$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft File: RGuswfLoFnPqtvFskIC154B2lkc.mft (raw, json) Hash identifier: 7r47puD5G/Bstpm/UDMgM95kLCZcW6WO3fbneD3Y2/8= Subject key identifier: 99:58:6F:C6:A4:86:28:F0:8E:7A:82:84:A0:70:37:CA:82:92:55:15 Authority key identifier: 44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47 Certificate issuer: /CN=A91EF175/serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft Manifest number: 0131 Signing time: Sun 19 Oct 2025 07:39:40 +0000 Manifest this update: Sun 19 Oct 2025 07:39:38 +0000 Manifest next update: Sun 26 Oct 2025 07:39:38 +0000 Files and hashes: 1: RGuswfLoFnPqtvFskIC154B2lkc.crl (hash: BGnQPVO4O5qmrYN8F2GkFG7WAETsFGj8xQYpUx49aCM=) 2: 9F2B6B24974E11F0AA132215C4F9AE02.roa (hash: AiAMrw2pdLG30U/7RXN/uchB0LPco2mYVZa/A2/l49E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647 Validity Not Before: Oct 19 07:39:38 2025 GMT Not After : Oct 26 07:39:38 2025 GMT Subject: CN=68f495bb-f392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:0a:78:9d:b9:9e:eb:24:fd:ac:12:97:5f: b5:0f:ab:1b:18:d3:cd:ba:d7:fd:94:32:fb:e9:1b: 72:28:51:dc:39:80:5a:ee:d7:3f:36:7b:d5:59:25: a9:3a:c4:9d:84:56:71:99:96:e9:2f:64:b4:4d:6c: 25:ca:9a:3c:08:4c:88:39:b1:8e:d5:83:fe:61:b0: 36:90:43:a5:81:c2:03:92:ef:57:9c:3f:a3:41:2c: 22:a3:29:c3:b6:22:60:66:8d:f7:08:dd:01:e2:99: f5:bb:9d:33:e2:48:8b:9b:cb:6c:44:78:a1:fe:ec: 77:e1:1f:8b:87:37:5a:69:d9:35:2a:34:72:87:f6: 98:aa:3f:bc:b8:84:00:c2:95:97:9a:1c:ab:92:85: 60:b9:94:e7:ab:45:79:04:95:ed:87:04:63:aa:d4: cb:f7:6b:44:2f:f0:6d:1d:70:89:b8:25:70:a5:a4: a2:85:7f:57:d2:25:c3:fd:08:ef:66:e1:eb:67:57: 7c:a5:c0:c7:8e:2d:0f:21:2d:fb:f8:5f:68:86:70: 0e:4a:00:32:39:b4:c0:aa:89:bb:d0:55:88:c1:bb: f2:01:56:36:50:0e:55:61:f9:fa:83:d4:d9:33:32: f8:52:49:67:52:5a:e1:c8:ca:10:b4:bd:dc:bb:e4: ba:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:58:6F:C6:A4:86:28:F0:8E:7A:82:84:A0:70:37:CA:82:92:55:15 X509v3 Authority Key Identifier: keyid:44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4f:e0:b9:0a:cb:61:f6:e0:5a:6b:40:76:17:07:49:4c:5c: 3e:0e:17:22:88:29:2b:60:1d:80:62:c0:6c:f1:7d:aa:45:bc: e4:50:4c:87:32:f3:1d:f9:c5:bb:9a:de:38:5c:c7:ca:12:55: 6e:f0:c7:b3:93:01:a9:16:9c:3c:ef:48:24:7c:b1:36:d6:2e: 4d:00:4e:d4:2c:46:4a:79:4a:35:9e:58:05:47:ac:2a:1d:51: 05:84:e9:7d:34:cb:11:32:39:2b:ad:52:c2:9e:f5:ed:3e:57: ac:77:df:b3:93:be:35:5d:a3:df:b9:e9:8f:b2:70:b5:69:39: 0f:27:cf:56:3f:38:e8:1c:5e:4e:2f:a8:2f:37:5b:63:23:c4: c9:e4:c1:19:f0:1e:d3:a0:e4:28:ee:6e:55:75:2e:51:0f:67: 94:75:03:51:35:4a:15:de:67:cd:95:6f:df:ae:91:66:c0:48: ff:a1:d8:c5:ac:70:72:b9:a7:cc:3c:9a:31:3b:2b:d4:23:95: 11:5f:68:ed:12:63:00:4b:31:8b:bf:0e:ad:72:37:89:44:92: e7:68:e7:57:81:26:b9:7b:55:60:a2:4c:6d:db:5a:7f:d4:35: 53:0d:f7:5d:76:76:82:3f:dc:4f:96:ba:a9:f4:9a:d3:8c:62: e6:3f:9a:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3NTExMC8GA1UEBRMoNDQ2QkFDQzFGMkU4MTY3M0VBQjZGMTZDOTA4MEI1RTc4 MDc2OTY0NzAeFw0yNTEwMTkwNzM5MzhaFw0yNTEwMjYwNzM5MzhaMBgxFjAUBgNV BAMTDTY4ZjQ5NWJiLWYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpUQp4nbme6yT9rBKXX7UPqxsY08261/2UMvvpG3IoUdw5gFru1z82e9VZJak6 xJ2EVnGZlukvZLRNbCXKmjwITIg5sY7Vg/5hsDaQQ6WBwgOS71ecP6NBLCKjKcO2 ImBmjfcI3QHimfW7nTPiSIuby2xEeKH+7HfhH4uHN1pp2TUqNHKH9piqP7y4hADC lZeaHKuShWC5lOerRXkEle2HBGOq1Mv3a0Qv8G0dcIm4JXClpKKFf1fSJcP9CO9m 4etnV3ylwMeOLQ8hLfv4X2iGcA5KADI5tMCqibvQVYjBu/IBVjZQDlVh+fqD1Nkz MvhSSWdSWuHIyhC0vdy75Lr7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmVhvxqSG KPCOeoKEoHA3yoKSVRUwHwYDVR0jBBgwFoAURGuswfLoFnPqtvFskIC154B2lkcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTc1LzA0NjBBQTE4RkJG QjExRUVBMUVFQUYxRkM0RjlBRTAyL1JHdXN3ZkxvRm5QcXR2RnNrSUMxNTRCMmxr Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkd1c3dmTG9GblBxdHZGc2tJQzE1NEIybGtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG MTc1LzA0NjBBQTE4RkJGQjExRUVBMUVFQUYxRkM0RjlBRTAyL1JHdXN3ZkxvRm5Q cXR2RnNrSUMxNTRCMmxrYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpP4LkKy2H24FprQHYXB0lMXD4OFyKIKStgHYBiwGzxfapFvORQTIcy 8x35xbua3jhcx8oSVW7wx7OTAakWnDzvSCR8sTbWLk0ATtQsRkp5SjWeWAVHrCod UQWE6X00yxEyOSutUsKe9e0+V6x337OTvjVdo9+56Y+ycLVpOQ8nz1Y/OOgcXk4v qC83W2MjxMnkwRnwHtOg5CjublV1LlEPZ5R1A1E1ShXeZ82Vb9+ukWbASP+h2MWs cHK5p8w8mjE7K9QjlRFfaO0SYwBLMYu/Dq1yN4lEkudo51eBJrl7VWCiTG3bWn/U NVMN9112doI/3E+Wuqn0mtOMYuY/moo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:01:52 2025 by rpki-client