$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json) Hash identifier: MsajQSwaIMwhDhhqL9CzEZBs6e3vjN2ZwpwvIo8kxKM= Subject key identifier: F7:62:3D:3A:45:DD:A4:43:D6:9C:5F:EC:CB:9B:85:6C:C7:F8:5B:B4 Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft Manifest number: 03EF Signing time: Sun 19 Oct 2025 02:38:42 +0000 Manifest this update: Sun 19 Oct 2025 02:38:41 +0000 Manifest next update: Sun 26 Oct 2025 02:38:41 +0000 Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: 50PABbMkCkEBeny0lSGPJR7nD+Wi5O+jJ1Wl4wipXCI=) 2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: 8BJmRiErzxldmGuPcVm3YUprnJm+HfKbTIGSnCrNI1I=) 3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: slEYVdAk6tIbZpblC8w7KpBF1oowZxGxHf1f2574AkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Validity Not Before: Oct 19 02:38:41 2025 GMT Not After : Oct 26 02:38:41 2025 GMT Subject: CN=68f44f31-264b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:d8:f5:10:c4:3a:08:53:e5:b6:6d:f6:ef: 2f:a1:e8:b7:8e:b4:e8:3d:a9:d6:ed:e4:08:7d:50: 93:7c:15:cb:57:e2:f3:d5:11:74:29:13:31:b8:ed: 2d:80:9a:a8:92:ba:d5:bc:6d:7b:53:3f:46:c3:9f: d6:ec:2c:35:f1:e4:81:32:d9:2d:d8:65:ba:e7:6e: 41:58:57:56:74:f2:d8:e5:d1:51:e9:bf:87:48:2b: 0a:55:85:28:0d:9a:6d:cf:bd:cd:14:e4:41:1a:38: 9c:dc:91:16:fd:09:ca:93:9a:50:4e:40:ae:28:2a: 8f:dd:a2:ad:84:dc:5d:b1:ba:8d:1c:3c:de:e5:8b: 6b:d8:be:6b:0e:17:72:cd:31:ea:06:10:c1:e0:36: a7:47:c5:3b:6f:bf:c2:cf:80:cf:1f:f3:de:31:27: 74:9b:70:5e:e4:32:25:33:d2:50:0e:24:fa:ab:df: b7:82:a9:11:e7:e8:84:1e:75:4f:e6:86:aa:7e:ca: d2:b9:bf:f6:50:4b:e3:04:25:36:de:a9:1e:b7:0b: ef:b1:a1:40:b2:4c:6c:06:de:c2:0a:87:54:33:c3: 8a:96:83:c6:69:4b:20:7a:34:c6:96:37:dd:48:1f: c5:a8:13:e8:18:88:02:ff:dc:53:ae:d4:20:b7:cf: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:62:3D:3A:45:DD:A4:43:D6:9C:5F:EC:CB:9B:85:6C:C7:F8:5B:B4 X509v3 Authority Key Identifier: keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b5:fd:b5:dc:62:06:89:25:4a:4c:35:7d:65:26:91:f7:6f: 65:43:a7:2d:19:fd:fd:bf:4b:12:b6:99:25:58:d6:79:84:c9: 0b:6f:eb:5c:b0:ba:f4:90:71:46:24:bf:c9:22:81:e4:ab:cc: 5f:0d:6f:c6:3e:f6:ad:40:68:f9:13:fb:c6:80:b2:90:86:71: 15:29:ae:58:e0:54:29:75:38:93:7e:37:87:44:17:8b:60:4e: 92:75:b9:e0:60:4b:6d:cf:53:c4:71:bb:88:b3:97:f9:8a:e8: 2b:66:7b:00:18:67:fe:5c:a2:e4:4b:57:b6:57:65:77:5a:c2: 1b:f7:4b:0b:38:7e:fd:91:56:78:25:97:19:ed:f9:60:aa:5b: b0:b6:57:a4:24:49:ad:4b:28:07:dc:a8:8b:93:3f:be:d4:d4: 37:16:ec:70:64:1e:5a:ff:f3:73:3e:69:32:f8:57:9a:82:26: ff:0f:0b:1c:71:3e:64:d6:50:b5:64:b3:1b:d5:f6:81:c5:3d: 56:eb:38:30:fd:57:12:92:07:ce:8c:44:d7:c1:04:8f:0f:12: b2:62:71:65:6e:43:34:6e:ad:90:fd:aa:1f:1e:61:b3:77:35: 37:8b:dd:f8:a8:ae:f9:bb:e8:7d:12:42:30:28:43:f9:47:5b: b5:d2:1d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3MjAxMTAvBgNVBAUTKDFCMDM2QkZGODc4MDdDQkZDNkU5MTIzNkNCMDg2RDRG RTJCMDk5M0QwHhcNMjUxMDE5MDIzODQxWhcNMjUxMDI2MDIzODQxWjAYMRYwFAYD VQQDEw02OGY0NGYzMS0yNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTnY9RDEOghT5bZt9u8voei3jrToPanW7eQIfVCTfBXLV+Lz1RF0KRMxuO0t gJqokrrVvG17Uz9Gw5/W7Cw18eSBMtkt2GW6525BWFdWdPLY5dFR6b+HSCsKVYUo DZptz73NFORBGjic3JEW/QnKk5pQTkCuKCqP3aKthNxdsbqNHDze5Ytr2L5rDhdy zTHqBhDB4DanR8U7b7/Cz4DPH/PeMSd0m3Be5DIlM9JQDiT6q9+3gqkR5+iEHnVP 5oaqfsrSub/2UEvjBCU23qketwvvsaFAskxsBt7CCodUM8OKloPGaUsgejTGljfd SB/FqBPoGIgC/9xTrtQgt8+DPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdiPTpF 3aRD1pxf7MubhWzH+Fu0MB8GA1UdIwQYMBaAFBsDa/+HgHy/xukSNssIbU/isJk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDcyMC8yMDlGOEI3NEE3 OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZMX0c2UkkyeXdodFQtS3dt VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3TnJfNGVBZkxfRzZSSTJ5d2h0VC1Ld21UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDcyMC8yMDlGOEI3NEE3OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZM X0c2UkkyeXdodFQtS3dtVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6tf213GIGiSVKTDV9ZSaR929lQ6ctGf39v0sStpklWNZ5hMkLb+tc sLr0kHFGJL/JIoHkq8xfDW/GPvatQGj5E/vGgLKQhnEVKa5Y4FQpdTiTfjeHRBeL YE6SdbngYEttz1PEcbuIs5f5iugrZnsAGGf+XKLkS1e2V2V3WsIb90sLOH79kVZ4 JZcZ7flgqluwtlekJEmtSygH3KiLkz++1NQ3FuxwZB5a//NzPmky+Feagib/Dwsc cT5k1lC1ZLMb1faBxT1W6zgw/VcSkgfOjETXwQSPDxKyYnFlbkM0bq2Q/aofHmGz dzU3i934qK75u+h9EkIwKEP5R1u10h0e -----END CERTIFICATE-----Generated at Tue Oct 21 02:24:51 2025 by rpki-client