$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: NX7BeHO/GTbb+k+c5gySbwRUlObpl7baNYpnScNPtkY= Subject key identifier: 11:69:51:18:E6:7C:B4:6C:AB:47:68:77:AD:84:76:55:F6:F1:A9:47 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0980 Signing time: Sat 18 Oct 2025 21:09:29 +0000 Manifest this update: Sat 18 Oct 2025 21:09:28 +0000 Manifest next update: Sat 25 Oct 2025 21:09:28 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: CU+tRp4RdCHPsxBG3RPLyDVx6ChtgG33uGO624ui13w=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Oct 18 21:09:28 2025 GMT Not After : Oct 25 21:09:28 2025 GMT Subject: CN=68f40208-207e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:46:93:6a:68:4d:f3:57:71:4b:b4:9d:80: 0a:42:2c:b9:7c:85:e5:91:4e:07:6f:fd:22:41:e9: c7:e0:26:76:34:a8:c6:02:bd:96:7a:d2:1a:6e:18: cc:66:59:cf:6c:3e:94:f8:be:8d:91:ab:77:11:7e: fc:ac:cf:b2:fc:95:cd:82:03:38:bc:a2:33:fb:ce: 6e:0e:e6:0c:9e:b5:47:e8:71:72:01:cd:f0:2c:a5: fb:0f:70:8b:ac:e8:06:e2:71:71:06:38:21:b1:11: a4:b7:a9:a7:5a:f7:4e:be:e5:1f:3c:be:a4:89:d2: 11:71:c6:73:96:95:7e:2d:31:1b:9b:f6:e5:54:0a: 69:74:83:90:ec:fb:48:7c:89:81:5b:a7:c0:46:1a: 76:f8:1f:4c:de:20:7d:07:d7:7d:a7:65:f0:77:7d: bc:f7:82:3b:18:ae:9b:30:e5:c3:29:a3:6d:26:f6: a2:d5:b8:cb:91:7d:14:a4:a8:83:a7:70:e8:94:87: d0:ac:95:32:01:b8:26:a4:54:33:65:9c:17:34:d3: 59:aa:27:d4:97:a9:e7:43:cd:ea:c4:28:09:4d:a2: d2:56:4f:00:be:1b:7b:13:91:b9:43:d2:4f:3a:d0: 03:db:1f:e0:57:a2:c2:23:81:e3:60:ec:33:a2:77: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:69:51:18:E6:7C:B4:6C:AB:47:68:77:AD:84:76:55:F6:F1:A9:47 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:2e:bc:53:d7:30:f8:72:1a:08:22:0c:fe:be:e9:87:c2:e5: 00:de:e6:67:05:c0:e6:8f:97:95:ba:12:76:d2:1d:93:20:b9: 40:eb:8e:d5:6d:1c:01:c5:4e:63:1c:7b:55:3b:9b:40:41:64: ab:d9:ee:af:ba:1b:3b:77:b7:67:fc:26:e1:00:88:84:02:96: ee:1c:fc:3e:a0:24:13:d5:62:5d:11:cd:09:ee:2d:ed:dc:54: 17:0b:5c:5f:24:05:68:ab:77:cf:a7:28:6e:34:21:05:df:66: d2:44:9b:c3:e6:83:c2:b1:6d:7e:aa:c0:33:65:e2:30:52:a9: 9c:93:18:47:50:8c:5b:02:c0:41:2d:da:43:fb:e3:77:f2:74: 9e:ba:9a:00:41:b1:d9:43:cd:dc:60:aa:6a:f0:4e:ee:a9:a4: 6f:6f:c3:40:09:33:41:45:57:5f:c0:74:cd:19:63:45:84:5e: b4:db:12:81:05:35:5a:47:91:e0:95:a3:6f:b3:ec:04:2a:b0: 64:38:b1:b2:15:98:6e:71:c2:7b:73:fd:45:a2:f5:f6:84:a8: df:e9:5f:27:a0:11:76:d2:41:eb:98:2f:b8:5c:ee:6f:3a:21: 83:34:25:14:f7:ec:4d:e1:eb:e9:82:49:50:e5:27:2e:1e:b3: d1:a8:5b:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUxMDE4MjEwOTI4WhcNMjUxMDI1MjEwOTI4WjAYMRYwFAYD VQQDEw02OGY0MDIwOC0yMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8dGk2poTfNXcUu0nYAKQiy5fIXlkU4Hb/0iQenH4CZ2NKjGAr2WetIabhjM ZlnPbD6U+L6Nkat3EX78rM+y/JXNggM4vKIz+85uDuYMnrVH6HFyAc3wLKX7D3CL rOgG4nFxBjghsRGkt6mnWvdOvuUfPL6kidIRccZzlpV+LTEbm/blVAppdIOQ7PtI fImBW6fARhp2+B9M3iB9B9d9p2Xwd32894I7GK6bMOXDKaNtJvai1bjLkX0UpKiD p3DolIfQrJUyAbgmpFQzZZwXNNNZqifUl6nnQ83qxCgJTaLSVk8Avht7E5G5Q9JP OtAD2x/gV6LCI4HjYOwzoneQywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFpURjm fLRsq0dod62EdlX28alHMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtLrxT1zD4choIIgz+vumHwuUA3uZnBcDmj5eVuhJ20h2TILlA647V bRwBxU5jHHtVO5tAQWSr2e6vuhs7d7dn/CbhAIiEApbuHPw+oCQT1WJdEc0J7i3t 3FQXC1xfJAVoq3fPpyhuNCEF32bSRJvD5oPCsW1+qsAzZeIwUqmckxhHUIxbAsBB LdpD++N38nSeupoAQbHZQ83cYKpq8E7uqaRvb8NACTNBRVdfwHTNGWNFhF602xKB BTVaR5HglaNvs+wEKrBkOLGyFZhuccJ7c/1FovX2hKjf6V8noBF20kHrmC+4XO5v OiGDNCUU9+xN4evpgklQ5ScuHrPRqFtv -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:23 2025 by rpki-client