$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: vi3E5vyzJ6PtXg7Ofb+OEOYsproxF5P67Ndc4L+RbPw= Subject key identifier: D2:A7:C3:D5:9C:62:F3:FA:63:D5:B2:76:62:35:E3:00:DD:14:77:CE Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: EA Signing time: Sun 19 Oct 2025 08:19:54 +0000 Manifest this update: Sun 19 Oct 2025 08:19:54 +0000 Manifest next update: Sun 26 Oct 2025 08:19:54 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: jaXuYRCRWW5GepgJa34KGgwLt3plm3YDlIiVHwHlYKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Oct 19 08:19:54 2025 GMT Not After : Oct 26 08:19:54 2025 GMT Subject: CN=68f49f2a-a636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:18:c0:e2:61:22:6d:28:f2:6c:64:e0:a1: 70:08:4e:22:4a:05:18:46:95:d5:a1:03:09:db:12: a6:33:9a:7d:cb:03:59:f2:c7:8a:7a:85:7e:5d:53: 20:21:e8:c7:85:d6:b5:82:33:c0:07:ba:5b:cb:ce: 36:d0:5d:18:27:96:38:bb:cd:60:eb:94:3c:f3:c3: 2b:ce:a0:c0:85:ed:0b:bc:39:07:d1:03:0b:26:99: 2d:fd:9a:4e:26:23:c0:1c:f4:d8:c0:d5:c1:c4:2b: 1e:3b:1d:ea:74:ef:fb:51:fb:44:83:8e:fc:4b:6a: 2a:de:c3:32:f2:c7:b7:b2:83:c6:df:5a:06:23:1a: af:b4:62:57:81:9a:02:16:c6:98:14:4f:4d:cc:09: 92:4b:f7:08:d5:c9:78:47:ce:33:53:2c:49:d3:78: e1:bd:79:33:d3:6e:68:15:97:24:29:4b:ff:89:3d: 9b:40:a3:0f:30:34:26:3c:b7:df:dd:d4:51:90:30: 7f:33:ed:8c:a1:1b:38:1b:1d:47:89:f7:18:7c:6b: f1:cf:3f:eb:e0:d9:79:12:c2:61:00:88:01:69:13: 1e:de:88:4b:09:e3:1c:ad:43:0d:50:c4:9b:4f:81: ae:3b:b2:ef:a0:e3:23:46:c5:b1:fa:28:02:df:01: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A7:C3:D5:9C:62:F3:FA:63:D5:B2:76:62:35:E3:00:DD:14:77:CE X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9a:6c:d1:6a:12:41:6a:9c:7e:05:0b:1d:ce:6e:d6:d5:4f: a9:bd:10:b1:41:60:47:3f:8d:07:98:d4:81:1a:2c:07:a4:ac: 58:53:ef:ea:06:29:c5:12:44:b2:00:3c:20:09:f1:9e:c5:d8: 58:74:a9:a6:a3:d3:9d:73:a6:8f:90:3d:43:e4:9e:0e:d0:3d: f0:97:19:06:12:19:88:84:fd:55:cc:3d:e5:2a:2b:b5:76:db: 1f:b9:6c:1a:19:e1:90:45:98:00:7a:e8:15:6d:10:28:d4:0d: b6:d1:cf:75:a1:46:5a:13:e8:d0:c8:bc:80:0b:04:0d:7e:14: 10:49:2f:91:e3:e4:56:a2:bc:7c:3b:51:23:ed:45:0d:e0:cb: 5f:83:4d:7e:25:a8:d3:07:67:f7:5d:2f:14:01:fe:fb:96:65: 44:d4:b2:99:d5:4c:af:59:79:0f:ea:cd:a6:99:af:83:b0:fc: 57:c3:38:86:2f:a0:6a:cb:fe:f7:02:3b:53:5a:6a:46:2d:3c: 99:9e:5d:c7:5c:a9:13:f4:99:fb:ba:49:5f:e0:4b:c1:a5:56: 59:6b:0f:96:1f:4f:5f:e2:dd:0b:48:2a:2c:c1:71:82:8d:d1: de:a6:6e:24:d3:6f:80:11:a8:6c:08:70:43:5c:ff:fc:e5:48: 35:70:c9:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjUxMDE5MDgxOTU0WhcNMjUxMDI2MDgxOTU0WjAYMRYwFAYD VQQDEw02OGY0OWYyYS1hNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDsYwOJhIm0o8mxk4KFwCE4iSgUYRpXVoQMJ2xKmM5p9ywNZ8seKeoV+XVMg IejHhda1gjPAB7pby8420F0YJ5Y4u81g65Q888MrzqDAhe0LvDkH0QMLJpkt/ZpO JiPAHPTYwNXBxCseOx3qdO/7UftEg478S2oq3sMy8se3soPG31oGIxqvtGJXgZoC FsaYFE9NzAmSS/cI1cl4R84zUyxJ03jhvXkz025oFZckKUv/iT2bQKMPMDQmPLff 3dRRkDB/M+2MoRs4Gx1HifcYfGvxzz/r4Nl5EsJhAIgBaRMe3ohLCeMcrUMNUMSb T4GuO7LvoOMjRsWx+igC3wGJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKnw9Wc YvP6Y9WydmI14wDdFHfOMB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhmmzRahJBapx+BQsdzm7W1U+pvRCxQWBHP40HmNSBGiwHpKxYU+/q BinFEkSyADwgCfGexdhYdKmmo9Odc6aPkD1D5J4O0D3wlxkGEhmIhP1VzD3lKiu1 dtsfuWwaGeGQRZgAeugVbRAo1A220c91oUZaE+jQyLyACwQNfhQQSS+R4+RWorx8 O1Ej7UUN4Mtfg01+JajTB2f3XS8UAf77lmVE1LKZ1UyvWXkP6s2mma+DsPxXwziG L6Bqy/73AjtTWmpGLTyZnl3HXKkT9Jn7uklf4EvBpVZZaw+WH09f4t0LSCoswXGC jdHepm4k02+AEahsCHBDXP/85Ug1cMnP -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:56 2025 by rpki-client