$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: ccuokRUM7bXkTmU/ioLMiDy7/B/43b1xjuEzm1wPiHI= Subject key identifier: BA:AB:F6:EA:79:84:DD:1E:DF:97:03:57:FE:60:25:F3:6C:04:9B:15 Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: B9 Signing time: Sun 19 Oct 2025 09:09:49 +0000 Manifest this update: Sun 19 Oct 2025 09:09:49 +0000 Manifest next update: Sun 26 Oct 2025 09:09:49 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: bvnSiEwDY9S9rxH5dOUaiJaHecpGxOpoMgs8FqjM518=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Oct 19 09:09:49 2025 GMT Not After : Oct 26 09:09:49 2025 GMT Subject: CN=68f4aadd-12a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:00:ac:2d:14:09:c1:4d:9b:89:08:c9:a1: dd:e3:54:75:2d:10:ba:9a:9c:cd:bc:e7:af:c6:40: be:0d:97:64:72:e8:42:23:04:15:62:f0:28:dd:53: 59:80:58:f8:60:20:80:53:35:d4:91:50:3f:99:e2: 75:3c:54:90:fb:9d:45:47:c0:aa:06:6d:3d:98:41: 7c:4f:62:cd:ff:2d:10:48:76:78:c4:71:c2:fc:ea: f0:20:12:ac:bd:a4:67:a0:c3:13:a1:76:e0:3a:1c: 74:92:50:e6:86:0e:6e:16:eb:d7:05:d1:aa:71:b6: 13:f4:77:15:99:ee:ea:93:5b:9e:34:d0:29:ab:96: bb:4e:3d:24:65:9e:07:4f:7e:51:33:77:fb:f1:32: c6:da:a0:4c:fb:7b:d3:b9:b1:f7:bc:89:7d:61:8e: 07:4d:b9:2b:9a:1a:6f:54:9a:98:67:6f:c5:1e:f7: a7:97:f4:7f:44:cd:dd:02:67:bf:92:59:19:53:81: fa:dd:61:41:eb:ed:f9:91:24:98:21:3c:49:c9:90: ee:7c:59:90:3c:8d:53:46:50:62:56:28:ea:f3:42: c2:49:62:c8:a6:c8:99:a9:82:ac:46:5a:e4:63:69: 7e:90:86:96:92:bb:3e:6e:48:59:30:59:4d:23:65: 06:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AB:F6:EA:79:84:DD:1E:DF:97:03:57:FE:60:25:F3:6C:04:9B:15 X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:bf:c1:45:3e:ff:b8:ef:6d:8c:20:50:19:d4:87:f1:08:ab: 56:ac:74:08:dc:51:cc:77:36:67:47:e7:2c:85:93:8d:56:89: 5d:19:7d:bb:88:4b:47:16:c9:9e:76:f7:f2:6c:c8:fd:49:63: 78:c9:82:63:38:fc:d5:5b:5b:1f:42:41:b1:90:6c:f6:9f:66: d6:90:4d:51:13:e7:48:45:93:02:23:ad:6e:e8:64:67:9d:73: 87:9b:cf:03:2c:51:42:da:92:5c:9a:38:52:14:e6:13:b6:8a: 07:e1:58:1f:71:44:c9:86:a9:c8:fc:0a:6c:cf:fc:ec:f9:a0: d6:91:e6:bf:8b:25:75:98:db:f6:43:cc:26:44:1d:d0:46:b0: 47:25:f3:2a:fa:20:47:a6:e6:71:88:3b:7f:20:5d:1f:24:15: b8:c6:ab:05:93:8b:b7:bf:27:c8:21:b4:a4:0b:7b:11:70:83: dd:18:a2:f9:76:b6:4d:da:25:59:d8:85:d0:ed:24:a0:fd:df: 15:00:9a:97:ba:45:17:fb:5e:8b:05:70:65:52:97:0a:ca:ed: 46:12:54:33:9c:61:70:ec:73:2a:9d:61:14:dd:47:75:ce:39: 96:d1:6d:11:50:10:ac:17:df:87:08:5d:47:d7:bf:a8:01:85: 51:45:7b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy NDIyRUI2NkYwHhcNMjUxMDE5MDkwOTQ5WhcNMjUxMDI2MDkwOTQ5WjAYMRYwFAYD VQQDEw02OGY0YWFkZC0xMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspcArC0UCcFNm4kIyaHd41R1LRC6mpzNvOevxkC+DZdkcuhCIwQVYvAo3VNZ gFj4YCCAUzXUkVA/meJ1PFSQ+51FR8CqBm09mEF8T2LN/y0QSHZ4xHHC/OrwIBKs vaRnoMMToXbgOhx0klDmhg5uFuvXBdGqcbYT9HcVme7qk1ueNNApq5a7Tj0kZZ4H T35RM3f78TLG2qBM+3vTubH3vIl9YY4HTbkrmhpvVJqYZ2/FHvenl/R/RM3dAme/ klkZU4H63WFB6+35kSSYITxJyZDufFmQPI1TRlBiVijq80LCSWLIpsiZqYKsRlrk Y2l+kIaWkrs+bkhZMFlNI2UGrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqr9up5 hN0e35cDV/5gJfNsBJsVMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0 bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51 VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVv8FFPv+4722MIFAZ1IfxCKtWrHQI3FHMdzZnR+cshZONVoldGX27 iEtHFsmedvfybMj9SWN4yYJjOPzVW1sfQkGxkGz2n2bWkE1RE+dIRZMCI61u6GRn nXOHm88DLFFC2pJcmjhSFOYTtooH4VgfcUTJhqnI/Apsz/zs+aDWkea/iyV1mNv2 Q8wmRB3QRrBHJfMq+iBHpuZxiDt/IF0fJBW4xqsFk4u3vyfIIbSkC3sRcIPdGKL5 drZN2iVZ2IXQ7SSg/d8VAJqXukUX+16LBXBlUpcKyu1GElQznGFw7HMqnWEU3Ud1 zjmW0W0RUBCsF9+HCF1H17+oAYVRRXss -----END CERTIFICATE-----Generated at Tue Oct 21 10:17:23 2025 by rpki-client