$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: vFvBM6otWXdViMbBcM/Tl8E3crcgmhjm8sEeetyEcmk= Subject key identifier: EB:F7:AD:DA:F2:EA:19:27:2D:D0:7F:A2:03:18:94:3D:5E:67:26:ED Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 11A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 117E Signing time: Sat 18 Oct 2025 17:45:45 +0000 Manifest this update: Sat 18 Oct 2025 17:45:45 +0000 Manifest next update: Sat 25 Oct 2025 17:45:45 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: HDnql5svjkz0Eaq7VJvmc6N0v3PxhrbzGI9ZgqgWfE4=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4517 (0x11a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Oct 18 17:45:45 2025 GMT Not After : Oct 25 17:45:45 2025 GMT Subject: CN=68f3d249-c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:1a:bd:22:c7:c5:85:f7:dd:8b:78:1a:6a: 22:ed:04:5f:6a:31:b1:3c:1a:d5:27:d0:13:65:fb: e4:7b:5e:af:2c:50:2c:7b:7c:ca:b2:62:48:25:72: 1c:5a:98:78:df:72:8c:f0:4f:bb:07:33:7a:ce:6d: ea:f1:7e:44:2c:85:55:5a:14:2e:5d:c8:18:eb:d4: 42:b4:be:b7:5c:49:0d:4f:bd:ab:8a:49:3f:63:64: 4a:31:3f:16:f4:a9:89:dc:b3:90:93:80:3a:e1:2f: ca:9f:6d:a0:d3:bc:b4:d1:73:8f:09:40:ad:9b:c8: 2c:af:25:53:bb:c9:b8:f5:0c:be:83:cf:c5:39:80: e3:cb:13:40:04:91:69:c5:77:27:63:f1:1b:66:6c: 87:71:f6:fc:24:b9:72:37:f1:7e:37:fc:0f:59:8b: f0:bc:a2:d4:82:08:2c:53:43:27:58:47:5e:b5:52: 33:26:80:96:98:76:69:e0:27:25:db:90:ee:9d:f9: af:2b:16:62:fc:90:71:b8:14:72:99:f7:a8:da:41: 39:e5:4f:53:ff:93:3f:3d:1b:fe:56:b4:84:ff:26: 51:3a:e2:2d:7d:5b:77:31:54:8c:b8:66:8c:c3:a7: 88:b1:20:9a:4c:93:d1:e6:07:71:1f:e1:f3:2c:1b: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F7:AD:DA:F2:EA:19:27:2D:D0:7F:A2:03:18:94:3D:5E:67:26:ED X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d6:31:f1:c1:ae:a2:06:03:33:ea:13:ad:38:6e:a3:fc:3a: 78:6a:e2:54:0a:62:20:b9:51:f7:a2:44:b5:fb:dd:e0:d1:ca: 05:cf:92:6a:74:cd:1a:b9:c1:8d:12:ba:72:00:33:f5:4f:d1: 5c:f6:63:74:84:e2:7f:07:b1:36:02:24:2b:d5:ba:70:bb:c5: 7e:2f:2c:b2:83:49:4a:21:9d:94:79:95:0d:71:9c:67:1c:2c: ce:25:bf:36:69:22:87:f4:64:cd:b2:61:c6:bb:76:f4:ba:95: 18:32:98:b0:54:0a:db:c1:06:83:32:ec:c4:73:48:56:a7:c8: aa:ab:69:b5:50:09:a4:22:7b:d3:e2:f5:78:ec:34:1d:73:c7: 77:35:28:ba:f5:b2:12:fa:85:6d:f7:aa:d2:2d:a8:62:37:3c: 4e:b4:c5:b9:38:5f:d7:bb:fb:8c:2d:ef:29:4e:56:f2:f5:c8: 24:72:d4:b0:fb:3b:aa:86:7b:df:d1:2e:a1:d7:5f:d1:e5:ab: ba:ea:1a:c2:7d:b2:5a:42:9d:46:78:c3:31:0e:08:10:08:e4: 23:d5:dc:88:5d:7a:d9:ec:91:0b:ff:c8:0d:e0:82:2d:64:8f: 37:3c:a0:70:01:fc:c2:ac:fa:23:b2:82:4c:62:88:95:6a:b2: 00:0e:f2:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUxMDE4MTc0NTQ1WhcNMjUxMDI1MTc0NTQ1WjAYMRYwFAYD VQQDEw02OGYzZDI0OS1jODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlkavSLHxYX33Yt4Gmoi7QRfajGxPBrVJ9ATZfvke16vLFAse3zKsmJIJXIc Wph433KM8E+7BzN6zm3q8X5ELIVVWhQuXcgY69RCtL63XEkNT72rikk/Y2RKMT8W 9KmJ3LOQk4A64S/Kn22g07y00XOPCUCtm8gsryVTu8m49Qy+g8/FOYDjyxNABJFp xXcnY/EbZmyHcfb8JLlyN/F+N/wPWYvwvKLUgggsU0MnWEdetVIzJoCWmHZp4Ccl 25DunfmvKxZi/JBxuBRymfeo2kE55U9T/5M/PRv+VrSE/yZROuItfVt3MVSMuGaM w6eIsSCaTJPR5gdxH+HzLBv5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOv3rdry 6hknLdB/ogMYlD1eZybtMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP1jHxwa6iBgMz6hOtOG6j/Dp4auJUCmIguVH3okS1+93g0coFz5Jq dM0aucGNErpyADP1T9Fc9mN0hOJ/B7E2AiQr1bpwu8V+Lyyyg0lKIZ2UeZUNcZxn HCzOJb82aSKH9GTNsmHGu3b0upUYMpiwVArbwQaDMuzEc0hWp8iqq2m1UAmkInvT 4vV47DQdc8d3NSi69bIS+oVt96rSLahiNzxOtMW5OF/Xu/uMLe8pTlby9cgkctSw +zuqhnvf0S6h11/R5au66hrCfbJaQp1GeMMxDggQCOQj1dyIXXrZ7JEL/8gN4IIt ZI83PKBwAfzCrPojsoJMYoiVarIADvKu -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:43 2025 by rpki-client