$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: x5msAWnLgS9i48wPsLYAFutZ1VIa/88wpEAz+d+LauU= Subject key identifier: AE:7B:57:41:73:07:32:26:11:25:3C:14:79:46:EC:73:50:99:EA:6A Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 0235 Signing time: Sun 19 Oct 2025 04:06:09 +0000 Manifest this update: Sun 19 Oct 2025 04:06:08 +0000 Manifest next update: Sun 26 Oct 2025 04:06:08 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: l31aZGrMWJMPPp8tQX5Ec7c++Z3ZGw6q2tqXBKKDP+A=) 2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: O6zFMcf9EaPZdgAr128PYQi0cR1ER+8vc3NKgthzpAQ=) 3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: djWJpa9/TdKF8AMzoZiXCnuG5IEG89uLV66O6DCmMVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Oct 19 04:06:08 2025 GMT Not After : Oct 26 04:06:08 2025 GMT Subject: CN=68f463b1-6947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:4f:b1:c0:87:c3:94:54:92:2e:5c:55:77: d9:e7:15:01:37:d5:c0:0b:e4:ff:1f:52:f8:71:04: 34:98:61:62:9f:dc:2a:75:53:5e:0f:9e:9a:cf:43: 04:d3:07:82:fa:8a:92:4f:df:6e:3a:18:4f:7e:6b: 96:1e:d6:aa:ad:41:cb:71:ad:88:41:71:a4:80:33: bc:31:5c:ad:fe:aa:a3:bf:d6:37:0f:57:cd:66:c7: 97:76:71:c2:b1:3a:37:ef:5a:b2:bd:54:83:af:ba: 68:25:58:d4:e5:78:a4:c6:d5:a6:68:c7:fe:15:61: e3:6a:eb:d0:9e:00:91:90:e1:4f:0c:09:43:63:3a: f5:55:69:ed:2b:1e:65:e7:b6:05:ec:44:50:b4:f8: 0e:3f:b8:ef:1c:3b:62:1c:0e:c7:22:98:16:c0:af: 8a:e2:2a:0e:24:c3:d3:26:36:22:39:f7:3e:ea:a8: b8:5d:4a:58:a7:b9:50:4f:01:b0:64:3c:a6:f3:d3: 94:e1:9f:b8:6e:7d:34:44:9a:13:1f:19:0a:bc:50: 0d:a8:62:2c:a2:5c:9f:e7:4c:55:73:e9:46:ab:ca: 01:46:3d:16:4a:78:1b:a5:6d:a2:f6:18:fe:b2:0c: 76:30:de:16:88:da:85:e6:9b:e6:1a:73:29:64:34: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7B:57:41:73:07:32:26:11:25:3C:14:79:46:EC:73:50:99:EA:6A X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:27:64:9a:3a:38:d6:cf:79:3c:99:12:5d:57:15:aa:e4:9a: 48:bc:ed:de:c5:50:1b:bc:73:18:96:6f:d5:73:e1:21:5f:b5: c0:c4:45:dd:ec:39:e1:ef:0c:14:01:2e:96:85:07:fc:bc:e7: 8a:10:d2:ad:77:5e:64:15:ad:57:a1:32:36:6b:bf:30:cd:de: d1:db:fe:2d:46:80:53:1d:cb:fa:b3:60:f0:fa:a3:81:04:ab: be:3c:57:a0:83:af:aa:47:18:ac:19:fb:e7:56:73:32:cf:68: 61:76:49:53:5b:94:90:81:7d:ac:f0:30:9d:54:3c:8f:73:04: de:85:60:04:9a:df:72:76:47:6b:4b:38:1e:fd:f4:87:da:e8: d7:8a:23:72:94:d0:2f:19:86:78:a5:6a:4d:b6:33:20:3a:54: 94:b2:6f:ef:3d:59:c6:a0:d4:bf:1e:87:e3:43:0e:af:43:8b: cb:56:f0:c5:24:98:14:04:52:42:bc:f1:8a:50:55:9f:b7:3c: c4:d0:51:bb:30:d5:f0:16:41:25:f8:90:dd:a9:85:78:c4:95: 3f:8b:a1:1a:6a:23:3c:78:c4:f8:fa:cc:ca:e4:72:f7:0f:fb: f1:41:24:2d:2d:2f:be:5a:f0:e4:f4:46:61:fc:6f:4d:30:0d: b1:26:f0:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUxMDE5MDQwNjA4WhcNMjUxMDI2MDQwNjA4WjAYMRYwFAYD VQQDEw02OGY0NjNiMS02OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrxPscCHw5RUki5cVXfZ5xUBN9XAC+T/H1L4cQQ0mGFin9wqdVNeD56az0ME 0weC+oqST99uOhhPfmuWHtaqrUHLca2IQXGkgDO8MVyt/qqjv9Y3D1fNZseXdnHC sTo371qyvVSDr7poJVjU5XikxtWmaMf+FWHjauvQngCRkOFPDAlDYzr1VWntKx5l 57YF7ERQtPgOP7jvHDtiHA7HIpgWwK+K4ioOJMPTJjYiOfc+6qi4XUpYp7lQTwGw ZDym89OU4Z+4bn00RJoTHxkKvFANqGIsolyf50xVc+lGq8oBRj0WSngbpW2i9hj+ sgx2MN4WiNqF5pvmGnMpZDTRpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK57V0Fz BzImESU8FHlG7HNQmepqMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOJ2SaOjjWz3k8mRJdVxWq5JpIvO3exVAbvHMYlm/Vc+EhX7XAxEXd 7Dnh7wwUAS6WhQf8vOeKENKtd15kFa1XoTI2a78wzd7R2/4tRoBTHcv6s2Dw+qOB BKu+PFegg6+qRxisGfvnVnMyz2hhdklTW5SQgX2s8DCdVDyPcwTehWAEmt9ydkdr Szge/fSH2ujXiiNylNAvGYZ4pWpNtjMgOlSUsm/vPVnGoNS/HofjQw6vQ4vLVvDF JJgUBFJCvPGKUFWftzzE0FG7MNXwFkEl+JDdqYV4xJU/i6EaaiM8eMT4+szK5HL3 D/vxQSQtLS++WvDk9EZh/G9NMA2xJvAl -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:06 2025 by rpki-client