$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft File: gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json) Hash identifier: B3aLTZzxTe2BYv/dumXDEkSW3z3pVABPnUsFfT9GXg0= Subject key identifier: 17:15:7D:83:BF:73:B6:F8:F6:C2:16:FA:A1:0A:42:95:C1:B1:53:43 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft Manifest number: 0572 Signing time: Sun 19 Oct 2025 01:00:50 +0000 Manifest this update: Sun 19 Oct 2025 01:00:49 +0000 Manifest next update: Sun 26 Oct 2025 01:00:49 +0000 Files and hashes: 1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: ggk/rhRTRoi3zu4pR9c+bxCe8zxQk8IOdasg4yHsfB4=) 2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: KrqWlA/SDiqH7tPY3/giTqCFhbQU+NxKtLCfFdknyhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Oct 19 01:00:49 2025 GMT Not After : Oct 26 01:00:49 2025 GMT Subject: CN=68f43841-8dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:67:d1:e3:cf:e9:0b:e4:68:73:4e:4c:25: eb:4a:dd:24:c8:25:af:b8:37:9d:91:23:35:87:2d: 1a:e9:6d:88:6a:95:17:e4:e0:c8:4a:b1:83:74:1b: de:cb:c4:1e:3d:77:50:69:00:d5:1a:9b:12:4b:72: 4c:fa:1c:fc:88:d0:9c:2c:ab:0f:97:20:ce:40:96: 94:f5:d1:bc:8c:14:06:ea:ab:41:01:d7:17:66:09: 1e:f5:d0:37:bd:ed:cc:c3:15:a6:3d:7b:3f:f5:ba: db:1d:f4:f8:36:bf:3e:39:54:d6:82:1c:53:a2:02: 47:dd:00:7a:b5:87:e1:9e:f5:92:7d:70:52:63:9e: 95:df:1c:34:62:bd:67:0d:33:5f:23:b3:7c:fa:5f: cf:5c:e4:d0:75:cf:19:b4:14:61:11:36:7e:2a:80: 1a:c6:a9:cf:f1:b3:4f:b9:df:71:64:22:52:a2:fb: aa:98:03:3c:63:75:e5:2e:4c:ee:68:3b:51:96:af: 60:06:78:a7:81:4e:b2:e0:0f:16:45:5d:9b:8d:ab: 06:60:b4:fd:c9:56:56:a1:01:ea:cc:8d:a1:5c:aa: e0:71:cf:3a:14:32:96:b0:ce:dd:74:c7:d5:e7:21: da:ca:4d:23:5f:1c:97:6d:60:ab:72:1f:94:ac:4e: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:7D:83:BF:73:B6:F8:F6:C2:16:FA:A1:0A:42:95:C1:B1:53:43 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b5:67:3c:a8:9d:44:4b:40:40:e9:fd:49:2e:8b:72:c5:1a: 0b:e6:29:ef:ac:ee:ae:7b:0b:5d:01:00:08:28:61:3c:fd:88: 62:fe:f8:de:e3:5d:5d:7c:42:45:01:a6:77:be:31:99:b3:c1: 1d:e3:4e:39:0a:b8:67:84:49:6f:d9:ff:c7:26:93:c6:80:90: 7f:76:b8:b2:37:53:f2:fb:a8:06:39:7d:26:47:16:8b:3a:9b: 0f:39:a2:7b:ac:bf:f1:f8:fc:a3:c3:8f:bc:ce:cb:ce:25:3c: e4:96:db:af:6a:ec:13:0b:3d:80:9b:44:d9:53:a4:d5:d1:37: f0:a8:48:89:f2:c2:99:0d:38:9a:c8:98:2d:9b:76:98:af:dd: 55:0b:91:fb:2b:17:d2:c3:31:a0:e2:73:69:19:36:40:ab:e1: 71:50:1f:0b:a2:51:96:f4:f1:47:a0:84:89:56:84:ab:92:2f: 59:75:ad:d5:6d:ba:8d:35:f2:03:b8:0e:9f:8e:6f:b6:80:ce: ba:01:0d:e8:c6:02:ba:89:e4:db:89:4e:38:a7:68:4c:6d:d0: 57:c3:17:e0:12:73:62:03:97:84:bc:d9:be:e6:d5:6e:61:c5: 23:43:51:d8:68:66:9f:54:cd:ba:ae:df:2e:7d:c4:3a:df:b1: 2e:3b:e0:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUxMDE5MDEwMDQ5WhcNMjUxMDI2MDEwMDQ5WjAYMRYwFAYD VQQDEw02OGY0Mzg0MS04ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLdn0ePP6QvkaHNOTCXrSt0kyCWvuDedkSM1hy0a6W2IapUX5ODISrGDdBve y8QePXdQaQDVGpsSS3JM+hz8iNCcLKsPlyDOQJaU9dG8jBQG6qtBAdcXZgke9dA3 ve3MwxWmPXs/9brbHfT4Nr8+OVTWghxTogJH3QB6tYfhnvWSfXBSY56V3xw0Yr1n DTNfI7N8+l/PXOTQdc8ZtBRhETZ+KoAaxqnP8bNPud9xZCJSovuqmAM8Y3XlLkzu aDtRlq9gBningU6y4A8WRV2bjasGYLT9yVZWoQHqzI2hXKrgcc86FDKWsM7ddMfV 5yHayk0jXxyXbWCrch+UrE7TlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcVfYO/ c7b49sIW+qEKQpXBsVNDMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNDNy83QjJGNTM4QUZFNjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNC SzM1OEp6RGRCZ2ZoRGJnUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBztWc8qJ1ES0BA6f1JLotyxRoL5invrO6uewtdAQAIKGE8/Yhi/vje 411dfEJFAaZ3vjGZs8Ed4045CrhnhElv2f/HJpPGgJB/driyN1Py+6gGOX0mRxaL OpsPOaJ7rL/x+Pyjw4+8zsvOJTzkltuvauwTCz2Am0TZU6TV0TfwqEiJ8sKZDTia yJgtm3aYr91VC5H7KxfSwzGg4nNpGTZAq+FxUB8LolGW9PFHoISJVoSrki9Zda3V bbqNNfIDuA6fjm+2gM66AQ3oxgK6ieTbiU44p2hMbdBXwxfgEnNiA5eEvNm+5tVu YcUjQ1HYaGafVM26rt8ufcQ637EuO+Cf -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:41 2025 by rpki-client