$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json) Hash identifier: Mg5+VJF4hi3s9Gcqe1FU8E0Zxypc95RTo/Jajnh+7sg= Subject key identifier: 34:34:2A:09:A4:EB:21:58:35:1A:FB:04:DE:50:56:94:51:17:84:A5 Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft Manifest number: 065A Signing time: Sun 19 Oct 2025 00:12:09 +0000 Manifest this update: Sun 19 Oct 2025 00:12:08 +0000 Manifest next update: Sun 26 Oct 2025 00:12:08 +0000 Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: NNtETcswxW1by8WiDK5u+eyFv0fasiH8To+JEreXQxk=) 2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: xXHY7bwGXSIeSyRjTBvDjww0CmRh6iG7/BTMHshpS7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Validity Not Before: Oct 19 00:12:08 2025 GMT Not After : Oct 26 00:12:08 2025 GMT Subject: CN=68f42cd8-6036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:ad:52:57:1a:8b:fe:0c:d0:d6:45:28:4e: 59:ac:1d:67:0a:6f:75:44:94:d0:1c:e2:3c:3e:db: 4b:0e:f9:0f:58:fe:52:6d:3b:6a:8a:05:68:a2:d2: fa:79:2a:d3:ae:3d:82:fc:cd:e6:16:ab:d7:ac:36: 5c:6a:9a:8b:d4:04:94:a7:ea:81:be:32:48:e0:2f: 32:b6:bc:2a:2e:e6:3d:6a:16:08:96:b7:42:8e:3d: b1:80:57:09:0a:af:19:e8:39:a8:fa:c2:3c:8a:0b: 0a:b6:be:1f:bd:81:3f:c4:1f:54:8e:b5:5f:53:11: 8d:e7:8c:d3:4b:f8:8a:2e:30:01:8e:1a:8e:92:2d: 81:a6:66:61:cc:84:44:2e:d1:34:19:86:7c:80:83: 7d:6c:9f:25:9d:e0:8d:24:39:eb:c7:61:e4:70:fe: 45:37:02:31:85:4b:71:a9:5d:90:fa:13:db:f1:42: 8d:62:2a:c9:ea:c6:f6:16:33:66:bd:59:24:48:19: 6e:8f:eb:61:c6:81:20:d7:9a:25:84:40:49:c4:88: 50:4f:83:2c:f8:59:6d:d6:49:1b:f3:d0:81:14:3a: 16:c1:74:49:c1:0e:b8:e6:38:3d:4e:94:39:d0:bb: f3:7a:49:1d:10:b0:a1:de:2b:83:af:00:42:a2:56: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:34:2A:09:A4:EB:21:58:35:1A:FB:04:DE:50:56:94:51:17:84:A5 X509v3 Authority Key Identifier: keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:66:62:ba:8a:6b:d1:8f:67:d2:50:f7:69:0a:1a:be:39:29: 5d:a0:c1:16:f6:6f:90:fc:60:19:9e:27:dd:28:a6:8d:6b:ce: 4f:42:c5:75:6e:45:cf:4a:98:af:92:01:58:ac:a2:f1:1d:57: 37:b5:3c:00:72:e8:0b:4d:b3:2c:88:69:40:e6:20:30:b8:1c: 1d:78:89:da:df:a1:f7:91:fe:32:28:89:87:ad:29:d1:c5:b6: c2:0c:b0:1a:12:6b:4c:d1:f3:bd:95:25:18:9a:14:e8:e6:b4: 07:39:27:30:39:88:9a:4e:4b:37:87:76:fd:57:f9:9b:b1:a3: c9:35:26:f0:fa:ca:cb:f1:fa:8a:f4:65:8e:e8:e9:4b:df:57: f2:6e:f6:47:1f:4e:3d:52:8e:f7:86:8e:63:9b:a6:b8:2b:5c: 37:87:e6:1f:59:89:8d:c2:53:24:bf:ee:24:49:1d:b7:50:30: e8:a3:94:e4:64:81:76:ea:4d:03:7c:0c:1b:95:a7:86:1f:7c: 88:4e:dc:99:23:10:cf:82:12:12:5f:69:8f:2d:a7:f4:d6:35: b4:c6:11:79:57:4b:bc:6a:1a:18:f1:e2:b8:20:2b:ad:bf:13: 71:6b:2a:f0:13:1b:bb:c6:88:95:1a:ba:9c:1d:d4:df:38:42: 85:6f:59:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCQUQxMTAvBgNVBAUTKDgxRkZGMjE1MDA1REExQUZBQzVFMjRBQkJDQzAzQ0E3 MEY2NjRCNTYwHhcNMjUxMDE5MDAxMjA4WhcNMjUxMDI2MDAxMjA4WjAYMRYwFAYD VQQDEw02OGY0MmNkOC02MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZatUlcai/4M0NZFKE5ZrB1nCm91RJTQHOI8PttLDvkPWP5SbTtqigVootL6 eSrTrj2C/M3mFqvXrDZcapqL1ASUp+qBvjJI4C8ytrwqLuY9ahYIlrdCjj2xgFcJ Cq8Z6Dmo+sI8igsKtr4fvYE/xB9UjrVfUxGN54zTS/iKLjABjhqOki2BpmZhzIRE LtE0GYZ8gIN9bJ8lneCNJDnrx2HkcP5FNwIxhUtxqV2Q+hPb8UKNYirJ6sb2FjNm vVkkSBluj+thxoEg15olhEBJxIhQT4Ms+Flt1kkb89CBFDoWwXRJwQ645jg9TpQ5 0LvzekkdELCh3iuDrwBColYqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ0Kgmk 6yFYNRr7BN5QVpRRF4SlMB8GA1UdIwQYMBaAFIH/8hUAXaGvrF4kq7zAPKcPZktW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUJBRC81MEQ5MUU2NkEz NDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9hLXNYaVNydk1BOHB3OW1T MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmX3lGUUJkb2Etc1hpU3J2TUE4cHc5bVMxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUJBRC81MEQ5MUU2NkEzNDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9h LXNYaVNydk1BOHB3OW1TMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPZmK6imvRj2fSUPdpChq+OSldoMEW9m+Q/GAZnifdKKaNa85PQsV1 bkXPSpivkgFYrKLxHVc3tTwAcugLTbMsiGlA5iAwuBwdeIna36H3kf4yKImHrSnR xbbCDLAaEmtM0fO9lSUYmhTo5rQHOScwOYiaTks3h3b9V/mbsaPJNSbw+srL8fqK 9GWO6OlL31fybvZHH049Uo73ho5jm6a4K1w3h+YfWYmNwlMkv+4kSR23UDDoo5Tk ZIF26k0DfAwblaeGH3yITtyZIxDPghISX2mPLaf01jW0xhF5V0u8ahoY8eK4ICut vxNxayrwExu7xoiVGrqcHdTfOEKFb1kp -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:03 2025 by rpki-client