$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft File: gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json) Hash identifier: qjh3epckLPPBd6nBJIle+iZSFX0ewJwv6PmdIfEXDpA= Subject key identifier: BB:31:C5:7B:90:6D:40:C5:FA:DC:12:24:FD:1C:59:EC:79:FD:FE:77 Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 Certificate issuer: /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:06:57 +0000 Manifest this update: Sun 19 Oct 2025 08:06:56 +0000 Manifest next update: Sun 26 Oct 2025 08:06:56 +0000 Files and hashes: 1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: 0fv5dPq5HQwjuLLVSqQoRmL/Pw5KG4DNPR0Zd0Kd1lk=) 2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: KhqMoTs+Qi/II5aRP9wPpcsu1xRmCyMAj25hDB2Fy0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Validity Not Before: Oct 19 08:06:56 2025 GMT Not After : Oct 26 08:06:56 2025 GMT Subject: CN=68f49c21-f650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:fe:bb:41:12:1a:23:e5:66:8f:b7:7d:2e: 1d:17:8a:76:d8:fd:d7:61:b7:d6:7a:95:fe:8a:2c: aa:23:e5:f3:d0:93:68:59:7d:de:9a:3a:7a:05:d8: c7:f5:9c:57:d9:a6:b5:5e:11:86:3e:47:e9:66:f0: b5:d3:8c:ed:9d:29:03:c8:2e:e3:f9:d7:17:56:3e: 07:b4:c7:9b:8a:8d:54:75:d4:a4:91:82:bd:c5:22: 7e:60:2c:97:6e:09:49:fa:95:fe:60:79:3b:35:44: eb:9b:69:c0:80:87:17:14:9e:e9:58:31:0b:e9:6f: 0c:08:ff:f8:c1:37:fa:13:16:39:4b:35:ee:52:90: 79:b3:b6:17:4f:2b:08:38:92:5c:62:3b:61:f0:59: c5:a6:ce:64:dd:1d:a4:f4:8c:5e:e3:de:6d:3c:09: 41:8b:24:54:9a:9c:ce:51:6b:79:c0:f9:09:1d:ac: 9f:90:b9:ce:fb:09:69:6b:8c:51:ae:6d:6c:23:75: 6f:1f:1a:e7:20:27:fe:a0:2b:83:11:9a:a1:cf:82: 96:6a:09:87:b1:66:2d:30:71:1e:c1:0c:99:3f:72: 32:f8:ab:27:35:82:34:70:dd:71:ed:0c:f9:91:32: 6b:39:44:02:25:63:a1:76:89:fd:bf:da:76:cd:92: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:31:C5:7B:90:6D:40:C5:FA:DC:12:24:FD:1C:59:EC:79:FD:FE:77 X509v3 Authority Key Identifier: keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:af:d1:84:d6:d0:8d:43:94:fe:76:12:9b:a2:fe:f2:6f:2c: 69:08:d9:ac:45:47:c2:66:32:07:94:3b:1f:45:2c:b6:12:79: dc:c6:b4:42:00:33:3e:a7:f8:2a:76:42:98:39:08:24:dc:84: de:ad:5b:13:04:8a:db:b3:26:5a:8e:71:8f:1c:e5:79:c1:fa: f5:84:8f:58:5d:af:cc:ca:9d:d6:d9:da:a5:d4:ed:21:b7:76: c4:36:df:9d:b2:28:dc:ef:5f:86:91:10:45:03:0f:a1:f8:a1: af:4e:ae:86:a8:8f:13:d4:33:5b:ab:85:88:53:d7:e5:d1:e4: 2c:51:30:08:4d:92:1b:27:30:7b:4f:83:e9:c9:cf:7d:c2:7a: f7:58:77:9a:37:8a:96:63:f0:8b:0f:e6:c5:39:5a:a9:54:44: d5:94:01:b4:11:37:57:fe:54:95:c8:11:81:e7:8b:2d:dd:26: 36:fe:4a:2a:07:bf:d7:1c:e7:5b:95:87:aa:13:f0:72:de:90: 92:c2:04:be:72:65:f8:21:84:51:18:01:15:83:ba:4f:7b:61: 6c:fb:46:48:d3:db:a6:c5:5b:91:df:fd:63:93:53:71:53:50: 49:99:a2:fd:ab:5f:cb:fe:35:53:d0:c2:fc:36:13:91:85:52: 7e:02:6a:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJFNkExMTAvBgNVBAUTKDgyMzEwMEI3NUU1REQ0MUExRTdDMzI4MUMzNTcxM0Y0 NEJFODZDOTgwHhcNMjUxMDE5MDgwNjU2WhcNMjUxMDI2MDgwNjU2WjAYMRYwFAYD VQQDEw02OGY0OWMyMS1mNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOj+u0ESGiPlZo+3fS4dF4p22P3XYbfWepX+iiyqI+Xz0JNoWX3emjp6BdjH 9ZxX2aa1XhGGPkfpZvC104ztnSkDyC7j+dcXVj4HtMebio1UddSkkYK9xSJ+YCyX bglJ+pX+YHk7NUTrm2nAgIcXFJ7pWDEL6W8MCP/4wTf6ExY5SzXuUpB5s7YXTysI OJJcYjth8FnFps5k3R2k9Ixe495tPAlBiyRUmpzOUWt5wPkJHayfkLnO+wlpa4xR rm1sI3VvHxrnICf+oCuDEZqhz4KWagmHsWYtMHEewQyZP3Iy+KsnNYI0cN1x7Qz5 kTJrOUQCJWOhdon9v9p2zZJZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsxxXuQ bUDF+twSJP0cWex5/f53MB8GA1UdIwQYMBaAFIIxALdeXdQaHnwygcNXE/RL6GyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkU2QS9BRTM3M0Q4NDMy MzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFCb2VmREtCdzFjVDlFdm9i SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqRUF0MTVkMUJvZWZES0J3MWNUOUV2b2JKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkU2QS9BRTM3M0Q4NDMyMzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFC b2VmREtCdzFjVDlFdm9iSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3r9GE1tCNQ5T+dhKbov7ybyxpCNmsRUfCZjIHlDsfRSy2EnncxrRC ADM+p/gqdkKYOQgk3ITerVsTBIrbsyZajnGPHOV5wfr1hI9YXa/Myp3W2dql1O0h t3bENt+dsijc71+GkRBFAw+h+KGvTq6GqI8T1DNbq4WIU9fl0eQsUTAITZIbJzB7 T4Ppyc99wnr3WHeaN4qWY/CLD+bFOVqpVETVlAG0ETdX/lSVyBGB54st3SY2/koq B7/XHOdblYeqE/By3pCSwgS+cmX4IYRRGAEVg7pPe2Fs+0ZI09umxVuR3/1jk1Nx U1BJmaL9q1/L/jVT0ML8NhORhVJ+Amov -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:11 2025 by rpki-client