$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: QdKhjSpJFuPGh73Vpo2QWbasuYLnUbDjZcW6tpwwTJM= Subject key identifier: 3F:CE:C1:C7:39:75:13:F3:89:AF:83:F7:6C:66:78:3E:C0:B3:24:AF Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: AC Signing time: Sun 19 Oct 2025 09:24:32 +0000 Manifest this update: Sun 19 Oct 2025 09:24:31 +0000 Manifest next update: Sun 26 Oct 2025 09:24:31 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: DjxCe1XDvxcQvxCB4/F/7asZu7f5h0DzQQLNTNqWEE4=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Oct 19 09:24:31 2025 GMT Not After : Oct 26 09:24:31 2025 GMT Subject: CN=68f4ae4f-69f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:07:1d:a8:9c:35:ec:c3:f3:f2:e1:9f:93: d7:cd:0f:c8:58:be:b4:af:1a:19:d9:b6:c8:2d:51: e7:8e:72:3c:7f:46:70:b9:4d:1e:da:21:c1:43:27: 47:5d:32:5d:31:a1:9d:87:51:c8:47:26:1a:5d:97: ba:80:43:fa:86:b4:8c:4b:6b:0d:f2:4f:d8:0c:cc: 42:da:1c:7b:7b:c5:7e:1b:1d:2c:41:2a:ae:1b:4f: 0e:4d:94:85:9a:23:83:86:e2:46:46:90:49:38:b0: 5a:ea:07:09:b6:cb:4e:9c:62:91:27:8f:6f:4e:05: b5:07:1e:5c:3c:e1:c0:d8:af:78:cc:9d:58:c8:ae: 0e:49:d8:99:aa:d0:1b:c4:61:ed:51:2c:83:b5:5d: e7:e7:f4:46:5d:22:f3:56:d4:fc:0c:a5:c3:3f:68: dd:ca:a2:fe:4c:3a:95:04:77:c2:9b:cc:06:0a:ca: 7e:fb:2b:8a:2a:73:44:8c:57:31:47:16:e1:9d:98: ce:07:a3:7f:d9:48:8d:30:ec:ec:b6:ce:9c:18:5f: c5:95:87:03:9b:20:be:b4:ea:74:56:8e:71:29:64: 8b:8c:ff:5a:97:8b:dc:c7:81:ea:b6:c6:08:b3:26: da:3d:82:ec:b9:60:4e:8a:7f:13:e3:00:5e:9e:81: 5a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CE:C1:C7:39:75:13:F3:89:AF:83:F7:6C:66:78:3E:C0:B3:24:AF X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:be:77:a9:6b:60:df:bb:f4:34:a1:98:b5:66:29:78:b1:a2: c0:0c:55:37:32:c7:b4:c1:fa:8c:19:9d:3e:2c:0b:7d:c7:99: 32:45:70:bc:f9:cc:de:72:9f:08:32:88:2b:35:84:71:c4:ec: 3c:2d:50:74:50:19:d5:4e:56:31:03:e8:85:72:21:be:15:39: 71:b3:1e:b2:40:f6:5f:94:1d:0c:59:41:d8:bb:a3:d0:43:35: cf:41:1c:c7:69:29:2d:4d:bf:dc:73:d6:84:6c:3f:6a:b9:4e: cf:3e:f3:7f:07:f7:71:3c:0a:62:08:40:b4:5a:9b:0b:6f:cc: c1:d5:35:5a:62:e0:10:de:8d:1d:26:18:6d:16:ed:7b:0c:e1: 4f:5a:39:26:d2:e5:7e:06:57:58:7e:0b:7a:ad:b3:42:00:da: 14:67:a1:2b:9d:3b:05:00:9c:f3:0e:73:9c:e7:49:4e:0f:4a: 85:8e:51:fa:d4:a3:ec:ad:94:88:0a:22:eb:ce:b3:28:1a:4c: 20:61:f6:da:3e:0a:3d:ae:13:51:f9:46:e9:d1:93:4d:e6:59: eb:57:26:18:9a:eb:1a:43:a5:70:7d:8a:5b:b4:82:40:30:8b: 99:fa:47:12:a9:81:1d:d1:f7:4f:4c:12:6b:9d:f7:97:5b:1f: 7f:a6:52:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4 RDZBRDk1RUQwHhcNMjUxMDE5MDkyNDMxWhcNMjUxMDI2MDkyNDMxWjAYMRYwFAYD VQQDEw02OGY0YWU0Zi02OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgMHHaicNezD8/Lhn5PXzQ/IWL60rxoZ2bbILVHnjnI8f0ZwuU0e2iHBQydH XTJdMaGdh1HIRyYaXZe6gEP6hrSMS2sN8k/YDMxC2hx7e8V+Gx0sQSquG08OTZSF miODhuJGRpBJOLBa6gcJtstOnGKRJ49vTgW1Bx5cPOHA2K94zJ1YyK4OSdiZqtAb xGHtUSyDtV3n5/RGXSLzVtT8DKXDP2jdyqL+TDqVBHfCm8wGCsp++yuKKnNEjFcx RxbhnZjOB6N/2UiNMOzsts6cGF/FlYcDmyC+tOp0Vo5xKWSLjP9al4vcx4HqtsYI sybaPYLsuWBOin8T4wBenoFaAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/Owcc5 dRPzia+D92xmeD7AsySvMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4 OU1UYktkYW1YZUNOYXRsZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIvnepa2Dfu/Q0oZi1Zil4saLADFU3Mse0wfqMGZ0+LAt9x5kyRXC8 +czecp8IMogrNYRxxOw8LVB0UBnVTlYxA+iFciG+FTlxsx6yQPZflB0MWUHYu6PQ QzXPQRzHaSktTb/cc9aEbD9quU7PPvN/B/dxPApiCEC0WpsLb8zB1TVaYuAQ3o0d JhhtFu17DOFPWjkm0uV+BldYfgt6rbNCANoUZ6ErnTsFAJzzDnOc50lOD0qFjlH6 1KPsrZSICiLrzrMoGkwgYfbaPgo9rhNR+Ubp0ZNN5lnrVyYYmusaQ6VwfYpbtIJA MIuZ+kcSqYEd0fdPTBJrnfeXWx9/plK8 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:42 2025 by rpki-client