$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: 6tGvKd28QdexPDsztVkt/S1CZJgYh3mGfxNxRDrNOok= Subject key identifier: 0C:E5:B7:EE:FE:02:6D:FA:52:CC:7F:4B:4F:F7:D4:A6:22:CD:E5:B1 Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 025A Signing time: Sun 19 Oct 2025 03:59:08 +0000 Manifest this update: Sun 19 Oct 2025 03:59:08 +0000 Manifest next update: Sun 26 Oct 2025 03:59:07 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: U5whiqhIYHlm9Ezgs0tquWY+zD/Y3Th228+vD/rBDUU=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: +md5I194ApAFzI9Vr3T+f9A2DpbYrH7HshUb/eOgpZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Oct 19 03:59:08 2025 GMT Not After : Oct 26 03:59:07 2025 GMT Subject: CN=68f4620c-871a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:5b:81:d8:63:bd:6d:f3:16:89:28:4e:dc: f0:d1:50:5d:47:ad:b7:97:5e:71:2c:59:46:a6:2d: 41:1e:2c:36:d1:ea:ea:35:4d:5f:58:25:f1:0a:5f: 9a:a7:39:ab:65:d2:3b:8b:b9:6b:f3:e2:f3:c8:7a: a6:ff:f0:3e:e2:42:49:84:94:bd:57:2a:7e:dd:14: 02:28:35:94:a5:ec:7b:d7:b0:8f:f1:25:3f:14:36: 5d:d4:03:f6:f5:1d:3e:1c:3a:3d:d3:a8:2c:e2:2f: 59:59:57:93:6b:fa:57:bf:51:2a:59:89:9c:71:a5: eb:35:95:b1:2d:03:46:9c:df:cc:14:34:dd:6b:9f: 55:43:63:66:fd:41:92:6b:6d:16:c5:eb:d5:7c:4f: a0:db:2e:5d:9e:2f:9d:50:5e:bc:52:08:3d:1d:3b: 8c:21:1a:51:6d:43:56:22:c1:3f:a0:02:6f:9e:e6: 40:d1:09:e3:03:fe:aa:a8:89:64:78:2c:b4:d3:46: bc:c5:a9:78:de:21:99:87:e3:30:2d:91:39:a8:d1: ec:a6:c1:70:28:05:9e:e3:b9:84:5a:d2:51:3e:49: ed:fb:3c:8c:21:b8:91:92:c1:a4:3f:a6:8e:f2:3d: e1:66:a3:55:0e:44:84:77:87:47:05:19:be:98:eb: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:B7:EE:FE:02:6D:FA:52:CC:7F:4B:4F:F7:D4:A6:22:CD:E5:B1 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a3:84:3e:af:4e:62:13:9c:8b:5e:38:71:0d:9e:f7:ea:ef: d4:56:e7:c1:c7:32:1b:be:1a:07:92:5b:95:8a:ec:d0:12:c2: 5d:ed:f6:ef:3c:55:f6:bc:77:cb:32:4d:b6:bf:6d:e5:ab:62: 04:66:d1:4b:50:c0:94:67:94:80:62:cc:55:fc:a2:be:3b:0c: 3e:55:82:a3:16:51:c2:bb:48:13:8c:97:f7:a8:20:49:c8:b0: 1b:b8:34:da:05:eb:83:e6:ba:e3:9f:17:cc:ee:d7:ab:d6:10: 06:f1:a8:4a:d1:ca:46:3e:3a:ad:3e:cf:2a:d5:85:2e:45:e0: 8a:55:10:bc:f3:d9:21:47:f6:ce:a4:78:66:6b:75:b6:ca:bc: a3:81:ce:14:d2:d9:cb:89:3d:0c:71:36:1b:24:ff:7e:41:8b: b8:09:c2:df:0f:a1:70:06:0e:8a:6a:09:75:48:db:a6:83:3d: bb:9e:f0:c2:5b:d6:d4:15:f4:2c:49:be:b4:d0:3c:6d:b8:d2: 68:bb:c2:6c:8b:5a:d1:31:6a:93:58:22:ae:75:0f:19:d7:8e: 0f:2c:2d:8c:15:c4:da:1f:93:4c:94:54:e9:bc:46:2f:2a:2d: 49:83:13:fa:88:61:4c:5c:e5:9a:ac:cd:d3:8a:e7:69:c1:fe: ed:4f:08:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUxMDE5MDM1OTA4WhcNMjUxMDI2MDM1OTA3WjAYMRYwFAYD VQQDEw02OGY0NjIwYy04NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNFbgdhjvW3zFokoTtzw0VBdR623l15xLFlGpi1BHiw20erqNU1fWCXxCl+a pzmrZdI7i7lr8+LzyHqm//A+4kJJhJS9Vyp+3RQCKDWUpex717CP8SU/FDZd1AP2 9R0+HDo906gs4i9ZWVeTa/pXv1EqWYmccaXrNZWxLQNGnN/MFDTda59VQ2Nm/UGS a20WxevVfE+g2y5dni+dUF68Ugg9HTuMIRpRbUNWIsE/oAJvnuZA0QnjA/6qqIlk eCy000a8xal43iGZh+MwLZE5qNHspsFwKAWe47mEWtJRPknt+zyMIbiRksGkP6aO 8j3hZqNVDkSEd4dHBRm+mOvlYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzlt+7+ Am36Usx/S0/31KYizeWxMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdo4Q+r05iE5yLXjhxDZ736u/UVufBxzIbvhoHkluViuzQEsJd7fbv PFX2vHfLMk22v23lq2IEZtFLUMCUZ5SAYsxV/KK+Oww+VYKjFlHCu0gTjJf3qCBJ yLAbuDTaBeuD5rrjnxfM7ter1hAG8ahK0cpGPjqtPs8q1YUuReCKVRC889khR/bO pHhma3W2yryjgc4U0tnLiT0McTYbJP9+QYu4CcLfD6FwBg6Kagl1SNumgz27nvDC W9bUFfQsSb600DxtuNJou8Jsi1rRMWqTWCKudQ8Z144PLC2MFcTaH5NMlFTpvEYv Ki1JgxP6iGFMXOWarM3Tiudpwf7tTwhB -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:07 2025 by rpki-client