$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: pFDHOeFGUg+gMbWp2QoFZbE7DtuMLSkIbRsAka13jWs= Subject key identifier: 7D:D8:B0:9E:20:CF:A6:86:FE:98:66:8D:65:74:E8:AE:7A:45:44:3C Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 06F5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 06E7 Signing time: Mon 20 Oct 2025 21:27:52 +0000 Manifest this update: Mon 20 Oct 2025 21:27:52 +0000 Manifest next update: Mon 27 Oct 2025 21:27:52 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: 1XJwmA32tZgSA3ohenb/d1JPcmF0HeyEkeRiTJVBU7g=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: 8hBGvOyNwxB7qMibVDGpuRU5HevQ+Tcv9ZjJM79y8+w=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: s8i5IxWnvTImsz9H5D4MuEQAm14mPHlkRay9ZZj+Qsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1781 (0x6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Oct 20 21:27:52 2025 GMT Not After : Oct 27 21:27:52 2025 GMT Subject: CN=68f6a958-e719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d5:14:80:7d:17:d9:9b:3f:25:0a:57:e5:b2: fe:eb:54:85:0b:8c:f8:b8:0a:ff:1c:2a:90:f1:85: 0e:7e:d1:f5:cc:29:2e:19:e2:a4:2f:0e:c5:bb:fe: cf:e1:8f:09:79:e8:fd:cd:72:e7:fe:3e:88:fd:54: f2:ba:07:06:55:c8:be:1b:2b:44:23:b2:5f:b7:2a: be:7c:e4:00:d7:27:77:d5:08:ca:a2:8e:9f:c6:e6: 31:cb:6a:ef:23:43:95:05:d2:36:9e:71:52:46:fe: 44:3d:cf:72:67:7d:79:0c:45:f4:7f:39:05:3f:66: 6c:9d:03:75:b7:0c:6a:95:0a:60:fc:2a:57:4b:33: e9:3f:26:b6:ff:1e:d3:91:6e:22:f8:2c:c3:47:a3: 61:98:18:0b:c3:19:13:6f:11:7e:1a:b5:da:9c:4a: 85:64:17:c4:d5:72:3c:21:13:b4:46:ee:49:10:f6: a4:ab:a9:2a:b5:fa:91:ee:c0:90:de:a5:a0:6c:49: 8f:4b:24:cc:ca:2c:78:60:fb:ab:9e:af:5e:5c:86: 4a:e0:08:58:10:1f:6d:27:44:0f:ad:06:69:1e:e6: c5:42:ae:c9:df:75:4f:39:34:d6:24:02:4d:c6:b2: 8d:e1:e1:45:0a:e6:0d:4f:16:30:a9:63:64:8b:7f: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D8:B0:9E:20:CF:A6:86:FE:98:66:8D:65:74:E8:AE:7A:45:44:3C X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:46:6d:0e:5c:aa:7d:8a:eb:36:85:ba:da:72:fb:d6:6d:48: eb:ec:e2:97:e6:e3:94:7b:7b:d0:7d:b6:51:44:e1:02:ef:61: 1f:f0:e4:fa:39:53:64:22:ea:bf:2d:38:fb:62:c9:40:ca:62: 96:4d:6a:9d:2c:8b:d0:a3:97:0e:8b:44:d2:6c:9f:b5:8f:9c: 52:56:5b:7e:9b:4e:a5:3a:49:5d:c0:f3:b0:b0:66:8d:92:1c: f2:5f:32:20:6e:f4:cd:d3:34:d7:b6:f7:31:48:4f:1e:1b:30: f5:5f:a7:29:a6:01:cb:11:a4:a5:de:57:00:68:55:c4:80:50: 56:a9:46:fa:96:7a:26:fe:52:18:21:71:94:0e:e5:56:21:a3: e1:ce:06:43:bc:6d:fa:0d:ad:f8:59:dc:3b:42:4e:a5:ff:3c: 25:90:24:16:8b:90:d8:a8:da:db:4c:dd:fc:b6:06:8d:f1:59: e5:0f:70:26:5e:41:01:90:b7:16:0d:ef:74:f0:72:fa:d0:81: 79:73:1d:0e:7b:5d:0b:4f:b4:c2:29:ca:ca:38:03:02:9e:44: 80:b6:73:24:8e:f5:8f:1c:48:34:4f:7b:0b:d9:0d:4b:b4:83: 5a:35:b6:1a:97:cd:a9:7b:f8:e9:24:a6:0d:05:ed:ee:a9:82: 64:67:ea:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUxMDIwMjEyNzUyWhcNMjUxMDI3MjEyNzUyWjAYMRYwFAYD VQQDEw02OGY2YTk1OC1lNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49UUgH0X2Zs/JQpX5bL+61SFC4z4uAr/HCqQ8YUOftH1zCkuGeKkLw7Fu/7P 4Y8Jeej9zXLn/j6I/VTyugcGVci+GytEI7Jftyq+fOQA1yd31QjKoo6fxuYxy2rv I0OVBdI2nnFSRv5EPc9yZ315DEX0fzkFP2ZsnQN1twxqlQpg/CpXSzPpPya2/x7T kW4i+CzDR6NhmBgLwxkTbxF+GrXanEqFZBfE1XI8IRO0Ru5JEPakq6kqtfqR7sCQ 3qWgbEmPSyTMyix4YPurnq9eXIZK4AhYEB9tJ0QPrQZpHubFQq7J33VPOTTWJAJN xrKN4eFFCuYNTxYwqWNki39GrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3YsJ4g z6aG/phmjWV06K56RUQ8MB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZRm0OXKp9ius2hbracvvWbUjr7OKX5uOUe3vQfbZRROEC72Ef8OT6 OVNkIuq/LTj7YslAymKWTWqdLIvQo5cOi0TSbJ+1j5xSVlt+m06lOkldwPOwsGaN khzyXzIgbvTN0zTXtvcxSE8eGzD1X6cppgHLEaSl3lcAaFXEgFBWqUb6lnom/lIY IXGUDuVWIaPhzgZDvG36Da34Wdw7Qk6l/zwlkCQWi5DYqNrbTN38tgaN8VnlD3Am XkEBkLcWDe908HL60IF5cx0Oe10LT7TCKcrKOAMCnkSAtnMkjvWPHEg0T3sL2Q1L tINaNbYal82pe/jpJKYNBe3uqYJkZ+pn -----END CERTIFICATE-----Generated at Tue Oct 21 02:01:59 2025 by rpki-client