$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: Z6tc3JQ59LGwsc3BjZu5eg7hvaTJqRESGLgXDp/H1YQ= Subject key identifier: CD:83:0B:FC:92:36:B9:6E:FF:89:77:D4:AD:62:9C:43:3D:FE:45:11 Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 281E Signing time: Sat 18 Oct 2025 16:13:14 +0000 Manifest this update: Sat 18 Oct 2025 16:13:13 +0000 Manifest next update: Sat 25 Oct 2025 16:13:13 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: sf+wYAiU99Ro21D811h6qJdT+1hgqDnFgMG6hh1JXYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: Oct 18 16:13:13 2025 GMT Not After : Oct 25 16:13:13 2025 GMT Subject: CN=68f3bc99-4083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:dd:62:2c:5b:3e:2b:c4:76:4f:b9:56:bf: 3a:7c:13:b3:a9:82:11:ec:14:b2:ed:6d:e7:fb:b2: e4:12:a3:18:68:25:1f:ea:57:91:23:10:50:8e:3b: bd:72:f9:03:ba:59:49:a5:40:d9:33:ee:17:5e:3e: ed:b3:03:39:ce:8f:8d:15:76:1d:a0:cb:47:5d:a8: 22:73:e0:8d:e6:85:d5:98:02:ae:c4:c0:b1:71:3d: f6:bf:93:36:42:39:32:19:01:78:ac:0b:e3:9d:f4: 62:30:c3:5b:30:d6:44:c7:10:00:02:99:62:e9:55: 94:b6:69:94:8d:a6:60:e0:61:da:bb:35:c8:04:02: 8b:93:76:df:4d:6f:97:86:a7:14:59:ff:b4:1d:36: a6:30:ac:6d:f2:f1:9f:72:ae:d5:cc:50:64:7c:c9: 3c:e9:77:65:b4:ba:f1:89:85:18:aa:13:3c:2d:c4: 5e:61:39:6d:7f:50:0e:c8:bb:c6:1a:d1:d6:34:68: a2:59:45:89:79:be:7d:90:f2:96:30:bf:fd:90:47: 15:7d:2d:55:19:1b:4f:2d:1a:d4:00:ac:02:b6:ca: 79:b1:81:b3:da:5b:b0:19:ab:60:c4:01:c3:a4:44: 41:33:10:e4:e1:4f:24:46:9a:f0:eb:ef:1b:86:d9: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:83:0B:FC:92:36:B9:6E:FF:89:77:D4:AD:62:9C:43:3D:FE:45:11 X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:98:58:0f:4c:5f:9c:df:f3:77:21:cd:cf:bb:c2:6f:85:f1: b3:88:fc:6a:0d:78:d2:e8:21:01:e3:c9:27:23:05:86:49:5c: fd:73:a9:a8:55:b1:0a:2b:46:00:7e:dd:86:b5:a7:15:52:77: e7:a0:24:18:80:cd:81:78:fc:3f:6a:c6:88:58:f1:e5:a4:9f: 95:71:c1:70:19:22:db:c9:84:1c:04:67:bc:a2:d0:4b:66:d6: 93:5f:47:a1:23:78:c1:d4:14:99:47:53:85:e8:49:0e:35:4e: 79:80:30:c0:d7:0c:6e:c1:f0:69:0e:f5:25:61:e8:4a:ff:e4: bb:cd:0a:d0:77:9d:46:ef:5d:82:be:f3:33:bf:70:d8:00:0b: 1c:84:ca:80:48:55:66:67:cd:1c:3f:77:aa:2b:06:7e:e8:3a: ea:04:89:29:f4:35:e3:7f:1a:23:ea:ac:94:39:5a:d8:15:75: 04:ea:3d:7e:a2:48:52:f4:26:fd:ff:7e:e0:83:5c:07:55:77: 57:8f:fe:74:2a:c6:a2:69:4f:03:da:73:a6:3a:a7:a8:e4:d2: 15:87:5d:0d:56:be:b6:66:1a:9e:c8:e6:f3:07:c3:2f:61:ba: 36:d6:35:b3:7f:01:83:c4:cc:5a:8c:50:58:18:42:69:7d:86: 66:c7:37:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjUxMDE4MTYxMzEzWhcNMjUxMDI1MTYxMzEzWjAYMRYwFAYD VQQDEw02OGYzYmM5OS00MDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn7dYixbPivEdk+5Vr86fBOzqYIR7BSy7W3n+7LkEqMYaCUf6leRIxBQjju9 cvkDullJpUDZM+4XXj7tswM5zo+NFXYdoMtHXagic+CN5oXVmAKuxMCxcT32v5M2 QjkyGQF4rAvjnfRiMMNbMNZExxAAApli6VWUtmmUjaZg4GHauzXIBAKLk3bfTW+X hqcUWf+0HTamMKxt8vGfcq7VzFBkfMk86XdltLrxiYUYqhM8LcReYTltf1AOyLvG GtHWNGiiWUWJeb59kPKWML/9kEcVfS1VGRtPLRrUAKwCtsp5sYGz2luwGatgxAHD pERBMxDk4U8kRprw6+8bhtmWtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2DC/yS Nrlu/4l31K1inEM9/kURMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAImFgPTF+c3/N3Ic3Pu8JvhfGziPxqDXjS6CEB48knIwWGSVz9c6mo VbEKK0YAft2GtacVUnfnoCQYgM2BePw/asaIWPHlpJ+VccFwGSLbyYQcBGe8otBL ZtaTX0ehI3jB1BSZR1OF6EkONU55gDDA1wxuwfBpDvUlYehK/+S7zQrQd51G712C vvMzv3DYAAschMqASFVmZ80cP3eqKwZ+6DrqBIkp9DXjfxoj6qyUOVrYFXUE6j1+ okhS9Cb9/37gg1wHVXdXj/50KsaiaU8D2nOmOqeo5NIVh10NVr62ZhqeyObzB8Mv Ybo21jWzfwGDxMxajFBYGEJpfYZmxzdO -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:10 2025 by rpki-client