$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft File: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json) Hash identifier: OX2keVUqcE4iiWYzzLCTqdhF6sE02bGafaXuj0vp4vs= Subject key identifier: 7E:CA:23:03:0E:2F:E4:F6:A2:D5:E5:DE:8B:42:8E:25:91:12:EB:9B Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft Manifest number: 3E Signing time: Sun 19 Oct 2025 11:17:14 +0000 Manifest this update: Sun 19 Oct 2025 11:17:13 +0000 Manifest next update: Sun 26 Oct 2025 11:17:13 +0000 Files and hashes: 1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: OhlAy83kcaS/QEEYOFYhS76GmtQsHM8LcbIT/7758ew=) 2: 1AC13072812711F09FEB4B0DC4F9AE02.roa (hash: CYzXEZyiB/ROBhIde3nqI3ND4sCXYFrSEjCLxGEiOik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Validity Not Before: Oct 19 11:17:13 2025 GMT Not After : Oct 26 11:17:13 2025 GMT Subject: CN=68f4c8b9-8ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:85:a1:70:2d:c2:05:8c:aa:c6:a2:7c:96: 8e:5e:63:9a:99:be:7d:2c:9e:4e:e7:e4:ea:da:8f: 3b:35:63:65:d1:79:d7:1e:fc:7a:98:ef:a7:bd:5e: 68:de:ea:ea:3d:84:68:d4:a1:62:16:50:5b:eb:3c: a9:2f:3d:db:67:48:ba:12:65:23:8c:2a:f9:b3:1d: 4d:63:31:ac:cb:b7:b1:06:dd:37:ec:4a:43:3e:37: f2:ce:89:e5:ac:b5:b4:c7:8a:fe:c7:2e:db:c6:f7: 58:34:a2:22:0f:b4:42:f6:33:4c:bb:67:45:78:87: 67:9a:59:f8:f4:90:8b:15:c0:07:84:9c:ef:cd:84: 9f:a3:69:93:19:19:65:47:aa:33:4e:1f:5f:35:eb: 83:62:3b:6f:bb:b7:57:95:f5:6c:f9:74:3f:a2:86: 6c:6c:97:f0:2b:57:f0:be:3c:ff:96:5d:8f:c0:4d: 02:86:3b:fc:e1:2c:d5:e6:39:62:e9:fc:56:72:d3: 32:b1:6e:79:d1:87:d9:cf:89:24:3f:c8:0c:e9:30: 02:71:cf:6d:b0:a8:d8:af:3f:df:e5:10:c4:80:71: e3:f7:d2:dc:b1:d1:d6:15:91:08:76:34:6f:32:67: 32:4c:d6:d6:cd:02:75:42:61:ab:0c:ae:70:09:5f: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:23:03:0E:2F:E4:F6:A2:D5:E5:DE:8B:42:8E:25:91:12:EB:9B X509v3 Authority Key Identifier: keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6d:93:6f:b5:ad:c8:b7:56:13:f4:79:05:ea:9f:b9:b6:79: ba:3b:bb:53:3f:fd:64:09:0b:a3:e2:60:8c:74:44:ff:fe:5d: 55:52:70:4d:b0:63:97:b3:af:e0:f4:9b:69:cf:15:e9:e0:eb: 40:64:e6:ff:e7:37:db:73:76:2f:2b:62:79:ea:d0:2e:ec:92: 92:69:61:24:00:91:99:f7:d7:ec:e7:75:d6:62:fc:53:b3:1e: 21:0e:ee:3d:0c:48:cd:cd:f7:73:dd:de:0a:54:5e:af:e9:73: f7:93:36:d1:e5:f3:0f:56:91:de:55:0c:b4:f4:f8:f5:01:43: 36:20:ba:36:07:eb:2d:56:c5:52:77:c6:bb:42:20:51:09:f6: 26:60:04:74:ca:62:ed:bc:ee:08:f2:3c:fe:4a:dd:ff:e0:13: 03:87:99:66:67:3b:91:2f:34:2e:c3:d7:32:32:10:ed:7c:72: 56:73:5b:d3:c7:9b:7a:81:af:17:28:9d:1f:0c:f2:25:3c:fe: e3:3f:ab:2a:f6:2f:7a:1b:ef:6d:a3:4e:84:34:ff:b0:16:91: 30:37:9b:b5:cf:e7:3e:50:da:c3:99:18:a0:fb:f2:1b:5f:c6: d7:27:d4:fa:70:74:2d:59:32:09:0f:22:2a:b8:0f:52:23:1e: 58:3e:5a:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTBGNzExMC8GA1UEBRMoODJDQTEwNERDNUYyQUZGNTMzRkJGNjhDRjI5OEY0MEZC RDQ4MUYwNDAeFw0yNTEwMTkxMTE3MTNaFw0yNTEwMjYxMTE3MTNaMBgxFjAUBgNV BAMTDTY4ZjRjOGI5LThlZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMaIWhcC3CBYyqxqJ8lo5eY5qZvn0snk7n5Orajzs1Y2XRedce/HqY76e9Xmje 6uo9hGjUoWIWUFvrPKkvPdtnSLoSZSOMKvmzHU1jMazLt7EG3TfsSkM+N/LOieWs tbTHiv7HLtvG91g0oiIPtEL2M0y7Z0V4h2eaWfj0kIsVwAeEnO/NhJ+jaZMZGWVH qjNOH18164NiO2+7t1eV9Wz5dD+ihmxsl/ArV/C+PP+WXY/ATQKGO/zhLNXmOWLp /FZy0zKxbnnRh9nPiSQ/yAzpMAJxz22wqNivP9/lEMSAceP30tyx0dYVkQh2NG8y ZzJM1tbNAnVCYasMrnAJX4WhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfsojAw4v 5Pai1eXei0KOJZES65swHwYDVR0jBBgwFoAUgsoQTcXyr/Uz+/aM8pj0D71IHwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMEY3LzBEOENDOUQ2NzY2 QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3NvUVRjWHlyX1V6LV9hTThwajBENzFJSHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MEY3LzBEOENDOUQ2NzY2QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9V ei1fYU04cGowRDcxSUh3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJtk2+1rci3VhP0eQXqn7m2ebo7u1M//WQJC6PiYIx0RP/+XVVScE2w Y5ezr+D0m2nPFeng60Bk5v/nN9tzdi8rYnnq0C7skpJpYSQAkZn31+znddZi/FOz HiEO7j0MSM3N93Pd3gpUXq/pc/eTNtHl8w9Wkd5VDLT0+PUBQzYgujYH6y1WxVJ3 xrtCIFEJ9iZgBHTKYu287gjyPP5K3f/gEwOHmWZnO5EvNC7D1zIyEO18clZzW9PH m3qBrxconR8M8iU8/uM/qyr2L3ob722jToQ0/7AWkTA3m7XP5z5Q2sOZGKD78htf xtcn1PpwdC1ZMgkPIiq4D1IjHlg+Wig= -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:17 2025 by rpki-client