$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: 5R30Z0QlBzxmmCvbW8mbtDTAC4RThgRM/XBgKqlOxgM= Subject key identifier: 87:71:4E:0B:6F:29:97:EB:9E:35:1C:E8:06:CC:5C:49:56:B0:E8:5D Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 08:28:59 +0000 Manifest this update: Sun 19 Oct 2025 08:28:58 +0000 Manifest next update: Sun 26 Oct 2025 08:28:58 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: fnzpOFe316Y8kfWg5ILGjTvSJ8ylrWxqRLVLAAVwF4E=) 2: 997D587CABD011F0AA576211C4F9AE02.roa (hash: eqFr7d/2/7J+tBqwKqs+V3n0lNlzzsND/P+LSGAEIcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Oct 19 08:28:58 2025 GMT Not After : Oct 26 08:28:58 2025 GMT Subject: CN=68f4a14a-7712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:e6:24:3c:f3:e0:15:79:8a:b7:64:e2:12: 36:fe:72:29:e9:fa:a1:cf:4f:e0:87:18:be:c8:76: ed:80:25:68:85:a3:df:b4:8a:da:d6:83:70:9b:fe: 58:40:fd:24:fd:47:a7:f3:d0:fe:e4:b5:fd:2e:e6: f6:bb:68:6b:93:67:ba:b4:41:d2:2f:ec:dd:81:20: 09:59:d2:46:21:7a:d5:82:c6:32:30:25:92:e7:25: 80:ff:39:fb:f9:75:27:5f:32:bf:d8:50:c4:0e:bb: c1:31:41:7d:b8:63:34:a6:f3:5e:b9:4d:16:1f:bc: 11:43:8e:2a:e2:15:cb:99:cf:82:b6:1d:b0:2b:10: 87:04:f4:d9:37:b6:a2:31:3f:d5:23:37:0c:c8:1f: 7c:79:d0:42:da:38:00:ac:f8:c5:fa:25:95:ab:f1: 02:ba:54:10:5f:ed:2b:2d:12:2c:0e:c1:f8:c2:d4: 3b:30:7a:c8:2d:06:8c:19:44:11:29:b9:ef:12:1d: 4b:cd:a8:7d:f1:42:12:d1:3b:d8:10:b6:31:0a:95: a3:2f:b7:67:0f:43:e5:83:dd:7b:68:2a:ba:03:56: c6:c1:3d:08:db:6a:24:d3:32:51:36:27:04:c9:50: c7:ac:d5:84:04:e2:69:43:1a:88:49:2f:4d:39:2f: 8d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:71:4E:0B:6F:29:97:EB:9E:35:1C:E8:06:CC:5C:49:56:B0:E8:5D X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:36:c8:0f:f6:c0:57:06:84:c0:e0:7c:f1:e7:89:c0:c2:f9: 7c:77:a4:50:00:37:7c:1a:aa:2b:02:91:1a:16:44:30:37:cf: 71:31:ce:49:e4:56:fe:bb:3b:ab:46:77:21:11:76:c9:e7:5c: 85:21:d3:ba:75:b4:5e:5d:fb:3f:be:c1:94:32:e4:3d:ba:64: 9d:60:2b:9a:dc:37:e7:3c:80:ef:68:67:c5:28:32:65:fd:b0: a8:e0:17:62:e8:a8:a1:c4:3b:87:bc:ca:e2:01:a9:f4:2e:6e: 6f:4f:a5:ad:fe:d9:6e:68:41:cf:b4:31:66:14:50:6e:03:30: c4:de:bb:6e:ec:50:99:66:b0:72:e3:0d:be:74:f4:70:00:10: 90:19:54:95:42:4b:1d:77:bf:4c:c3:b8:58:d1:47:f7:54:be: 6b:aa:0f:9d:c7:fb:e8:dd:e9:0b:0e:ca:82:e3:c5:83:25:73: b8:2a:ae:60:0f:0b:52:42:80:01:4c:d9:ea:cc:14:59:26:94: 57:68:53:e7:90:60:7d:8b:9c:69:72:d0:d2:61:08:23:7f:5f: b1:c2:d6:d4:67:6f:e2:7e:f7:d7:25:cc:1a:f2:48:2f:0d:a6: 06:6f:75:71:2d:db:3c:5a:71:ef:2f:e0:20:45:f1:16:d7:e2: c3:68:25:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZGNkJBMEI2RUQ2 Q0M0MUUxMEIwHhcNMjUxMDE5MDgyODU4WhcNMjUxMDI2MDgyODU4WjAYMRYwFAYD VQQDEw02OGY0YTE0YS03NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtK/mJDzz4BV5irdk4hI2/nIp6fqhz0/ghxi+yHbtgCVohaPftIra1oNwm/5Y QP0k/Uen89D+5LX9Lub2u2hrk2e6tEHSL+zdgSAJWdJGIXrVgsYyMCWS5yWA/zn7 +XUnXzK/2FDEDrvBMUF9uGM0pvNeuU0WH7wRQ44q4hXLmc+Cth2wKxCHBPTZN7ai MT/VIzcMyB98edBC2jgArPjF+iWVq/ECulQQX+0rLRIsDsH4wtQ7MHrILQaMGUQR KbnvEh1Lzah98UIS0TvYELYxCpWjL7dnD0Plg917aCq6A1bGwT0I22ok0zJRNicE yVDHrNWEBOJpQxqISS9NOS+NMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdxTgtv KZfrnjUc6AbMXElWsOhdMB8GA1UdIwQYMBaAFIGZSTrSZa0txzOW9roLbtbMQeEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREMzMi8wRjA5Mjg1NDVB REUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJTM0hNNWIydWd0dTFzeEI0 UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJT M0hNNWIydWd0dTFzeEI0UXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNNsgP9sBXBoTA4Hzx54nAwvl8d6RQADd8GqorApEaFkQwN89xMc5J 5Fb+uzurRnchEXbJ51yFIdO6dbReXfs/vsGUMuQ9umSdYCua3DfnPIDvaGfFKDJl /bCo4Bdi6KihxDuHvMriAan0Lm5vT6Wt/tluaEHPtDFmFFBuAzDE3rtu7FCZZrBy 4w2+dPRwABCQGVSVQksdd79Mw7hY0Uf3VL5rqg+dx/vo3ekLDsqC48WDJXO4Kq5g DwtSQoABTNnqzBRZJpRXaFPnkGB9i5xpctDSYQgjf1+xwtbUZ2/ifvfXJcwa8kgv DaYGb3VxLds8WnHvL+AgRfEW1+LDaCWS -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:19 2025 by rpki-client