$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json) Hash identifier: 81BC8VYqKsh+VuFLX18Dd9upZE16waw3rQChuJe1ZPM= Subject key identifier: 32:7F:67:20:98:67:EB:3A:33:1D:8A:0F:20:10:92:B3:CA:50:CB:5F Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 1979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft Manifest number: 1966 Signing time: Sat 18 Oct 2025 16:47:00 +0000 Manifest this update: Sat 18 Oct 2025 16:46:59 +0000 Manifest next update: Sat 25 Oct 2025 16:46:59 +0000 Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: ptJX2YN+bQbRoVwka3LiNpaTOuJQknGw0uIxHETMCGU=) 2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=) 3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6521 (0x1979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Validity Not Before: Oct 18 16:46:59 2025 GMT Not After : Oct 25 16:46:59 2025 GMT Subject: CN=68f3c484-632d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:ab:67:1c:86:84:c4:47:87:6e:8c:d5:10: e9:b8:b5:ca:0f:b2:64:37:73:d8:b7:81:f7:29:c5: 5e:f7:6c:98:1d:ad:8c:6c:27:9f:73:b9:94:da:1c: d6:81:e8:ac:16:52:3e:02:fa:a0:e3:b5:11:c5:64: a5:e3:e7:67:73:74:9a:f0:9b:1a:47:c6:54:4d:26: ce:d9:44:79:2b:c9:ff:9b:be:92:4a:16:d4:96:c0: e3:da:7b:fe:84:df:d0:05:a8:df:90:63:f6:8a:26: 14:08:02:75:11:9a:58:4b:08:44:d0:b3:d3:0f:0a: fe:70:7b:16:82:2b:48:31:5d:55:ec:dd:f7:f2:49: e0:29:b0:9b:8e:9f:11:fe:c3:85:32:d1:39:a2:23: 34:1e:cf:0f:ca:e4:bf:de:8b:ba:0b:c3:e0:67:63: 0e:3d:94:2a:74:a3:f9:a5:a5:62:a9:a5:e0:06:14: 9d:39:f0:45:45:f9:1c:2b:58:e9:72:e2:b1:9b:c2: 6f:b3:66:62:74:d7:f6:30:47:bd:35:77:d7:2c:1b: 5f:f8:c9:63:bc:87:a8:6e:1f:98:de:d6:fe:27:18: 10:32:aa:2d:4b:a2:6e:5d:bf:5a:d7:f0:f0:f5:a2: da:da:f9:45:d4:f1:e2:ff:4f:ac:8b:9b:4a:b9:ac: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7F:67:20:98:67:EB:3A:33:1D:8A:0F:20:10:92:B3:CA:50:CB:5F X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:48:46:4a:8e:1d:94:4b:4d:02:36:fa:db:30:90:34:85:21: 4b:a7:94:a6:11:79:23:60:e4:2f:10:40:de:4c:8b:e5:f3:9b: fe:3e:4c:6a:69:3e:10:8a:e7:fd:9f:70:22:3e:78:47:c7:da: cf:b9:44:74:ba:30:65:1d:92:4b:a0:dc:b4:2a:63:20:d2:2e: 0d:95:15:6f:ff:0c:6f:e8:cc:ea:b8:87:3a:d8:f1:d1:91:1a: 37:eb:43:09:ce:01:44:72:8c:c5:f6:76:b0:8a:de:de:5f:08: cd:43:dd:b5:57:c8:58:d6:58:e6:ef:da:66:a6:7b:5b:8f:6c: f2:43:21:f9:fa:a0:e3:10:5f:37:a6:bd:f7:68:32:5f:66:0a: 5c:f7:e0:fb:ef:ae:7c:f8:0b:a3:5f:4f:b3:1d:2c:b6:37:2d: 3e:0c:60:ef:5b:0a:8b:90:94:bb:1a:16:4e:86:c9:4c:8d:c4: ce:e2:a7:0a:18:f5:b6:3a:90:48:de:92:7e:91:14:74:0a:ba: d6:1d:27:d7:4f:41:d3:b4:d3:44:5c:80:f6:be:e3:4c:57:1f: ec:1b:d9:c5:97:0d:c2:c7:10:cb:76:27:92:b7:94:3b:aa:a0: 7f:0f:09:a4:70:c3:aa:4f:0d:4d:44:80:bc:df:1d:a2:8b:e7: 05:67:24:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjUxMDE4MTY0NjU5WhcNMjUxMDI1MTY0NjU5WjAYMRYwFAYD VQQDEw02OGYzYzQ4NC02MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EWrZxyGhMRHh26M1RDpuLXKD7JkN3PYt4H3KcVe92yYHa2MbCefc7mU2hzW geisFlI+Avqg47URxWSl4+dnc3Sa8JsaR8ZUTSbO2UR5K8n/m76SShbUlsDj2nv+ hN/QBajfkGP2iiYUCAJ1EZpYSwhE0LPTDwr+cHsWgitIMV1V7N338kngKbCbjp8R /sOFMtE5oiM0Hs8PyuS/3ou6C8PgZ2MOPZQqdKP5paViqaXgBhSdOfBFRfkcK1jp cuKxm8Jvs2ZidNf2MEe9NXfXLBtf+MljvIeobh+Y3tb+JxgQMqotS6JuXb9a1/Dw 9aLa2vlF1PHi/0+si5tKuawxzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ/ZyCY Z+s6Mx2KDyAQkrPKUMtfMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM OTFJMjdaYUdyazhBRlZfMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKSEZKjh2US00CNvrbMJA0hSFLp5SmEXkjYOQvEEDeTIvl85v+Pkxq aT4Qiuf9n3AiPnhHx9rPuUR0ujBlHZJLoNy0KmMg0i4NlRVv/wxv6MzquIc62PHR kRo360MJzgFEcozF9nawit7eXwjNQ921V8hY1ljm79pmpntbj2zyQyH5+qDjEF83 pr33aDJfZgpc9+D77658+AujX0+zHSy2Ny0+DGDvWwqLkJS7GhZOhslMjcTO4qcK GPW2OpBI3pJ+kRR0CrrWHSfXT0HTtNNEXID2vuNMVx/sG9nFlw3CxxDLdieSt5Q7 qqB/DwmkcMOqTw1NRIC83x2ii+cFZyT6 -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:12 2025 by rpki-client