$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: GCqL+d/Z7FkPmQy1Lk34bAHwZAcEcfLRxwmGf2DHaFo= Subject key identifier: 3D:CF:2F:5C:02:FC:6F:BB:70:E4:0B:CB:86:77:B4:6D:2F:8E:07:66 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 0190 Signing time: Sun 19 Oct 2025 06:09:10 +0000 Manifest this update: Sun 19 Oct 2025 06:09:10 +0000 Manifest next update: Sun 26 Oct 2025 06:09:10 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: bwD6F8XPeYNVafrA5LsUbhTRQ76h8F9kmLMnsgLujYw=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: 2wLVZsO1YLWnfKEgyqwWeI7d6uTw73iY7K/Cbc0W2X0=) 3: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: 5lyCUd1mysctWfVlvXwlmX0rzKEQmNZ6o4CWCKrOtng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Oct 19 06:09:10 2025 GMT Not After : Oct 26 06:09:10 2025 GMT Subject: CN=68f48086-251c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:07:3b:83:69:fb:b7:cf:8e:0f:38:42:20: ee:ad:eb:80:4a:63:b8:8a:d9:bc:fa:bb:e7:22:10: fb:28:2e:7c:66:f6:9e:2e:e4:de:9b:74:7f:c6:26: 62:ae:d8:a5:48:09:0c:7f:45:e9:d7:35:06:de:e4: 82:35:31:c5:08:71:ce:fd:79:97:33:f8:2b:a2:45: 72:0c:0b:07:ea:fc:bb:4a:bb:35:22:08:7f:c7:d4: a0:e4:85:5a:a1:b5:b4:2a:f1:11:78:31:7d:5b:fa: 94:5f:ae:9e:d1:9d:92:56:96:73:d2:08:bf:ed:73: f6:47:47:48:bf:bb:79:29:33:d1:22:60:3d:eb:e6: fe:c7:c9:ec:97:7b:67:fe:94:29:b6:28:64:b0:08: c2:8c:6a:bd:9c:a9:8e:4a:b8:a9:15:77:4c:92:32: 27:4d:6d:27:39:d3:e4:09:46:7d:bc:15:f1:3d:ad: b1:b3:f9:07:0d:de:68:fc:5f:fb:9c:03:b9:b0:45: 52:1e:d3:78:ad:c1:4b:10:66:59:99:70:1f:b2:f2: df:c6:1b:e4:ab:43:96:67:81:3c:6a:4b:d6:1e:b5: b1:b8:4c:24:25:75:20:ab:a7:6f:fb:94:90:bf:3b: 28:08:94:20:80:d3:c5:32:3b:0a:bf:bf:72:32:51: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CF:2F:5C:02:FC:6F:BB:70:E4:0B:CB:86:77:B4:6D:2F:8E:07:66 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a4:40:25:29:95:9e:b8:42:d3:80:6b:d6:bb:27:f0:98:0e: 7b:4c:14:8b:69:a6:8b:2b:f3:c9:a8:15:b7:1c:ae:dd:3b:62: f0:9e:aa:97:22:4d:01:a0:3b:52:37:3f:24:16:6e:0a:1c:3e: d1:e0:7d:5d:dd:1c:d3:ea:57:f4:9c:8f:d8:58:76:5d:c9:d1: c9:45:06:69:ff:d7:9a:16:7e:dc:0e:9c:7b:ac:9f:d2:66:31: a5:e3:1e:7a:09:0b:3c:2e:77:93:1a:d8:e2:9c:2a:d4:7e:47: 9f:68:27:18:43:ca:14:b2:d6:62:3a:56:5d:e8:34:99:56:3f: e0:fa:99:6b:e0:a6:b1:65:45:1a:58:28:47:8d:b9:7e:57:9b: ce:80:b6:f3:ac:41:27:15:e3:78:85:09:d6:7f:c6:91:7e:e8: bb:3d:e5:ae:14:37:11:0f:0a:06:87:14:3d:4c:3c:db:97:30: 8f:3d:c5:80:cc:f2:0c:93:a2:5b:57:34:0d:64:95:a2:c9:e4: 63:7c:2d:f3:04:68:eb:60:6d:5d:cb:3a:24:7e:17:5d:d3:c0: c7:86:0e:ed:b3:db:d6:54:c7:e8:ad:7c:3f:d4:5b:09:65:34: 97:fa:e2:28:72:b2:37:ab:d0:a9:f5:99:ce:44:fa:b0:f3:ce: ac:1b:c5:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjUxMDE5MDYwOTEwWhcNMjUxMDI2MDYwOTEwWjAYMRYwFAYD VQQDEw02OGY0ODA4Ni0yNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fAHO4Np+7fPjg84QiDureuASmO4itm8+rvnIhD7KC58ZvaeLuTem3R/xiZi rtilSAkMf0Xp1zUG3uSCNTHFCHHO/XmXM/grokVyDAsH6vy7Srs1Igh/x9Sg5IVa obW0KvEReDF9W/qUX66e0Z2SVpZz0gi/7XP2R0dIv7t5KTPRImA96+b+x8nsl3tn /pQptihksAjCjGq9nKmOSripFXdMkjInTW0nOdPkCUZ9vBXxPa2xs/kHDd5o/F/7 nAO5sEVSHtN4rcFLEGZZmXAfsvLfxhvkq0OWZ4E8akvWHrWxuEwkJXUgq6dv+5SQ vzsoCJQggNPFMjsKv79yMlFGJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3PL1wC /G+7cOQLy4Z3tG0vjgdmMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqpEAlKZWeuELTgGvWuyfwmA57TBSLaaaLK/PJqBW3HK7dO2LwnqqX Ik0BoDtSNz8kFm4KHD7R4H1d3RzT6lf0nI/YWHZdydHJRQZp/9eaFn7cDpx7rJ/S ZjGl4x56CQs8LneTGtjinCrUfkefaCcYQ8oUstZiOlZd6DSZVj/g+plr4KaxZUUa WChHjbl+V5vOgLbzrEEnFeN4hQnWf8aRfui7PeWuFDcRDwoGhxQ9TDzblzCPPcWA zPIMk6JbVzQNZJWiyeRjfC3zBGjrYG1dyzokfhdd08DHhg7ts9vWVMforXw/1FsJ ZTSX+uIocrI3q9Cp9ZnORPqw886sG8WT -----END CERTIFICATE-----Generated at Mon Oct 20 00:21:58 2025 by rpki-client