$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: qZri9vCdpoaaWksbdT/4gnfGxvzWKlQtYYuQ9P+Ur0A= Subject key identifier: 9A:46:6A:6B:EE:D0:39:8C:43:95:F5:38:77:3A:2F:AE:02:53:32:94 Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 04B3 Signing time: Sun 19 Oct 2025 01:45:38 +0000 Manifest this update: Sun 19 Oct 2025 01:45:37 +0000 Manifest next update: Sun 26 Oct 2025 01:45:37 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: X4eP+m1A/xT7I2faTDl5d0HnhoWM2qd8HFvS3dOH6aY=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: M1i4rWrbGKWHBYp62z8SKmnQxpHNlWERMJQXrk6a0Go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Oct 19 01:45:37 2025 GMT Not After : Oct 26 01:45:37 2025 GMT Subject: CN=68f442c1-277a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:af:5b:39:96:e9:37:82:52:2d:e1:ee:6c: 66:05:cd:bf:f2:4f:f4:89:87:94:03:49:b1:6c:f7: cb:d8:c1:d9:80:8a:69:6d:8e:7b:b4:88:a7:a0:f9: 5a:91:a1:46:b0:58:ca:19:0b:3f:99:1e:15:a3:0c: d7:0e:90:d3:cc:9b:7e:13:5d:38:77:dd:a3:00:7f: 7a:59:73:c9:0c:71:76:a4:fa:8b:89:8d:de:dc:d8: d9:cb:6a:b1:de:5a:05:22:d8:ae:dc:bd:01:1a:cd: 1c:e7:b0:ea:ef:b8:38:75:f9:e6:28:5b:0d:a0:f5: 4d:8e:75:75:28:d8:ce:d6:b5:1a:3e:fa:fa:eb:8c: 97:d0:6d:d8:72:2f:e8:2e:06:bf:75:a7:0b:26:66: 2d:2f:36:2d:34:cc:e1:51:bc:17:39:bc:43:13:e1: 22:5d:97:0f:f4:22:e5:ef:b5:5c:d7:03:58:b3:1d: 3f:30:4b:7f:f2:df:9f:a3:a2:db:e6:e1:83:c8:f5: bb:97:b3:ec:81:41:a7:75:48:2b:ec:1f:31:62:db: b1:ac:bd:e1:f6:f2:9a:21:9e:2e:7b:92:4a:57:b5: 5a:8e:65:6f:65:3f:38:69:a2:cf:80:29:96:2b:ab: e9:5b:5c:91:11:15:b5:49:49:33:29:c1:8c:7e:74: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:46:6A:6B:EE:D0:39:8C:43:95:F5:38:77:3A:2F:AE:02:53:32:94 X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b3:08:b1:4d:fa:a0:69:4e:3e:53:91:6f:41:5f:8e:7d:3a: 4b:ce:b8:ba:06:68:df:dc:a3:3e:f5:87:a3:07:d3:66:7c:9d: 23:0a:a1:59:ee:90:5f:20:df:cc:fe:26:9c:15:d8:0f:ec:10: 5e:c1:06:1d:17:00:71:7c:61:f5:2d:69:58:60:dc:f1:de:24: 66:7f:68:16:26:03:ab:0e:80:85:bc:27:ff:d5:a1:81:73:41: 25:03:d8:41:83:0f:64:c7:80:47:8e:4d:e1:03:42:4b:9d:0f: cc:16:69:9d:00:6e:12:fa:1b:74:b6:59:39:ed:d8:ab:fc:73: 42:08:48:d6:60:df:6e:10:35:ec:1d:4e:d1:f4:a6:57:c9:87: cd:23:ef:1e:9a:51:ed:8d:b8:af:02:03:cd:90:6b:4b:61:79: 9b:7e:4d:37:75:fc:86:70:cc:3e:2b:57:39:c6:37:e5:3b:81: c5:cb:40:23:d7:c9:83:15:c3:e7:ad:9d:c5:f2:83:ec:ee:86: 65:d0:3c:a5:99:4e:0e:d1:13:0b:ba:6a:e6:80:7c:5f:fa:49: d3:58:74:ce:78:55:46:ff:b4:d8:bf:53:11:e3:87:e9:be:6b: eb:98:f6:40:11:0d:b4:99:15:a5:a9:8b:3b:b0:54:df:c2:2d: e5:b7:2f:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUxMDE5MDE0NTM3WhcNMjUxMDI2MDE0NTM3WjAYMRYwFAYD VQQDEw02OGY0NDJjMS0yNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lKvWzmW6TeCUi3h7mxmBc2/8k/0iYeUA0mxbPfL2MHZgIppbY57tIinoPla kaFGsFjKGQs/mR4VowzXDpDTzJt+E104d92jAH96WXPJDHF2pPqLiY3e3NjZy2qx 3loFItiu3L0BGs0c57Dq77g4dfnmKFsNoPVNjnV1KNjO1rUaPvr664yX0G3Yci/o Lga/dacLJmYtLzYtNMzhUbwXObxDE+EiXZcP9CLl77Vc1wNYsx0/MEt/8t+fo6Lb 5uGDyPW7l7PsgUGndUgr7B8xYtuxrL3h9vKaIZ4ue5JKV7VajmVvZT84aaLPgCmW K6vpW1yRERW1SUkzKcGMfnQzxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpGamvu 0DmMQ5X1OHc6L64CUzKUMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQswixTfqgaU4+U5FvQV+OfTpLzri6Bmjf3KM+9YejB9NmfJ0jCqFZ 7pBfIN/M/iacFdgP7BBewQYdFwBxfGH1LWlYYNzx3iRmf2gWJgOrDoCFvCf/1aGB c0ElA9hBgw9kx4BHjk3hA0JLnQ/MFmmdAG4S+ht0tlk57dir/HNCCEjWYN9uEDXs HU7R9KZXyYfNI+8emlHtjbivAgPNkGtLYXmbfk03dfyGcMw+K1c5xjflO4HFy0Aj 18mDFcPnrZ3F8oPs7oZl0DylmU4O0RMLumrmgHxf+knTWHTOeFVG/7TYv1MR44fp vmvrmPZAEQ20mRWlqYs7sFTfwi3lty+b -----END CERTIFICATE-----Generated at Mon Oct 20 16:37:26 2025 by rpki-client