$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: exN6kSkNSvlzwRe1tx7ByXkUtoqHDjBuU1oVFNMcR9o= Subject key identifier: D6:CB:C9:F3:F1:C7:71:83:67:7D:79:84:68:F0:DB:74:15:91:68:E0 Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 02D4 Signing time: Sun 19 Oct 2025 03:29:38 +0000 Manifest this update: Sun 19 Oct 2025 03:29:37 +0000 Manifest next update: Sun 26 Oct 2025 03:29:37 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: STySflQfGfqm8tKUvjnHC01764b1qRivjTo4qutof8I=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: vDQoZAtho3Zfc3fEMkNHvcrZRkN5p0mTf80o1+Yo2ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Oct 19 03:29:37 2025 GMT Not After : Oct 26 03:29:37 2025 GMT Subject: CN=68f45b22-f643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:31:23:ad:36:7c:16:d3:ae:3f:6b:74:d3: 97:cd:43:f3:07:ea:a7:5c:2d:d2:29:91:aa:69:68: e3:36:74:52:9f:76:58:ab:14:25:ff:33:84:70:53: 4e:4f:ea:61:dc:12:51:01:44:80:0b:ab:e8:e8:bc: 96:97:87:31:c0:0d:14:26:7f:e2:ff:2b:df:9f:99: da:b3:6a:ea:a2:9f:4d:7f:d3:87:0d:e9:b5:f3:12: 51:87:68:06:7b:2f:9b:0f:4f:6a:af:53:6a:7c:30: 3e:ad:ac:c3:30:47:82:a5:85:91:e6:b9:ae:ee:92: 21:a9:9a:6b:88:27:4f:79:cc:1b:03:f0:9e:46:3b: 71:c9:c8:11:ed:8a:63:fa:a6:53:48:dc:f7:51:6f: 51:14:44:97:8d:d2:67:e8:9d:3b:a2:16:34:a8:0e: db:57:b7:0c:c4:45:08:c1:4f:a9:1b:93:fc:a1:8f: b4:65:25:7f:50:ef:4b:a5:c2:2f:51:23:ca:df:45: 03:5e:43:db:f3:3c:34:fc:c0:c2:82:4a:5a:74:e6: cc:3a:62:33:cf:03:11:41:8b:9f:01:7c:e2:2f:74: 8a:24:35:6e:e8:3c:c2:82:8f:2b:77:78:c2:68:20: 3e:09:43:73:c6:b0:a1:eb:39:b1:5d:7b:cb:94:62: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CB:C9:F3:F1:C7:71:83:67:7D:79:84:68:F0:DB:74:15:91:68:E0 X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d1:6a:9b:ca:22:85:ed:df:04:36:b9:fc:d6:cc:df:42:d1: 5f:f0:9e:3a:78:67:5d:92:f5:ba:32:1b:e1:40:fc:ce:bc:75: 30:c9:2b:a2:33:de:7b:39:2d:de:88:7c:2f:80:9e:0c:4e:ee: eb:ff:e6:a8:9d:dc:31:71:43:2d:61:ff:f8:c9:4d:35:63:44: 72:6b:45:40:8a:01:4d:bb:c5:51:1e:0c:3c:ed:67:9b:a6:a8: 43:74:86:c4:48:e4:94:58:32:e7:3c:fc:7f:ef:d7:c9:2b:5b: 77:47:3f:e7:a2:01:70:70:58:bb:2d:98:bb:17:01:c6:5c:d0: 7e:d0:a1:23:4b:4a:f3:47:4e:34:d4:bd:08:94:3c:2f:61:a9: ea:0e:ca:c3:d1:cb:9d:7d:5c:7e:31:71:21:3d:7c:4e:85:58: 7b:68:b3:ea:49:f1:9f:04:51:5a:f9:c9:d3:6b:51:48:9c:cb: d1:ae:cf:31:fa:05:53:3e:e1:94:08:a0:f7:5a:c2:1b:d0:05: c1:90:7f:77:0f:2f:a5:11:25:e4:e7:4f:e9:cb:23:cc:74:83: 50:2d:a5:b2:c2:eb:50:6c:32:42:4c:1a:7e:2d:82:bf:da:7c: 64:8e:d7:5a:83:37:b8:c0:0a:ba:3e:40:8a:d4:72:05:ae:b0: a3:86:c6:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUxMDE5MDMyOTM3WhcNMjUxMDI2MDMyOTM3WjAYMRYwFAYD VQQDEw02OGY0NWIyMi1mNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gUxI602fBbTrj9rdNOXzUPzB+qnXC3SKZGqaWjjNnRSn3ZYqxQl/zOEcFNO T+ph3BJRAUSAC6vo6LyWl4cxwA0UJn/i/yvfn5nas2rqop9Nf9OHDem18xJRh2gG ey+bD09qr1NqfDA+razDMEeCpYWR5rmu7pIhqZpriCdPecwbA/CeRjtxycgR7Ypj +qZTSNz3UW9RFESXjdJn6J07ohY0qA7bV7cMxEUIwU+pG5P8oY+0ZSV/UO9LpcIv USPK30UDXkPb8zw0/MDCgkpadObMOmIzzwMRQYufAXziL3SKJDVu6DzCgo8rd3jC aCA+CUNzxrCh6zmxXXvLlGKdfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbLyfPx x3GDZ315hGjw23QVkWjgMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw0WqbyiKF7d8ENrn81szfQtFf8J46eGddkvW6MhvhQPzOvHUwySui M957OS3eiHwvgJ4MTu7r/+aondwxcUMtYf/4yU01Y0Rya0VAigFNu8VRHgw87Web pqhDdIbESOSUWDLnPPx/79fJK1t3Rz/nogFwcFi7LZi7FwHGXNB+0KEjS0rzR040 1L0IlDwvYanqDsrD0cudfVx+MXEhPXxOhVh7aLPqSfGfBFFa+cnTa1FInMvRrs8x +gVTPuGUCKD3WsIb0AXBkH93Dy+lESXk50/pyyPMdINQLaWywutQbDJCTBp+LYK/ 2nxkjtdagze4wAq6PkCK1HIFrrCjhsZJ -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:02 2025 by rpki-client