct 26 04:22:48 2025 GMT Subject: CN=68f46798-8826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:62:42:3c:3e:41:b6:ff:08:6f:40:ff:52: ec:dd:65:df:f0:fe:30:6b:d7:58:8d:fa:e0:20:da: 12:1f:7b:99:c2:98:c3:e5:a8:6d:cc:b1:01:72:1c: f2:57:55:57:51:d3:45:9f:88:f4:09:c3:ff:cf:b1: 33:b0:82:3f:f9:aa:7d:69:23:50:4b:03:ce:37:52: 8a:78:74:1b:ca:db:36:de:3f:df:00:e0:e6:f6:7d: af:4a:b4:17:5c:8d:08:aa:26:05:ee:f7:ec:d4:e9: 68:04:c3:4b:fd:bc:57:2c:04:64:6a:f0:f3:de:82: 56:8e:7c:4d:fb:c3:fb:c5:b1:ab:88:d5:82:6c:85: 0e:ea:ac:6d:a6:8d:c1:c4:4f:af:a5:4f:48:e4:64: bb:29:fe:42:33:d8:9a:3a:a0:d5:36:34:ab:8b:47: 97:cb:79:c5:90:07:2a:e8:dc:ff:8b:84:d9:ae:cc: f6:13:ee:d9:72:65:96:0a:14:b9:70:33:48:48:5f: 4b:cc:87:0a:fb:8c:89:0d:9f:0e:2d:ff:8f:ce:c2: 1e:fb:e0:49:4a:a4:33:d0:2c:d1:65:a6:79:bd:17: 3e:0c:0f:92:06:54:73:98:b7:7c:c9:9b:0e:44:62: 47:05:8e:ec:57:24:f4:aa:26:db:c6:c3:83:1c:8d: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:02:45:03:4D:99:08:7F:27:9C:61:9A:DD:C6:C9:39:DB:41:DA:6E X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2c:6f:b9:9b:fe:9d:fc:e2:05:16:07:86:9e:4b:49:bd:35: 44:d3:cc:1f:61:dd:2c:ac:61:7e:24:c6:ec:ea:32:5d:78:80: 2a:8c:3e:08:ce:04:19:2d:04:0e:58:c2:ac:0e:a7:5e:ab:e4: f0:6f:13:ad:f0:59:38:5f:23:84:4b:9c:4d:91:57:7e:ae:e2: b0:e3:de:09:f8:18:0f:c8:c0:94:06:c7:8e:85:2a:89:c8:19: d7:43:45:29:e9:e7:56:59:d9:3d:9a:96:cf:11:58:f7:88:2d: 1d:52:aa:b1:aa:22:54:3b:b1:e3:f1:42:ae:1d:48:92:9f:09: df:ca:7e:dc:8a:15:cc:ef:49:f2:56:b5:19:a7:57:e0:ec:7b: af:b7:11:d7:ec:85:44:d3:0d:f4:a8:f8:07:90:73:12:83:44: f3:13:51:58:7c:9c:9b:d9:f0:52:23:05:5d:45:13:6d:23:7c: 57:92:78:5a:92:90:34:c8:e2:c1:22:88:81:1d:59:14:0d:7b: 7b:b9:bc:e1:e4:3d:db:05:61:16:0c:df:b5:56:45:bf:90:9e: d4:5d:26:d2:a9:14:66:ff:7c:38:7c:37:46:df:01:fa:9c:5f: 49:87:10:2d:b8:f4:6a:19:5a:f8:28:42:88:c0:f1:59:e7:b1: 02:92:95:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUxMDE5MDQyMjQ4WhcNMjUxMDI2MDQyMjQ4WjAYMRYwFAYD VQQDEw02OGY0Njc5OC04ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEBiQjw+Qbb/CG9A/1Ls3WXf8P4wa9dYjfrgINoSH3uZwpjD5ahtzLEBchzy V1VXUdNFn4j0CcP/z7EzsII/+ap9aSNQSwPON1KKeHQbyts23j/fAODm9n2vSrQX XI0IqiYF7vfs1OloBMNL/bxXLARkavDz3oJWjnxN+8P7xbGriNWCbIUO6qxtpo3B xE+vpU9I5GS7Kf5CM9iaOqDVNjSri0eXy3nFkAcq6Nz/i4TZrsz2E+7ZcmWWChS5 cDNISF9LzIcK+4yJDZ8OLf+PzsIe++BJSqQz0CzRZaZ5vRc+DA+SBlRzmLd8yZsO RGJHBY7sVyT0qibbxsODHI0QDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFACRQNN mQh/J5xhmt3GyTnbQdpuMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALLG+5m/6d/OIFFgeGnktJvTVE08wfYd0srGF+JMbs6jJdeIAqjD4I zgQZLQQOWMKsDqdeq+TwbxOt8Fk4XyOES5xNkVd+ruKw494J+BgPyMCUBseOhSqJ yBnXQ0Up6edWWdk9mpbPEVj3iC0dUqqxqiJUO7Hj8UKuHUiSnwnfyn7cihXM70ny VrUZp1fg7HuvtxHX7IVE0w30qPgHkHMSg0TzE1FYfJyb2fBSIwVdRRNtI3xXknha kpA0yOLBIoiBHVkUDXt7ubzh5D3bBWEWDN+1VkW/kJ7UXSbSqRRm/3w4fDdG3wH6 nF9JhxAtuPRqGVr4KEKIwPFZ57ECkpWs -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:13 2025 by rpki-client