$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: qopTTTpC3ka255qVFijssFHaV/iv/I3IVLIS8FUq4F4= Subject key identifier: 15:0F:CA:57:B9:B8:2D:CA:07:DC:61:45:AC:79:E6:E5:84:EF:21:D3 Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 3503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 34ED Signing time: Mon 20 Oct 2025 14:38:43 +0000 Manifest this update: Mon 20 Oct 2025 14:38:42 +0000 Manifest next update: Mon 27 Oct 2025 14:38:42 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: uoPXM99057gdKNJhBGlV80s+UFg752LHhQdMONqsvTo=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: 24BjWAqe2qRsQURE8DMBPNk7l6vHhbx1QB6qiJta7cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13571 (0x3503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Oct 20 14:38:42 2025 GMT Not After : Oct 27 14:38:42 2025 GMT Subject: CN=68f64972-be11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:f2:34:bd:de:85:ee:ef:ef:11:d3:47:33: da:2a:59:a6:7f:28:13:7c:c3:04:26:97:40:51:a6: 65:d0:b0:55:9a:d7:74:91:65:cb:37:67:4e:cc:7c: ff:12:77:08:35:bd:6e:4d:c9:6c:0b:12:eb:43:a8: 0a:7b:68:69:6b:53:c1:8c:da:d5:41:23:17:a5:9d: 3f:bc:21:8b:13:57:66:bb:c7:e6:9f:41:54:dd:5c: 4d:d1:72:c2:b8:92:ba:96:b3:af:52:1f:11:52:d7: 40:2d:bf:ea:93:da:6f:97:8f:35:24:58:82:9a:28: f1:85:13:81:e7:cd:e5:c4:89:7f:d3:93:70:e9:cc: fa:e9:b4:78:77:b5:b5:08:98:e2:21:31:86:20:fa: 3e:bc:22:35:e7:6d:af:64:be:72:60:0a:44:6a:e2: 46:d3:87:6b:3c:e1:04:63:4f:f2:a7:fa:1e:b6:b2: 7c:2d:4e:51:e0:35:d3:41:a6:f1:4e:0f:fb:f3:06: 75:ea:17:59:f1:41:fa:70:97:cd:62:e9:b6:cc:6f: 5c:d4:c7:49:af:ef:d8:e8:24:18:ae:96:3f:cc:04: 42:17:a2:95:46:a7:01:d1:16:af:a6:8c:a3:2b:42: 83:fb:d3:6e:c5:b7:bc:07:af:2f:42:b4:65:54:76: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0F:CA:57:B9:B8:2D:CA:07:DC:61:45:AC:79:E6:E5:84:EF:21:D3 X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:90:cd:fc:81:c0:6b:25:89:4b:4c:52:0b:2d:a7:86:26:8d: 02:6a:35:67:ff:f0:ea:39:eb:fa:ae:a1:16:92:53:16:a5:7e: 7f:c4:78:9f:99:57:ea:0c:05:49:5e:20:27:33:32:3b:3b:6b: 29:81:f1:5a:9c:cd:55:ac:1b:68:f2:4a:45:82:5a:f1:9b:1b: 1f:5d:5c:28:db:74:1b:d3:eb:52:f5:3f:c9:66:6c:86:43:4f: 72:e2:55:99:e5:0d:b5:3a:9c:e2:f8:e8:af:c2:66:91:b9:bd: 34:e7:d2:18:fc:b7:95:cd:c5:70:0b:2b:f8:8c:35:ab:68:38: 36:4c:af:c3:43:73:b9:3e:2e:4f:44:a1:e6:08:c0:81:0c:16: 7a:09:98:eb:22:46:b3:5a:69:a7:a8:8d:5c:83:d2:3d:0c:27: 55:a7:fa:4b:55:bd:c4:22:59:d0:c2:f1:29:72:6a:c5:5a:88: 2d:85:32:d8:3f:9d:d3:80:9b:65:44:22:c3:1a:98:84:4e:bc: e2:7e:3e:95:57:e8:7b:0d:d8:72:8f:9a:cc:96:fe:f6:9e:c9: d2:a9:03:d7:74:ad:f2:b6:0a:26:fc:d7:a2:61:7a:30:24:6d: c5:a0:3e:e0:9c:7b:0a:ab:5d:97:26:44:71:bc:5e:0b:f5:20: 03:c8:ce:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUxMDIwMTQzODQyWhcNMjUxMDI3MTQzODQyWjAYMRYwFAYD VQQDEw02OGY2NDk3Mi1iZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup/yNL3ehe7v7xHTRzPaKlmmfygTfMMEJpdAUaZl0LBVmtd0kWXLN2dOzHz/ EncINb1uTclsCxLrQ6gKe2hpa1PBjNrVQSMXpZ0/vCGLE1dmu8fmn0FU3VxN0XLC uJK6lrOvUh8RUtdALb/qk9pvl481JFiCmijxhROB583lxIl/05Nw6cz66bR4d7W1 CJjiITGGIPo+vCI1522vZL5yYApEauJG04drPOEEY0/yp/oetrJ8LU5R4DXTQabx Tg/78wZ16hdZ8UH6cJfNYum2zG9c1MdJr+/Y6CQYrpY/zARCF6KVRqcB0Ravpoyj K0KD+9Nuxbe8B68vQrRlVHZN0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUPyle5 uC3KB9xhRax55uWE7yHTMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPkM38gcBrJYlLTFILLaeGJo0CajVn//DqOev6rqEWklMWpX5/xHif mVfqDAVJXiAnMzI7O2spgfFanM1VrBto8kpFglrxmxsfXVwo23Qb0+tS9T/JZmyG Q09y4lWZ5Q21Opzi+OivwmaRub0059IY/LeVzcVwCyv4jDWraDg2TK/DQ3O5Pi5P RKHmCMCBDBZ6CZjrIkazWmmnqI1cg9I9DCdVp/pLVb3EIlnQwvEpcmrFWogthTLY P53TgJtlRCLDGpiETrzifj6VV+h7Ddhyj5rMlv72nsnSqQPXdK3ytgom/NeiYXow JG3FoD7gnHsKq12XJkRxvF4L9SADyM7R -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:14 2025 by rpki-client