$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: eym+sgpUvsWze2ASeKd4dZ+Dk3qpQ/322cdUwiQidSc= Subject key identifier: BB:E3:F8:64:D7:CF:D0:C4:3E:72:21:45:07:5B:44:BC:36:4A:84:FF Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1A49 Signing time: Sat 18 Oct 2025 16:42:49 +0000 Manifest this update: Sat 18 Oct 2025 16:42:49 +0000 Manifest next update: Sat 25 Oct 2025 16:42:49 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: ExryFoBPO0hTml4UpWgUACp4b0hkVFe8M4pCOexpW8U=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: GKqNBD5V71h0LJHoO121osmAczldGj86vre7flmyl/s=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: byvxwIxUmbdh0bP7R33Ns0I16OD6QTEmSRLJ7M5XZ6s=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: eoxU71y8QTEqx+M0m1aW0+InRIR2E5b4rwucrZ2tLw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6766 (0x1a6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Oct 18 16:42:49 2025 GMT Not After : Oct 25 16:42:49 2025 GMT Subject: CN=68f3c389-1cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:20:4a:24:d2:ed:bf:7d:a9:b3:25:38:e2:6d: f4:bd:ad:13:f6:57:94:85:f0:ef:de:a6:07:2e:05: 2b:ac:c2:fd:2b:c1:8a:ee:2e:1b:12:84:68:30:c8: dc:69:49:e8:df:f7:10:b3:7e:dc:8b:d9:ee:b6:b2: 3c:2f:d8:a7:b0:5d:c0:ce:bd:e9:db:73:44:65:d6: db:71:7e:83:c4:28:7c:db:ca:ab:c3:32:d7:e5:f3: 8c:d2:71:d9:76:39:d0:f6:2b:ef:85:77:df:d4:3e: 82:61:47:d7:00:30:74:a7:3c:d9:93:15:30:5a:04: db:f1:c7:4e:e1:c8:39:27:b5:0a:d8:5a:da:d0:b4: 93:13:88:61:2c:ce:60:f6:26:76:46:63:31:f9:ef: 35:9c:44:50:66:89:5c:c9:e0:4f:95:23:34:fe:00: 78:8f:fe:c2:22:96:e9:5e:55:3f:2a:fc:f5:47:db: 5e:49:e1:8f:2d:c1:34:87:6c:ac:6c:24:a6:86:d6: 8f:f5:cf:7b:45:37:5b:fd:3f:04:2a:4a:cd:b6:00: 0e:e2:de:2c:f2:e3:99:17:d6:da:06:bd:f8:8f:16: f7:bc:48:29:53:b7:fc:6b:1f:de:d8:df:fb:21:66: dc:8d:33:37:6a:cf:e0:8b:9e:e3:9f:a0:32:82:3f: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E3:F8:64:D7:CF:D0:C4:3E:72:21:45:07:5B:44:BC:36:4A:84:FF X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:01:bf:2e:2c:99:fb:59:29:b9:c8:22:a1:e4:37:f3:1c:a2: 72:1f:aa:1d:e0:a6:ac:12:23:7f:40:26:a5:22:68:f1:15:74: 61:85:40:49:7f:7e:a4:49:2b:2b:63:17:bd:5f:0d:f6:e7:5b: d8:88:6c:3e:bb:97:b5:09:07:a3:a0:0e:81:54:93:38:63:d9: b3:e3:ba:a5:f9:f6:37:82:27:b0:bd:a0:d0:90:16:7c:c3:1b: 59:31:77:6f:9c:4e:d7:8d:3f:6d:92:8a:f2:0d:eb:48:3f:8a: 63:a6:ad:cf:c0:c5:bc:e8:55:ab:22:18:a8:70:7f:3a:6e:53: 1e:e0:b7:8f:51:b7:16:9c:30:59:0c:de:8d:b3:f8:2f:60:04: ec:85:cb:11:0d:03:1d:25:7b:12:b2:e3:b7:74:55:71:46:76: cd:7d:9d:d8:88:00:ab:28:e9:69:04:ea:51:a6:6d:fa:96:e3: fe:7d:87:98:0f:22:30:5f:4a:bd:1d:02:e7:3a:85:ed:08:15: 46:51:b1:cb:48:0d:f2:1c:7f:3f:b4:4a:06:04:ca:53:c2:fe: 82:ef:a9:ff:50:58:8e:1c:e9:c6:82:73:07:32:8e:ff:5f:a0: 75:b5:1a:3e:cf:3c:bb:5c:ea:07:01:e0:3d:10:65:87:b2:40: e8:f0:ae:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUxMDE4MTY0MjQ5WhcNMjUxMDI1MTY0MjQ5WjAYMRYwFAYD VQQDEw02OGYzYzM4OS0xY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CBKJNLtv32psyU44m30va0T9leUhfDv3qYHLgUrrML9K8GK7i4bEoRoMMjc aUno3/cQs37ci9nutrI8L9insF3Azr3p23NEZdbbcX6DxCh828qrwzLX5fOM0nHZ djnQ9ivvhXff1D6CYUfXADB0pzzZkxUwWgTb8cdO4cg5J7UK2Fra0LSTE4hhLM5g 9iZ2RmMx+e81nERQZolcyeBPlSM0/gB4j/7CIpbpXlU/Kvz1R9teSeGPLcE0h2ys bCSmhtaP9c97RTdb/T8EKkrNtgAO4t4s8uOZF9baBr34jxb3vEgpU7f8ax/e2N/7 IWbcjTM3as/gi57jn6Aygj8SowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvj+GTX z9DEPnIhRQdbRLw2SoT/MB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApAb8uLJn7WSm5yCKh5DfzHKJyH6od4KasEiN/QCalImjxFXRhhUBJ f36kSSsrYxe9Xw3251vYiGw+u5e1CQejoA6BVJM4Y9mz47ql+fY3giewvaDQkBZ8 wxtZMXdvnE7XjT9tkoryDetIP4pjpq3PwMW86FWrIhiocH86blMe4LePUbcWnDBZ DN6Ns/gvYATshcsRDQMdJXsSsuO3dFVxRnbNfZ3YiACrKOlpBOpRpm36luP+fYeY DyIwX0q9HQLnOoXtCBVGUbHLSA3yHH8/tEoGBMpTwv6C76n/UFiOHOnGgnMHMo7/ X6B1tRo+zzy7XOoHAeA9EGWHskDo8K41 -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:48 2025 by rpki-client