$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft File: GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json) Hash identifier: Lh3KDn+rLLVMadNm7bpr5uxjUZ5o4fHexpzUR8WD8Kw= Subject key identifier: 19:B0:C8:36:2A:77:64:97:5B:5B:B7:C7:05:59:8D:A1:67:E5:FC:B7 Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft Manifest number: 26 Signing time: Sun 19 Oct 2025 11:17:05 +0000 Manifest this update: Sun 19 Oct 2025 11:17:04 +0000 Manifest next update: Sun 26 Oct 2025 11:17:04 +0000 Files and hashes: 1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: EPlhdHAt4OSmDHIA8tkkk7xZDW5XSHTlcGWFgwdThHY=) 2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761 Validity Not Before: Oct 19 11:17:04 2025 GMT Not After : Oct 26 11:17:04 2025 GMT Subject: CN=68f4c8b1-51cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:98:4a:3d:98:68:79:1b:37:22:5c:57:e5: 89:61:3c:ee:42:08:88:ed:ae:c6:ac:b7:98:f6:b2: ca:09:7c:f8:67:b4:12:9a:4b:73:ad:1d:ef:10:f8: cf:31:5b:80:6d:1a:45:84:cf:79:b0:45:ee:a9:fb: c9:3a:1a:91:85:28:3a:49:6c:d1:39:7e:92:cb:80: d3:1e:6a:ba:00:3e:56:1b:5d:cc:02:cd:19:36:00: fd:63:6d:27:ff:0b:44:d7:00:e2:98:bd:c7:0e:ab: 45:47:0b:3e:c7:a2:12:67:8a:29:bd:51:57:c3:e9: 0c:af:62:fe:d9:6c:da:ed:5e:1c:32:f9:9d:1d:48: 01:8c:85:03:7f:a7:5e:1f:2f:d0:86:4c:02:75:f7: 76:de:bb:32:65:b6:eb:74:53:2e:b0:94:e5:96:72: 02:70:81:51:a1:12:1e:79:9b:4d:7c:69:2e:8d:c4: 2b:a4:9f:d2:81:5c:bd:d6:7c:67:77:0a:65:38:3d: 65:06:d8:85:a9:28:05:24:21:1e:cc:6a:40:54:97: 83:73:79:e6:94:22:c8:07:3d:5c:7b:e3:8b:8c:72: 44:d2:0a:e0:77:6a:bb:49:63:38:09:24:2b:54:2f: 29:7d:60:8c:59:c1:f7:be:7a:14:37:78:8d:58:6b: 54:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B0:C8:36:2A:77:64:97:5B:5B:B7:C7:05:59:8D:A1:67:E5:FC:B7 X509v3 Authority Key Identifier: keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:15:3c:fb:36:c8:b4:14:ca:fa:e3:90:6e:70:80:0c:85:53: 79:94:1c:28:63:e4:a8:57:cb:91:4b:d6:b9:b1:ec:40:05:77: 15:52:36:d3:f3:12:b7:be:fd:62:35:2b:ff:36:32:f7:45:90: 07:45:83:fe:3e:ae:be:6b:6b:7b:47:0e:7d:19:8a:68:79:2b: 63:6d:b8:a0:14:0b:76:99:ec:ad:77:d3:12:d7:38:14:90:1a: 45:9a:bb:ab:f0:dd:fd:62:f0:ca:ab:06:18:0d:79:8e:83:ac: 85:08:5c:c4:0d:b0:8e:71:71:85:c7:96:a6:de:44:f6:c4:a8: 18:a2:2c:bf:a2:a1:b7:5a:8b:85:23:a3:09:06:ba:02:ad:dc: 26:38:65:3f:0b:4a:ad:d6:a9:a3:4f:7a:f3:46:74:c3:16:23: fa:c3:ee:ad:bb:9e:1b:d9:f1:98:e9:cc:05:af:94:46:91:36: 59:20:a3:ce:0d:52:b3:95:4b:ba:45:7a:b9:cf:44:9f:d8:cd: 23:ac:34:17:c3:16:ac:8d:2b:62:aa:c8:5a:1f:11:b5:26:c0: 0d:9f:43:6a:91:70:49:3d:7c:83:53:55:f5:8a:29:9b:95:8a: 22:34:e2:7d:77:d3:fd:ca:ba:8f:cf:08:dd:b3:e5:5b:8a:05: 70:65:be:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw MDY4NTc2MTAeFw0yNTEwMTkxMTE3MDRaFw0yNTEwMjYxMTE3MDRaMBgxFjAUBgNV BAMTDTY4ZjRjOGIxLTUxY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNrJhKPZhoeRs3IlxX5YlhPO5CCIjtrsast5j2ssoJfPhntBKaS3OtHe8Q+M8x W4BtGkWEz3mwRe6p+8k6GpGFKDpJbNE5fpLLgNMearoAPlYbXcwCzRk2AP1jbSf/ C0TXAOKYvccOq0VHCz7HohJniim9UVfD6QyvYv7ZbNrtXhwy+Z0dSAGMhQN/p14f L9CGTAJ193beuzJltut0Uy6wlOWWcgJwgVGhEh55m018aS6NxCukn9KBXL3WfGd3 CmU4PWUG2IWpKAUkIR7MakBUl4NzeeaUIsgHPVx744uMckTSCuB3artJYzgJJCtU Lyl9YIxZwfe+ehQ3eI1Ya1RRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGbDINip3 ZJdbW7fHBVmNoWfl/LcwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGkVPPs2yLQUyvrjkG5wgAyFU3mUHChj5KhXy5FL1rmx7EAFdxVSNtPz Ere+/WI1K/82MvdFkAdFg/4+rr5ra3tHDn0Zimh5K2NtuKAUC3aZ7K130xLXOBSQ GkWau6vw3f1i8MqrBhgNeY6DrIUIXMQNsI5xcYXHlqbeRPbEqBiiLL+iobdai4Uj owkGugKt3CY4ZT8LSq3WqaNPevNGdMMWI/rD7q27nhvZ8ZjpzAWvlEaRNlkgo84N UrOVS7pFernPRJ/YzSOsNBfDFqyNK2KqyFofEbUmwA2fQ2qRcEk9fINTVfWKKZuV iiI04n130/3Kuo/PCN2z5VuKBXBlvh8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:05:12 2025 by rpki-client