$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: pTs3Ux1fPj3IWIshTZDKrvAfd2cy5EGRZ3Z9MUXjheU= Subject key identifier: B8:7B:C8:2F:20:79:CC:51:91:2E:EB:A7:EA:67:85:8A:F9:F1:CF:20 Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 6E Signing time: Sun 19 Oct 2025 10:27:30 +0000 Manifest this update: Sun 19 Oct 2025 10:27:30 +0000 Manifest next update: Sun 26 Oct 2025 10:27:30 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: K522HtEwcp27NkNrxm8BOwCG4Yd6CnkvsC0OJys+hMU=) 2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=) 3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=) 4: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=) 5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=) 6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=) 7: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=) 8: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=) 9: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=) 10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: Oct 19 10:27:30 2025 GMT Not After : Oct 26 10:27:30 2025 GMT Subject: CN=68f4bd12-e30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2f:ee:fb:e4:3b:db:20:af:50:fd:2d:5b:e6: 3d:1c:8c:71:33:3e:d7:4f:3d:55:37:89:d2:f6:e2: 2d:7f:02:43:f8:22:9b:2c:73:a2:f3:73:81:43:53: 21:a5:71:2a:b1:99:5d:2b:9d:80:6e:0c:3b:73:b0: 1d:e1:83:af:30:3c:0f:db:6f:4f:72:d0:5e:8a:6b: 5c:ed:d7:f5:62:dd:c0:3a:c4:aa:e0:2d:7c:b6:05: ca:92:d1:d4:9f:6b:e7:c4:8d:66:a9:d5:97:1d:ae: e3:d0:62:d6:8f:c9:9e:cd:83:85:fe:ac:dc:9f:aa: b7:7b:99:07:50:36:45:e7:0d:90:7a:6a:eb:38:f5: aa:77:09:f3:c1:2d:97:68:e9:ac:97:fe:26:77:20: c0:ae:98:6e:cb:00:e1:13:4c:a2:53:f0:a3:4d:8c: 94:04:8e:ad:69:ee:4f:1b:41:d2:5e:0b:47:62:42: 4f:25:c2:db:80:20:63:0d:b9:71:32:e7:40:34:d3: c4:b5:64:6e:47:cf:4a:f9:61:99:1e:c5:2c:c5:fe: c1:86:b1:4d:72:00:97:f5:3c:90:59:a9:09:f5:18: 34:bd:53:d8:2a:bc:fb:0d:12:f5:49:96:2d:3d:30: f7:dd:7e:42:ee:a8:3a:0a:49:45:86:f1:60:9f:b7: 10:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:C8:2F:20:79:CC:51:91:2E:EB:A7:EA:67:85:8A:F9:F1:CF:20 X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:f5:ab:3b:81:53:0b:b0:ea:88:14:d9:4f:16:32:c3:a5:ac: 0b:6a:5f:39:1f:d6:ef:b1:45:ea:db:91:fc:0c:b5:41:7d:e0: 02:6e:03:78:c2:0b:e0:7a:77:6d:81:66:b5:fd:97:3e:b2:1d: 57:ad:4f:a8:f0:ed:41:cc:f0:eb:8e:d8:c4:63:eb:5a:0b:68: e0:28:54:d8:35:49:c1:bc:00:77:e2:70:0f:69:eb:29:79:44: fc:07:d1:84:aa:60:a0:18:16:c4:e4:85:08:94:15:43:ce:a5: 52:16:13:c9:26:c0:15:dc:a9:5c:d7:f4:d3:4a:c2:1f:a5:74: 98:d1:66:36:56:a2:b1:9b:c5:11:39:b5:aa:4d:e3:a2:52:c0: 38:6b:4e:ad:22:54:46:a5:3f:f7:ec:b9:00:b1:a7:da:eb:2c: 2e:00:bd:90:6a:59:16:dc:5a:32:67:fd:63:f0:51:ef:f1:8f: 00:03:9b:67:c6:58:e0:5b:d3:02:7c:bb:b4:43:67:51:3f:6e: 73:49:d0:fb:1f:72:51:17:88:e5:ae:69:c1:85:b0:d9:4a:86: f4:a4:e3:35:74:35:c6:91:f0:37:6f:c2:5a:d7:85:4a:4a:22: 03:aa:93:bc:b8:d4:10:89:9f:ca:e2:2f:25:60:c3:ff:a4:5a: 59:e9:08:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0M0YxMTAvBgNVBAUTKDE4OTY3RENEQjcyNEE4NEE3MTcxMUU2NzhBQUIxRDJF NzIyMTVENkMwHhcNMjUxMDE5MTAyNzMwWhcNMjUxMDI2MTAyNzMwWjAYMRYwFAYD VQQDEw02OGY0YmQxMi1lMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2S/u++Q72yCvUP0tW+Y9HIxxMz7XTz1VN4nS9uItfwJD+CKbLHOi83OBQ1Mh pXEqsZldK52Abgw7c7Ad4YOvMDwP229PctBeimtc7df1Yt3AOsSq4C18tgXKktHU n2vnxI1mqdWXHa7j0GLWj8mezYOF/qzcn6q3e5kHUDZF5w2QemrrOPWqdwnzwS2X aOmsl/4mdyDArphuywDhE0yiU/CjTYyUBI6tae5PG0HSXgtHYkJPJcLbgCBjDblx MudANNPEtWRuR89K+WGZHsUsxf7BhrFNcgCX9TyQWakJ9Rg0vVPYKrz7DRL1SZYt PTD33X5C7qg6CklFhvFgn7cQawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh7yC8g ecxRkS7rp+pnhYr58c8gMB8GA1UdIwQYMBaAFBiWfc23JKhKcXEeZ4qrHS5yIV1s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQzRi9ENjg0RkMyRTFB OEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi9HSlo5emJja3FFcHhjUjVuaXFzZExuSWhY V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjQzRi9ENjg0RkMyRTFBOEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi9HSlo5emJja3FF cHhjUjVuaXFzZExuSWhYV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP9as7gVMLsOqIFNlPFjLDpawLal85H9bvsUXq25H8DLVBfeACbgN4 wgvgendtgWa1/Zc+sh1XrU+o8O1BzPDrjtjEY+taC2jgKFTYNUnBvAB34nAPaesp eUT8B9GEqmCgGBbE5IUIlBVDzqVSFhPJJsAV3Klc1/TTSsIfpXSY0WY2VqKxm8UR ObWqTeOiUsA4a06tIlRGpT/37LkAsafa6ywuAL2QalkW3FoyZ/1j8FHv8Y8AA5tn xljgW9MCfLu0Q2dRP25zSdD7H3JRF4jlrmnBhbDZSob0pOM1dDXGkfA3b8Ja14VK SiIDqpO8uNQQiZ/K4i8lYMP/pFpZ6Qh3 -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:11 2025 by rpki-client