$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: s/Q7E19IPdI0HKnXVxgcsjjD5JFAYtOXv3fsvVQQ4tg= Subject key identifier: 8F:E8:B2:1B:E3:01:54:B3:C4:E1:7D:54:8E:F2:49:BE:3B:E5:B9:A6 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 22F4 Signing time: Sat 18 Oct 2025 16:06:09 +0000 Manifest this update: Sat 18 Oct 2025 16:06:09 +0000 Manifest next update: Sat 25 Oct 2025 16:06:09 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: JhlU7hpHYONOgpc7mM4O3+JDuJKTfCfEnldp6HUr4Cc=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: K3fvldT9Mc/lZb+wx6WzuwlTVaS/fmxJVle6WcpqwVI=) 3: ECB36EBCA54211F08D0FD466C4F9AE02.roa (hash: SuKYaB6T0tGfEKvGlTa0CLqgp2xb848WliNxbdmfrSw=) 4: 55D95690A13811F0BF53567FC4F9AE02.roa (hash: wfIg4YQ25Mg9FB53wM9axrO11ggNzJyyDGc+cl9NhDU=) 5: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (hash: EqPoHokWPSQ1L2lcAAXRF+UXl8dKiWjU9iYk2iUWo3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9027 (0x2343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Oct 18 16:06:09 2025 GMT Not After : Oct 25 16:06:09 2025 GMT Subject: CN=68f3baf1-aea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:a6:07:cb:b1:53:dd:55:92:aa:8d:51:53: f2:b0:cb:29:29:d1:1a:af:ca:b8:9b:a0:c5:cf:56: 3e:3f:cb:3b:50:12:07:23:f7:d7:15:b2:71:8e:9e: 8e:44:43:4e:42:f8:54:30:0b:59:60:00:32:5b:37: e9:da:e8:02:21:1c:cc:a2:12:10:bf:f2:00:f4:32: 24:9e:38:c4:cd:07:6d:89:78:ee:da:35:86:21:dd: b3:9f:e2:e1:d6:6c:eb:5f:c9:3a:87:9f:b8:af:52: 53:7d:07:86:22:f5:35:8e:6c:d0:89:cc:48:13:69: d4:d5:38:6f:9e:b7:09:aa:cb:f6:5b:38:56:87:26: 8c:c8:68:58:e7:f4:f4:68:0e:f4:d2:41:d7:f9:b4: 1e:24:02:66:50:d4:5f:f2:62:4c:26:e8:9d:08:05: b6:4d:2f:5a:c2:96:14:4c:b4:36:de:be:34:26:05: 50:09:b5:41:14:b4:0f:e1:3c:6a:eb:93:db:e2:58: 74:ee:8b:68:4b:d1:40:7b:91:fb:e4:bf:c7:5c:aa: 3e:a9:fc:2c:6b:88:ba:0b:55:4d:6b:f3:98:73:44: 97:0a:4b:46:6f:06:b2:1b:cd:b2:6f:c5:1f:85:85: da:ec:cc:c5:dc:33:46:29:73:e3:42:91:f8:f3:8c: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:B2:1B:E3:01:54:B3:C4:E1:7D:54:8E:F2:49:BE:3B:E5:B9:A6 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e3:46:7f:76:d1:9f:a0:81:c9:1f:7f:9b:28:b9:91:62:76: 9b:0c:38:d6:a8:97:f2:af:7f:4c:be:c8:36:64:d4:b0:de:9d: a7:f2:2b:5f:29:7c:18:b8:04:fb:03:6e:92:10:16:1f:52:18: 43:b9:48:ad:a0:59:ae:4e:8e:47:59:ac:ce:02:c5:7f:5d:c0: ae:64:28:d2:43:35:23:03:81:10:9d:8e:3f:6e:7e:29:a7:68: 20:cf:f0:e4:f7:2f:29:47:c5:c9:fa:25:1a:02:c3:65:c5:36: 71:3f:85:e5:39:5e:52:9f:cb:39:fd:eb:d9:b8:a1:8c:bb:2c: 01:31:d2:9f:66:63:40:f3:8c:de:89:f3:10:3b:03:99:aa:d3: 53:e9:4a:2e:e4:29:e2:23:d5:05:65:4d:0b:d4:51:f1:1c:92: e7:d8:bd:2e:26:81:a2:7c:f7:f1:b5:e0:ae:ff:a0:f3:4e:51: ab:3c:77:fb:f3:77:34:74:bb:ed:db:5e:49:f4:dd:e3:c6:5c: ab:0e:95:31:59:65:79:47:6f:67:a2:ee:5c:c4:bb:e3:fe:c8: bd:b4:2b:95:25:97:e2:1a:9c:13:da:81:43:c6:d8:05:19:0d: d0:ef:89:22:a1:cf:95:a2:9d:cf:7c:ac:ac:f0:d6:02:cf:78: a9:49:6d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUxMDE4MTYwNjA5WhcNMjUxMDI1MTYwNjA5WjAYMRYwFAYD VQQDEw02OGYzYmFmMS1hZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cGmB8uxU91VkqqNUVPysMspKdEar8q4m6DFz1Y+P8s7UBIHI/fXFbJxjp6O RENOQvhUMAtZYAAyWzfp2ugCIRzMohIQv/IA9DIknjjEzQdtiXju2jWGId2zn+Lh 1mzrX8k6h5+4r1JTfQeGIvU1jmzQicxIE2nU1ThvnrcJqsv2WzhWhyaMyGhY5/T0 aA700kHX+bQeJAJmUNRf8mJMJuidCAW2TS9awpYUTLQ23r40JgVQCbVBFLQP4Txq 65Pb4lh07otoS9FAe5H75L/HXKo+qfwsa4i6C1VNa/OYc0SXCktGbwayG82yb8Uf hYXa7MzF3DNGKXPjQpH484xcfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/oshvj AVSzxOF9VI7ySb475bmmMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB140Z/dtGfoIHJH3+bKLmRYnabDDjWqJfyr39Mvsg2ZNSw3p2n8itf KXwYuAT7A26SEBYfUhhDuUitoFmuTo5HWazOAsV/XcCuZCjSQzUjA4EQnY4/bn4p p2ggz/Dk9y8pR8XJ+iUaAsNlxTZxP4XlOV5Sn8s5/evZuKGMuywBMdKfZmNA84ze ifMQOwOZqtNT6Uou5CniI9UFZU0L1FHxHJLn2L0uJoGifPfxteCu/6DzTlGrPHf7 83c0dLvt215J9N3jxlyrDpUxWWV5R29nou5cxLvj/si9tCuVJZfiGpwT2oFDxtgF GQ3Q74kioc+Vop3PfKys8NYCz3ipSW1Q -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:52 2025 by rpki-client