$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: llF+WxPQ1wsFPoagKujTgKAUvuVP+G/8tQJ41P30W5U= Subject key identifier: 2A:2F:20:E0:05:73:98:96:4A:6D:4E:95:72:61:F9:F3:50:BF:69:72 Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 018E Signing time: Sun 19 Oct 2025 06:10:58 +0000 Manifest this update: Sun 19 Oct 2025 06:10:57 +0000 Manifest next update: Sun 26 Oct 2025 06:10:57 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: c6szOvSlxbO1jnJdoqJoKQXbir+TI+v0MKScRV13Mnk=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: x2IufiQn+o6fO8TwkuSy4JUlOZ9Y/ivtBlJ3m5qHF8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: Oct 19 06:10:57 2025 GMT Not After : Oct 26 06:10:57 2025 GMT Subject: CN=68f480f2-260e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:78:86:84:65:4d:61:69:f1:ad:92:48:b0: cd:38:b4:ee:98:c9:3a:68:ae:51:67:00:3a:b9:0c: 9f:b5:15:2f:86:30:60:d0:8d:de:56:71:64:14:45: 26:d4:fe:d1:ec:07:25:fb:d1:90:8a:55:a0:01:aa: 24:6f:22:33:2e:74:98:12:32:06:01:c5:34:f4:a3: 6c:0e:f0:f9:09:9c:51:71:a9:2b:92:fb:2d:43:c6: 86:3a:6f:4b:77:ae:3a:f7:82:60:af:5f:f7:37:9a: bf:d9:f5:6a:ed:7d:7e:af:7e:40:a6:a6:72:a6:a2: e4:5a:58:1a:53:47:dc:12:09:9c:6c:59:12:80:41: 82:ff:66:d2:79:98:68:b3:d5:61:32:96:40:f1:6e: 23:6d:90:e8:3c:dd:1a:fe:e4:09:c2:40:1e:d4:27: e4:c2:10:fc:96:c0:b8:8d:a3:9f:b0:a0:db:0b:e1: 97:47:96:98:6a:22:e7:a0:d0:b3:5c:a8:41:68:7e: b0:12:00:d7:7a:7c:0b:31:d1:59:1e:2c:8b:39:d1: 0b:6b:65:36:a7:bb:18:4d:6a:83:f5:93:23:5d:bd: 66:a6:e0:f0:c9:9a:59:c5:7a:85:c6:d3:69:f1:78: fc:13:b3:a2:90:d3:90:02:7e:ba:5f:2f:45:46:bd: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:20:E0:05:73:98:96:4A:6D:4E:95:72:61:F9:F3:50:BF:69:72 X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ec:35:51:e5:5c:55:ae:44:6a:e7:a0:41:ec:1f:a3:15:39: 92:c0:c8:48:25:b5:d0:47:0f:67:3d:c1:67:2b:1c:1d:72:28: b5:fe:95:6a:71:49:1e:57:5e:22:48:9e:61:72:93:67:51:39: 4f:21:b3:b0:b2:b4:f7:15:72:d6:d2:2a:3b:91:e8:e6:c3:f4: 04:d0:fc:15:81:df:93:3d:78:47:30:6c:e6:55:51:f6:01:06: ae:2a:96:97:09:26:35:c4:0f:d7:e3:bd:ad:eb:fe:1a:d2:9e: 8e:d5:97:a5:99:00:f9:6b:8f:7f:2d:c1:23:85:66:de:6f:ab: 88:69:ba:77:2f:23:ac:c0:cd:f8:6c:12:19:67:2b:1f:b7:57: ca:cb:7e:78:1f:78:93:e4:76:80:64:1e:0b:a9:1d:c4:49:b3: 51:86:ca:b1:31:16:5f:15:ac:b2:c1:e4:c0:f4:e9:4a:f8:d7: e1:33:65:ee:20:76:d5:51:19:5c:c6:24:16:15:78:ac:08:66: 98:4f:7c:d7:11:9e:47:35:23:79:15:54:18:fd:18:45:4e:92: 47:d4:fe:b1:ce:cf:60:83:72:f5:20:bb:17:ac:8f:25:7f:cb: 96:28:a0:24:1c:41:3b:e8:9a:b8:6b:da:c4:d8:2a:4d:b3:0c: 78:99:c9:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjUxMDE5MDYxMDU3WhcNMjUxMDI2MDYxMDU3WjAYMRYwFAYD VQQDEw02OGY0ODBmMi0yNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZh4hoRlTWFp8a2SSLDNOLTumMk6aK5RZwA6uQyftRUvhjBg0I3eVnFkFEUm 1P7R7Acl+9GQilWgAaokbyIzLnSYEjIGAcU09KNsDvD5CZxRcakrkvstQ8aGOm9L d64694Jgr1/3N5q/2fVq7X1+r35ApqZypqLkWlgaU0fcEgmcbFkSgEGC/2bSeZho s9VhMpZA8W4jbZDoPN0a/uQJwkAe1CfkwhD8lsC4jaOfsKDbC+GXR5aYaiLnoNCz XKhBaH6wEgDXenwLMdFZHiyLOdELa2U2p7sYTWqD9ZMjXb1mpuDwyZpZxXqFxtNp 8Xj8E7OikNOQAn66Xy9FRr0baQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCovIOAF c5iWSm1OlXJh+fNQv2lyMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz7DVR5VxVrkRq56BB7B+jFTmSwMhIJbXQRw9nPcFnKxwdcii1/pVq cUkeV14iSJ5hcpNnUTlPIbOwsrT3FXLW0io7kejmw/QE0PwVgd+TPXhHMGzmVVH2 AQauKpaXCSY1xA/X472t6/4a0p6O1ZelmQD5a49/LcEjhWbeb6uIabp3LyOswM34 bBIZZysft1fKy354H3iT5HaAZB4LqR3ESbNRhsqxMRZfFayyweTA9OlK+NfhM2Xu IHbVURlcxiQWFXisCGaYT3zXEZ5HNSN5FVQY/RhFTpJH1P6xzs9gg3L1ILsXrI8l f8uWKKAkHEE76Jq4a9rE2CpNswx4mcno -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:16 2025 by rpki-client