$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: zygPefcxFt2SxVpnJy5gi0+L+kk95oKyjtNJkVfuQpg= Subject key identifier: 28:53:D8:35:7B:64:C5:C2:26:14:E4:A4:E3:1B:BD:AD:DD:04:89:80 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D5F Signing time: Sat 18 Oct 2025 18:40:07 +0000 Manifest this update: Sat 18 Oct 2025 18:40:06 +0000 Manifest next update: Sat 25 Oct 2025 18:40:06 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: 5hGUhSeP85zUHgHj3yvTIdzeHmpRHTRbBfEvcINtuaA=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: yftNfagXlQP7kWCYM4or16TNugYWxYDf4262IfQW/IU=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Oct 18 18:40:06 2025 GMT Not After : Oct 25 18:40:06 2025 GMT Subject: CN=68f3df07-622f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:ad:a8:b6:b9:1b:38:71:2e:46:75:91:19: e2:c6:a3:6f:57:3b:90:74:a6:39:d6:92:2a:4d:23: 44:3e:c1:74:24:59:45:f8:cc:38:8f:03:b8:7d:52: 9c:64:e9:b8:fc:12:06:ad:d6:4b:32:db:8a:52:6f: 41:50:14:67:7a:56:56:54:33:d3:d8:9f:f8:50:c0: 69:76:15:70:d1:e7:8b:cd:88:34:fc:e2:d4:5e:9c: 99:52:0b:65:cc:94:27:49:5b:dc:6e:94:f8:8e:cf: cb:d2:8b:69:f9:89:0d:a6:b4:b9:02:91:58:e5:bf: 5c:5c:61:c5:6e:d5:48:b1:2a:25:86:5e:50:d2:b8: e1:e1:00:88:ad:11:9a:54:74:84:67:d8:4a:61:e0: b0:2f:ca:34:57:73:f5:c7:59:36:81:3d:61:6c:62: cb:28:67:6e:1b:73:a2:fe:9b:22:e5:b6:6c:b3:9f: 8d:16:e4:1c:11:9d:7c:37:50:ed:a4:ab:7c:a5:23: e3:f3:81:61:92:90:b7:7c:da:93:4a:55:e2:2a:92: 41:91:e7:7d:c4:ef:6d:c1:c0:a4:0d:9e:01:65:0f: 3d:b0:12:91:55:ee:6b:d8:a4:9c:ba:f7:eb:4c:5f: 29:b0:65:3c:bc:13:8a:f5:87:9a:f5:e5:10:a0:74: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:D8:35:7B:64:C5:C2:26:14:E4:A4:E3:1B:BD:AD:DD:04:89:80 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6e:9f:37:96:ba:45:eb:08:7c:0a:a2:04:74:8c:c6:a9:f6: 55:29:b4:40:a3:9b:bd:fb:c4:7c:aa:68:08:8d:78:ed:c7:fc: 68:48:57:bf:41:39:1d:72:1f:46:a0:57:04:c7:76:b7:9a:eb: 32:30:53:38:8a:6e:5d:9d:35:14:aa:58:fa:2f:cd:68:c7:f6: bf:88:f7:1a:31:06:8f:2e:80:29:98:f2:91:95:61:15:c4:e8: a1:4a:a5:68:02:cc:c2:10:ee:6d:5e:a0:90:0d:59:50:fc:1b: 37:c8:d7:43:99:d1:48:52:da:90:64:92:e3:a9:80:23:54:90: d3:d6:01:62:c6:6e:1c:64:60:1d:b6:cc:e5:ed:11:b0:e2:61: f0:a3:28:a8:18:b8:ce:72:21:f6:ab:2d:78:4a:bb:9a:4d:f4: ae:07:bf:4e:5d:0f:fb:f7:67:6a:4e:22:b6:d2:dc:86:0c:1b: 3e:f5:29:52:3c:df:2a:4c:d2:61:c3:6b:c6:48:29:1f:f9:bc: 8e:5f:6a:76:d0:f2:b0:05:af:b0:1c:92:09:09:73:dc:68:1c: e7:23:68:01:3b:b3:24:08:fb:82:db:9a:8c:5d:7c:89:57:12: 0c:5f:37:3e:95:65:01:69:cf:f4:49:a8:69:47:60:ad:15:cf: 35:4e:86:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUxMDE4MTg0MDA2WhcNMjUxMDI1MTg0MDA2WjAYMRYwFAYD VQQDEw02OGYzZGYwNy02MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyKtqLa5GzhxLkZ1kRnixqNvVzuQdKY51pIqTSNEPsF0JFlF+Mw4jwO4fVKc ZOm4/BIGrdZLMtuKUm9BUBRnelZWVDPT2J/4UMBpdhVw0eeLzYg0/OLUXpyZUgtl zJQnSVvcbpT4js/L0otp+YkNprS5ApFY5b9cXGHFbtVIsSolhl5Q0rjh4QCIrRGa VHSEZ9hKYeCwL8o0V3P1x1k2gT1hbGLLKGduG3Oi/psi5bZss5+NFuQcEZ18N1Dt pKt8pSPj84FhkpC3fNqTSlXiKpJBked9xO9twcCkDZ4BZQ89sBKRVe5r2KScuvfr TF8psGU8vBOK9Yea9eUQoHSA/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChT2DV7 ZMXCJhTkpOMbva3dBImAMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBbp83lrpF6wh8CqIEdIzGqfZVKbRAo5u9+8R8qmgIjXjtx/xoSFe/ QTkdch9GoFcEx3a3musyMFM4im5dnTUUqlj6L81ox/a/iPcaMQaPLoApmPKRlWEV xOihSqVoAszCEO5tXqCQDVlQ/Bs3yNdDmdFIUtqQZJLjqYAjVJDT1gFixm4cZGAd tszl7RGw4mHwoyioGLjOciH2qy14SruaTfSuB79OXQ/792dqTiK20tyGDBs+9SlS PN8qTNJhw2vGSCkf+byOX2p20PKwBa+wHJIJCXPcaBznI2gBO7MkCPuC25qMXXyJ VxIMXzc+lWUBac/0SahpR2CtFc81ToZ7 -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:18 2025 by rpki-client