$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json) Hash identifier: KtIy8QZ74PdHovQhq2j9n1nKGDyNMGZEsZWLAYZFRNg= Subject key identifier: FC:29:40:2F:91:BE:7C:87:0C:BA:BC:FD:4C:D9:8A:BE:63:16:06:61 Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft Manifest number: 1C42 Signing time: Sat 18 Oct 2025 16:30:41 +0000 Manifest this update: Sat 18 Oct 2025 16:30:40 +0000 Manifest next update: Sat 25 Oct 2025 16:30:40 +0000 Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: lKL9BWyiqQOD7ihiIBGMsNw70Cv6LnW0ShwVI5Qsx4s=) 2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: 87Eagj9nbEvxROvw6iIl3FH0KdIVxp+aZzvllNFI0J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7245 (0x1c4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Oct 18 16:30:40 2025 GMT Not After : Oct 25 16:30:40 2025 GMT Subject: CN=68f3c0b1-3939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:63:1e:b5:a6:93:60:e9:09:3a:4a:8b:a4: b5:cd:a7:bd:d5:19:16:4c:21:0b:97:98:20:82:9d: b4:a3:45:dc:7a:b8:97:e7:a1:4b:a9:83:b0:f4:90: 01:1d:40:af:e8:e1:da:88:70:03:f4:c3:e7:b5:dc: 67:d0:d5:d1:4c:7d:ab:98:ad:c3:d7:3d:f8:51:91: e4:39:57:ea:66:ed:53:4d:93:b6:0e:43:d2:d6:cf: b1:20:ee:8c:14:e8:7a:12:dd:c4:51:a4:6e:61:ba: f8:b3:d2:e3:18:62:5d:0d:d4:e2:1e:07:19:63:ae: ee:f0:00:98:9a:5b:9f:fe:83:48:b4:9a:d0:60:5f: 0d:d3:fd:18:f2:c8:c8:0c:6b:b3:d2:c7:45:f3:3e: 80:36:99:99:a6:3f:86:6b:3c:7c:52:4e:7a:77:60: 4a:98:32:1c:ca:75:65:06:90:37:36:59:3e:3b:33: af:85:43:1a:71:ee:20:4e:ca:5f:3b:6f:a2:13:85: 45:48:64:e4:77:f5:2b:db:0b:5f:1b:03:5a:95:cb: d0:8d:6a:35:6b:97:e3:d0:51:20:96:d8:07:5d:b6: f8:ec:6a:ff:92:31:1f:ec:d9:d5:79:63:f8:1b:54: 95:11:a2:47:e9:32:2b:db:d8:cf:9f:f7:58:5e:1c: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:29:40:2F:91:BE:7C:87:0C:BA:BC:FD:4C:D9:8A:BE:63:16:06:61 X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:97:e4:82:61:3b:4d:45:ee:50:25:99:b5:c4:65:5e:56:23: ad:47:fe:2c:d4:d1:da:02:37:95:40:f7:e5:02:f1:66:4f:86: ed:65:c8:c7:46:ae:6c:fa:6b:12:2c:b3:ba:f8:91:d4:5b:f1: a6:f6:36:b2:e1:bd:53:11:f2:b0:fb:5a:ba:22:01:7e:22:bc: 2c:12:83:82:46:23:46:75:7a:56:c4:9d:be:60:c8:e8:9f:0a: 53:c0:c8:6d:b3:80:a9:5c:2b:50:dd:73:d6:f0:ef:c1:32:80: a6:27:e6:51:95:28:8c:f3:30:0c:9f:9e:6c:86:fa:6e:3b:80: 46:92:db:20:5f:4e:ea:89:dc:15:44:7c:ef:36:a3:86:c5:b5: 3c:63:fc:69:72:36:ed:a5:4e:20:ab:79:38:76:11:d9:3e:6e: 9d:ff:d5:c2:0e:05:c5:d0:0d:34:2a:6d:a8:b6:5f:47:7b:56: 13:a6:76:0f:b3:d7:c1:a5:d8:0e:6f:1d:f7:c0:74:a3:4a:ed: c3:e7:e7:c2:f3:77:da:30:80:82:14:2c:63:a2:20:a0:65:43: e1:d7:12:1f:51:d5:05:dd:70:c0:a8:b4:27:50:90:27:4f:b8: e1:6f:1c:3b:2e:09:64:08:4a:f9:d5:6d:65:8d:63:f0:ff:3e: 99:fc:80:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjUxMDE4MTYzMDQwWhcNMjUxMDI1MTYzMDQwWjAYMRYwFAYD VQQDEw02OGYzYzBiMS0zOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I9jHrWmk2DpCTpKi6S1zae91RkWTCELl5gggp20o0XceriX56FLqYOw9JAB HUCv6OHaiHAD9MPntdxn0NXRTH2rmK3D1z34UZHkOVfqZu1TTZO2DkPS1s+xIO6M FOh6Et3EUaRuYbr4s9LjGGJdDdTiHgcZY67u8ACYmluf/oNItJrQYF8N0/0Y8sjI DGuz0sdF8z6ANpmZpj+Gazx8Uk56d2BKmDIcynVlBpA3Nlk+OzOvhUMace4gTspf O2+iE4VFSGTkd/Ur2wtfGwNalcvQjWo1a5fj0FEgltgHXbb47Gr/kjEf7NnVeWP4 G1SVEaJH6TIr29jPn/dYXhwVTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwpQC+R vnyHDLq8/UzZir5jFgZhMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq d2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwl+SCYTtNRe5QJZm1xGVeViOtR/4s1NHaAjeVQPflAvFmT4btZcjH Rq5s+msSLLO6+JHUW/Gm9jay4b1TEfKw+1q6IgF+IrwsEoOCRiNGdXpWxJ2+YMjo nwpTwMhts4CpXCtQ3XPW8O/BMoCmJ+ZRlSiM8zAMn55shvpuO4BGktsgX07qidwV RHzvNqOGxbU8Y/xpcjbtpU4gq3k4dhHZPm6d/9XCDgXF0A00Km2otl9He1YTpnYP s9fBpdgObx33wHSjSu3D5+fC83faMICCFCxjoiCgZUPh1xIfUdUF3XDAqLQnUJAn T7jhbxw7LglkCEr51W1ljWPw/z6Z/IDd -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:01 2025 by rpki-client