$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: JCuN0QHOdn09AzxxQzLQrXbW+x7DAoKYi1hzjtXaur0= Subject key identifier: 39:CE:2B:3E:13:12:8A:34:3B:A4:86:52:B7:44:08:44:A2:73:CC:E0 Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 01BE Signing time: Sun 19 Oct 2025 05:32:18 +0000 Manifest this update: Sun 19 Oct 2025 05:32:17 +0000 Manifest next update: Sun 26 Oct 2025 05:32:17 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: QbR85IR5+r3hBmbVpZi6s53uXAFa9Gp42LdzN6Xo8Nc=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: Lzx8SaSOAIfiTkCTBDT8JHgh91LBGq5txlqMqiUIMMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Oct 19 05:32:17 2025 GMT Not After : Oct 26 05:32:17 2025 GMT Subject: CN=68f477e2-54c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:bc:5a:83:73:6f:52:22:ad:49:50:06:34: 8d:86:22:3a:50:22:30:ca:6c:63:06:56:d9:e0:2d: 86:07:2a:25:fa:5c:2b:fa:f0:21:8e:bd:1a:9c:38: 69:38:6b:57:46:ac:c5:1e:ef:5c:74:3f:fd:00:5d: b6:91:46:ac:7b:ae:e3:57:7b:46:78:3e:2c:f9:2d: 1f:84:19:e5:1b:8b:72:ab:59:db:9d:10:38:80:aa: 30:c6:92:05:81:6f:43:2e:e8:77:0e:88:60:94:04: 52:f6:93:43:6a:93:af:21:03:9f:09:cf:12:2c:9e: e6:db:9f:27:4f:7e:19:8a:b1:c4:69:a7:39:fb:cf: 00:01:7e:44:62:cb:d2:4b:6c:85:54:ad:2c:a5:65: 0f:da:95:41:8b:08:21:04:fe:6b:cc:3f:63:da:d3: fd:80:8b:a2:23:e5:d6:7a:2b:67:4b:c1:2d:00:8a: ef:bd:d9:cb:04:9f:d9:68:48:81:43:9c:0d:1e:8d: de:4d:fb:d1:18:cb:28:f4:ae:8a:59:fe:47:9b:e2: dd:db:96:17:f3:10:10:76:fa:df:23:ff:01:5d:a8: f7:d9:33:a6:19:08:ed:15:ea:12:7a:85:61:e6:5c: d6:37:b4:b7:e7:76:dc:56:83:a5:7e:03:fc:01:9f: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:2B:3E:13:12:8A:34:3B:A4:86:52:B7:44:08:44:A2:73:CC:E0 X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:23:25:f6:c6:a3:26:92:bd:d1:01:f6:3e:bd:54:50:af:82: 84:64:6e:7e:54:e3:37:9b:09:21:a3:99:bc:91:87:ac:77:23: ab:49:22:aa:c8:40:69:e0:df:5b:54:79:80:51:21:df:d5:6c: cb:15:c3:00:1b:8e:65:38:63:90:bc:59:1d:43:66:15:4d:02: 98:b7:2f:6e:b4:43:c6:f2:33:b7:c0:8f:04:72:ba:db:ec:16: 8f:cc:05:24:6c:f9:55:99:83:a4:4d:dd:1d:f2:d7:16:13:d8: cc:53:7f:83:eb:12:79:da:c0:8d:f7:de:9d:51:ce:b2:8a:ab: 3a:c0:9a:c2:4a:d8:3a:4e:8f:97:80:19:e6:1a:2e:f7:14:1e: 3e:db:0f:a4:46:8c:ec:8f:42:0f:93:ac:f7:74:50:ad:fc:57: 75:28:18:1c:21:95:a6:a3:46:30:40:25:77:6b:ed:d4:d6:b0: 8a:7a:9b:89:a8:4d:26:ee:e0:d1:50:70:26:74:88:41:09:e5: c2:48:64:62:b5:83:14:e4:dc:4e:a6:66:fb:3a:95:6d:bf:f6: 51:bc:8d:72:90:a8:bd:ee:e9:69:e7:c6:69:d8:fc:8f:55:63: 46:1d:e6:be:66:4f:0b:4b:b0:ca:34:fc:70:8c:fc:e2:c1:ce: 91:e1:5c:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjUxMDE5MDUzMjE3WhcNMjUxMDI2MDUzMjE3WjAYMRYwFAYD VQQDEw02OGY0NzdlMi01NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dm8WoNzb1IirUlQBjSNhiI6UCIwymxjBlbZ4C2GByol+lwr+vAhjr0anDhp OGtXRqzFHu9cdD/9AF22kUase67jV3tGeD4s+S0fhBnlG4tyq1nbnRA4gKowxpIF gW9DLuh3DohglARS9pNDapOvIQOfCc8SLJ7m258nT34ZirHEaac5+88AAX5EYsvS S2yFVK0spWUP2pVBiwghBP5rzD9j2tP9gIuiI+XWeitnS8EtAIrvvdnLBJ/ZaEiB Q5wNHo3eTfvRGMso9K6KWf5Hm+Ld25YX8xAQdvrfI/8BXaj32TOmGQjtFeoSeoVh 5lzWN7S353bcVoOlfgP8AZ94OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnOKz4T Eoo0O6SGUrdECESic8zgMB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeIyX2xqMmkr3RAfY+vVRQr4KEZG5+VOM3mwkho5m8kYesdyOrSSKq yEBp4N9bVHmAUSHf1WzLFcMAG45lOGOQvFkdQ2YVTQKYty9utEPG8jO3wI8Ecrrb 7BaPzAUkbPlVmYOkTd0d8tcWE9jMU3+D6xJ52sCN996dUc6yiqs6wJrCStg6To+X gBnmGi73FB4+2w+kRozsj0IPk6z3dFCt/Fd1KBgcIZWmo0YwQCV3a+3U1rCKepuJ qE0m7uDRUHAmdIhBCeXCSGRitYMU5NxOpmb7OpVtv/ZRvI1ykKi97ulp58Zp2PyP VWNGHea+Zk8LS7DKNPxwjPziwc6R4VxR -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:16 2025 by rpki-client