$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft File: GwdUmyUM_APdrXtURD2oOIkYEco.mft (raw, json) Hash identifier: zmUnyvYmLirWQXpfdYlRjDN+AaBcP4U3JwCtTLF95Lc= Subject key identifier: 18:A0:AC:AB:EE:4E:0B:58:87:A1:A0:E9:F2:69:31:2A:C2:D3:0E:AD Authority key identifier: 1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA Certificate issuer: /CN=A91D18AC/serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft Manifest number: B9 Signing time: Sun 19 Oct 2025 09:00:36 +0000 Manifest this update: Sun 19 Oct 2025 09:00:36 +0000 Manifest next update: Sun 26 Oct 2025 09:00:36 +0000 Files and hashes: 1: GwdUmyUM_APdrXtURD2oOIkYEco.crl (hash: jm206i+mOsUwDh+C5/2SveuqWJzF1CjZEo748168AmA=) 2: 34BA37F6976E11EFAEB6A258C4F9AE02.roa (hash: dMptlIu2hEGUJL7wHDTpb5B0NGrE6jX2dVguRw6q6C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D18AC, serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA Validity Not Before: Oct 19 09:00:36 2025 GMT Not After : Oct 26 09:00:36 2025 GMT Subject: CN=68f4a8b4-5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:0b:c7:6e:90:26:f2:d2:c7:d3:21:89:b0: 88:76:e3:93:d4:98:6b:87:c2:f2:52:da:af:06:11: cf:9c:62:74:11:9c:e9:28:15:08:31:21:fb:05:52: de:3d:bc:4f:4a:88:86:bc:e9:9c:79:07:65:6c:b4: 7a:e5:50:d2:83:dc:1c:ef:ba:b8:68:ea:e6:82:8e: cb:ef:25:f2:6d:8e:e8:d4:3e:4a:73:74:98:4a:b0: f3:26:9a:79:9a:37:4a:82:3f:32:91:9c:54:c4:d3: 81:53:83:69:12:b1:89:fe:8f:d7:eb:aa:a1:08:05: dc:7c:7b:d3:10:e2:af:0a:1f:8f:10:b6:d1:ee:7c: da:ca:6d:7f:ec:22:6f:5d:e4:13:a0:d7:29:e8:1e: d8:a0:02:83:7f:37:81:b3:42:da:6e:9f:18:a2:68: 2d:eb:1f:59:40:ee:dd:6f:a2:fd:99:f3:c8:4c:57: f1:51:9a:27:77:05:7a:ba:b9:bb:4d:45:a1:8f:77: f5:d5:76:95:26:05:fc:b0:2f:ac:ce:d5:e9:ad:cf: 1d:23:fc:0e:b2:df:0c:cd:75:18:bb:f1:04:a2:1d: cb:df:a1:c8:5c:6f:dc:31:90:70:c8:09:36:ce:d2: 4a:d3:6c:5d:82:62:f7:a0:d9:8f:08:1a:61:85:52: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A0:AC:AB:EE:4E:0B:58:87:A1:A0:E9:F2:69:31:2A:C2:D3:0E:AD X509v3 Authority Key Identifier: keyid:1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fb:e5:f0:79:c7:f9:09:04:b8:e0:56:64:9b:01:dc:2b:b4: a3:98:97:2c:dd:e5:f9:5f:7e:73:44:49:4f:f8:cf:3f:37:d0: 3f:e6:82:4e:a6:46:0d:52:59:6c:fd:db:f8:6e:bc:8e:f9:e7: 39:62:0e:61:06:8e:ca:48:aa:fe:fb:e7:75:58:5e:4d:d5:47: d8:4f:0c:4a:93:eb:9f:cd:5e:ac:3c:52:1a:4a:3e:ca:7a:9a: 76:db:4f:c6:9b:1f:77:f3:f4:26:56:31:23:ce:44:c7:be:b2: a1:52:30:4e:f3:6e:91:f7:b5:a6:a2:e9:05:13:12:3e:b9:97: bc:8e:4d:7a:c5:eb:53:87:57:06:9c:34:b8:e9:cd:5d:70:88: f0:5b:94:7f:4e:ad:b8:6a:c2:55:a3:6c:50:9a:b9:8d:60:7f: 8a:4b:b3:66:0a:4c:35:74:d8:98:ea:ae:4f:31:63:42:46:02: 9a:95:83:ca:a2:13:5b:ac:db:f5:34:16:93:66:ba:3c:32:10: 75:6a:77:19:b3:48:88:f1:bb:16:46:4c:0f:5c:05:8b:b9:06: e9:f2:01:19:43:6f:50:b0:8f:c0:79:c3:89:9a:8e:35:37:a1: 94:ba:0a:f1:38:04:eb:e4:8a:e8:a5:0d:77:a5:e4:f9:fd:0d: 78:18:5e:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE4QUMxMTAvBgNVBAUTKDFCMDc1NDlCMjUwQ0ZDMDNEREFEN0I1NDQ0M0RBODM4 ODkxODExQ0EwHhcNMjUxMDE5MDkwMDM2WhcNMjUxMDI2MDkwMDM2WjAYMRYwFAYD VQQDEw02OGY0YThiNC01NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AcLx26QJvLSx9MhibCIduOT1Jhrh8LyUtqvBhHPnGJ0EZzpKBUIMSH7BVLe PbxPSoiGvOmceQdlbLR65VDSg9wc77q4aOrmgo7L7yXybY7o1D5Kc3SYSrDzJpp5 mjdKgj8ykZxUxNOBU4NpErGJ/o/X66qhCAXcfHvTEOKvCh+PELbR7nzaym1/7CJv XeQToNcp6B7YoAKDfzeBs0Labp8Yomgt6x9ZQO7db6L9mfPITFfxUZondwV6urm7 TUWhj3f11XaVJgX8sC+sztXprc8dI/wOst8MzXUYu/EEoh3L36HIXG/cMZBwyAk2 ztJK02xdgmL3oNmPCBphhVI1ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBigrKvu TgtYh6Gg6fJpMSrC0w6tMB8GA1UdIwQYMBaAFBsHVJslDPwD3a17VEQ9qDiJGBHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMThBQy9ENEJBM0Q5ODk2 Q0MxMUVGOEVGQ0I4NDlDNEY5QUUwMi9Hd2RVbXlVTV9BUGRyWHRVUkQyb09Ja1lF Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3ZFVteVVNX0FQZHJYdFVSRDJvT0lrWUVjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MThBQy9ENEJBM0Q5ODk2Q0MxMUVGOEVGQ0I4NDlDNEY5QUUwMi9Hd2RVbXlVTV9B UGRyWHRVUkQyb09Ja1lFY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS++Xwecf5CQS44FZkmwHcK7SjmJcs3eX5X35zRElP+M8/N9A/5oJO pkYNUlls/dv4bryO+ec5Yg5hBo7KSKr+++d1WF5N1UfYTwxKk+ufzV6sPFIaSj7K epp220/Gmx938/QmVjEjzkTHvrKhUjBO826R97WmoukFExI+uZe8jk16xetTh1cG nDS46c1dcIjwW5R/Tq24asJVo2xQmrmNYH+KS7NmCkw1dNiY6q5PMWNCRgKalYPK ohNbrNv1NBaTZro8MhB1ancZs0iI8bsWRkwPXAWLuQbp8gEZQ29QsI/AecOJmo41 N6GUugrxOATr5IropQ13peT5/Q14GF6z -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:36 2025 by rpki-client