$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: RsULytP/4X90+LxClbAlLp6yo8sRZUKTDMZQleZwpQM= Subject key identifier: 85:BC:FC:BA:F5:EE:4E:4A:A3:44:8F:69:DD:12:13:C9:1B:E9:F4:19 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 76 Signing time: Sun 19 Oct 2025 10:10:21 +0000 Manifest this update: Sun 19 Oct 2025 10:10:20 +0000 Manifest next update: Sun 26 Oct 2025 10:10:20 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: x3xlTJCcqyGSup4jlhFg/HlghhSi2LK3mj12BMQzRTY=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: Oct 19 10:10:20 2025 GMT Not After : Oct 26 10:10:20 2025 GMT Subject: CN=68f4b90d-f61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:0d:25:35:5e:98:db:b5:40:50:3c:71:00: 27:24:f3:7e:e6:e3:49:57:50:9c:f1:e2:ed:2a:0b: b0:77:2c:47:a8:81:f8:74:84:a8:3e:bc:36:c2:4b: ad:ea:7e:3f:5c:b3:cd:d4:94:65:a3:bf:0a:5e:04: 6d:bc:b4:7a:15:a7:fd:77:ce:b1:ac:61:31:36:97: 21:1e:79:5d:f4:2b:89:26:a3:86:3f:76:a7:b8:e1: ad:fe:fb:59:02:43:fe:0e:28:50:f4:3d:89:e1:e7: 02:8b:85:99:29:38:90:82:f2:c0:52:9f:ed:82:c3: cc:53:4c:83:8d:f7:a0:e6:50:66:29:f5:0c:8d:9c: 44:5a:11:9a:03:a5:6e:cb:00:9e:6d:5a:7d:96:37: c2:02:a5:7e:05:42:f7:e3:d7:e1:26:a5:62:c1:58: 72:45:f9:6f:33:d4:da:29:85:fb:d6:36:64:2a:6d: 6d:3f:51:8a:b4:c2:54:0c:d7:37:d8:15:18:21:ae: 2b:61:a5:66:da:0f:85:83:82:15:cc:96:4b:29:10: 65:1e:bc:ba:65:77:7f:1f:81:2d:1b:1b:c0:7b:ad: 70:e5:76:8c:24:7b:a7:e7:a0:c7:8a:44:c7:51:b0: c6:55:08:73:ed:3c:71:17:4b:95:31:29:20:8d:6e: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:FC:BA:F5:EE:4E:4A:A3:44:8F:69:DD:12:13:C9:1B:E9:F4:19 X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ee:23:27:ad:8f:b5:60:6d:74:c2:57:0a:c7:bb:34:81:34: 57:01:4b:89:79:8f:d4:50:b6:3f:dd:c4:b0:6c:82:ce:69:1d: f2:ea:bf:45:ac:f2:f1:d5:94:31:ee:a3:b3:3f:b5:35:a4:c6: 4a:9b:45:7c:b4:f3:67:c4:92:e2:83:90:54:79:d5:8b:1e:ee: bf:12:b3:e7:15:14:a1:f9:44:c3:05:72:cc:4d:c2:e9:c2:dc: 91:34:29:03:e3:90:d1:63:99:ea:69:46:af:e6:5a:b4:ce:56: 9a:3b:d1:65:d3:c8:41:e4:94:e0:0b:10:f8:89:c7:f5:5b:56: a1:77:fc:08:8c:9e:59:fd:73:d4:db:c2:55:c0:47:98:74:8d: e0:b1:78:ee:8f:57:1b:ad:58:11:98:ee:ae:25:4b:ad:bd:0b: 2a:d2:44:07:60:28:9c:62:bf:9c:96:04:09:9b:a8:ed:f8:dc: 7e:5f:16:64:68:f4:e4:d5:eb:9b:f1:77:96:01:51:de:1d:0e: df:61:9e:d4:25:1b:83:5e:bf:a3:84:b4:78:89:79:18:54:6e: 6e:1e:26:13:45:fc:e8:9c:cf:07:c6:b6:6a:00:ca:0b:ee:0b: 63:1c:a9:e5:7f:69:6f:b1:db:18:28:6d:04:65:3b:63:66:64: 87:0c:ec:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTEwMTkxMDEwMjBaFw0yNTEwMjYxMDEwMjBaMBgxFjAUBgNV BAMTDTY4ZjRiOTBkLWY2MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6PA0lNV6Y27VAUDxxACck837m40lXUJzx4u0qC7B3LEeogfh0hKg+vDbCS63q fj9cs83UlGWjvwpeBG28tHoVp/13zrGsYTE2lyEeeV30K4kmo4Y/dqe44a3++1kC Q/4OKFD0PYnh5wKLhZkpOJCC8sBSn+2Cw8xTTION96DmUGYp9QyNnERaEZoDpW7L AJ5tWn2WN8ICpX4FQvfj1+EmpWLBWHJF+W8z1NophfvWNmQqbW0/UYq0wlQM1zfY FRghrithpWbaD4WDghXMlkspEGUevLpld38fgS0bG8B7rXDldowke6fnoMeKRMdR sMZVCHPtPHEXS5UxKSCNbjiXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhbz8uvXu TkqjRI9p3RITyRvp9BkwHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RURFLzU5MDREOTcwRkI1QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1D SWFPWW5VZ29hRFlxSDhFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHuIyetj7VgbXTCVwrHuzSBNFcBS4l5j9RQtj/dxLBsgs5pHfLqv0Ws 8vHVlDHuo7M/tTWkxkqbRXy082fEkuKDkFR51Yse7r8Ss+cVFKH5RMMFcsxNwunC 3JE0KQPjkNFjmeppRq/mWrTOVpo70WXTyEHklOALEPiJx/VbVqF3/AiMnln9c9Tb wlXAR5h0jeCxeO6PVxutWBGY7q4lS629CyrSRAdgKJxiv5yWBAmbqO343H5fFmRo 9OTV65vxd5YBUd4dDt9hntQlG4Nev6OEtHiJeRhUbm4eJhNF/OiczwfGtmoAygvu C2McqeV/aW+x2xgobQRlO2NmZIcM7Hg= -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:22 2025 by rpki-client