$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: tWon7feD16jbmZ1PnDuTO+kThloMZKemgNCekWAorHs= Subject key identifier: 78:29:CA:80:55:7D:97:89:AE:4F:E6:C6:8E:93:3E:14:A4:66:B9:6B Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: 0121 Signing time: Sun 19 Oct 2025 07:36:23 +0000 Manifest this update: Sun 19 Oct 2025 07:36:22 +0000 Manifest next update: Sun 26 Oct 2025 07:36:22 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: DSJOwjzl55TETaemg3GrFzKWPtIO3kr2H3r1Glf46Mw=) 2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=) 4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Oct 19 07:36:22 2025 GMT Not After : Oct 26 07:36:22 2025 GMT Subject: CN=68f494f7-59c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:84:6c:2c:7a:cc:cd:fe:a0:1a:cb:d3:7c: 4a:13:7c:7e:d0:25:7e:e7:e2:9e:d8:d2:42:3c:db: 6d:da:43:df:94:15:fe:f8:85:58:38:ef:f7:d0:29: e1:89:9b:05:02:8a:8b:bd:ae:fc:e3:7a:41:8c:54: e0:e7:fc:bd:16:dc:14:1a:9f:33:20:e3:5c:ee:0a: ec:37:22:9b:d5:90:a9:20:61:1f:ac:bf:f2:19:36: 40:43:cb:79:41:c7:18:04:01:63:0b:98:16:77:b8: 7c:90:db:cc:cf:46:a2:59:72:6b:37:bc:7a:00:93: 59:f8:e7:0e:4c:c1:ef:77:b2:8b:9d:40:e1:84:1c: fc:d2:0a:25:36:41:fe:45:1e:db:8e:39:47:25:a0: 3b:6b:b9:48:b2:a4:7f:9d:78:65:3d:39:a6:aa:e8: fd:7e:8e:e5:95:d3:d6:75:c3:40:86:fc:d2:b5:1e: 86:ab:9a:ff:5c:55:1f:31:08:0d:71:55:da:14:a5: ea:16:ac:19:ad:87:49:0b:19:e5:a7:03:56:12:4a: 63:03:ed:91:e4:0d:d4:de:2c:ec:7b:c1:b0:cb:bd: fe:0d:b6:21:80:c4:d4:5d:4f:2e:4b:8f:2c:be:60: 2b:02:ec:ff:93:ce:a5:9f:4a:08:29:eb:53:54:97: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:29:CA:80:55:7D:97:89:AE:4F:E6:C6:8E:93:3E:14:A4:66:B9:6B X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:0a:e2:f7:c0:34:c5:4b:6d:f1:08:d9:c4:d7:e1:c2:9f:3e: 62:d6:b5:12:dc:1e:68:c5:2f:d9:d6:69:ec:42:2d:33:03:4a: c0:17:49:8a:45:92:a3:c1:69:a6:06:7c:bd:32:2e:4d:c0:b2: 32:78:b2:bd:f7:2e:3d:69:a4:3d:36:bf:c9:b8:1c:3a:5c:d0: dd:a7:da:60:e3:9b:2a:5e:87:ec:29:8f:61:5e:e2:10:04:1d: 3a:a7:ab:40:4d:98:f0:28:cb:86:ef:8f:73:0d:63:dd:b2:77: e7:31:15:4f:af:97:15:5e:33:a5:2a:79:a9:a8:ff:69:1d:1c: cd:94:b3:87:a0:ed:19:5c:cc:f0:bf:14:41:14:a5:a6:61:e8: e7:0d:c6:3c:4c:58:27:a3:0d:c6:8f:73:2a:6e:2c:78:12:47: 2f:7b:09:6d:54:f1:1e:c9:a6:9f:f0:4f:43:28:05:e4:3c:ee: 45:e1:75:9a:73:e2:74:68:be:4c:5a:85:44:29:0d:30:1d:99: 4a:07:fc:cd:0b:24:e7:a7:19:1e:8b:3a:12:fd:92:8f:12:31: 0d:e7:ff:2e:38:65:88:40:d2:d0:7e:00:7a:89:49:50:68:f8: bb:4d:48:02:27:33:f9:8f:cf:fd:1c:3f:d5:ff:40:aa:7d:e9: 57:4e:20:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5MzExMTAvBgNVBAUTKDE5OEM0MzY0Q0YwMzJDNzMwRDk1ODU4MzQ5ODIwOTZE NTBBNzUyQzkwHhcNMjUxMDE5MDczNjIyWhcNMjUxMDI2MDczNjIyWjAYMRYwFAYD VQQDEw02OGY0OTRmNy01OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmviEbCx6zM3+oBrL03xKE3x+0CV+5+Ke2NJCPNtt2kPflBX++IVYOO/30Cnh iZsFAoqLva7843pBjFTg5/y9FtwUGp8zIONc7grsNyKb1ZCpIGEfrL/yGTZAQ8t5 QccYBAFjC5gWd7h8kNvMz0aiWXJrN7x6AJNZ+OcOTMHvd7KLnUDhhBz80golNkH+ RR7bjjlHJaA7a7lIsqR/nXhlPTmmquj9fo7lldPWdcNAhvzStR6Gq5r/XFUfMQgN cVXaFKXqFqwZrYdJCxnlpwNWEkpjA+2R5A3U3izse8Gwy73+DbYhgMTUXU8uS48s vmArAuz/k86ln0oIKetTVJeXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgpyoBV fZeJrk/mxo6TPhSkZrlrMB8GA1UdIwQYMBaAFBmMQ2TPAyxzDZWFg0mCCW1Qp1LJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzkzMS80QTI1QjZBMEY1 NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExITU5sWVdEU1lJSmJWQ25V c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9HWXhEWk04RExI TU5sWVdEU1lJSmJWQ25Vc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2CuL3wDTFS23xCNnE1+HCnz5i1rUS3B5oxS/Z1mnsQi0zA0rAF0mK RZKjwWmmBny9Mi5NwLIyeLK99y49aaQ9Nr/JuBw6XNDdp9pg45sqXofsKY9hXuIQ BB06p6tATZjwKMuG749zDWPdsnfnMRVPr5cVXjOlKnmpqP9pHRzNlLOHoO0ZXMzw vxRBFKWmYejnDcY8TFgnow3Gj3Mqbix4EkcvewltVPEeyaaf8E9DKAXkPO5F4XWa c+J0aL5MWoVEKQ0wHZlKB/zNCyTnpxkeizoS/ZKPEjEN5/8uOGWIQNLQfgB6iUlQ aPi7TUgCJzP5j8/9HD/V/0CqfelXTiDQ -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:24 2025 by rpki-client