$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: TTccSkVxOu5Jf3+n4azM76W2iXcp2QRKLadBqdWpCTo= Subject key identifier: 42:56:94:ED:B7:7F:71:CE:9A:64:AE:7C:72:2D:61:CF:FD:03:1F:A0 Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: 0105 Signing time: Mon 03 Nov 2025 05:01:15 +0000 Manifest this update: Mon 03 Nov 2025 05:01:15 +0000 Manifest next update: Mon 10 Nov 2025 05:01:15 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: Y5DZHwei6I/GBSGR2FieUtq5p1QuTDQYCY+wUzrZ7g8=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Nov 3 05:01:15 2025 GMT Not After : Nov 10 05:01:15 2025 GMT Subject: CN=6908371b-2b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1d:f6:c0:f3:b3:f2:80:12:68:4c:c0:49:fb: b6:ac:58:01:74:a8:33:35:ee:7e:47:73:aa:cb:fd: a7:22:f4:cf:68:46:04:95:e5:57:a8:eb:d0:85:1b: f5:77:78:32:e9:41:b1:c7:0c:e6:c8:93:ff:84:b8: c6:88:bb:b0:ff:67:be:4e:c1:9f:28:28:36:81:b9: 7e:db:f0:6c:09:7f:4c:a8:df:86:6d:55:4d:ee:07: 34:3e:4c:f0:d7:46:1a:c1:58:79:95:8e:7b:e4:5f: 46:d4:cc:b9:62:9a:13:56:0f:ec:06:39:95:ea:27: 88:4e:0c:84:5a:ea:f4:6b:4e:09:a6:da:4b:43:2f: e6:3f:e6:7a:f3:00:0e:39:92:eb:c4:71:7b:e2:d9: 68:96:88:8b:53:e7:18:50:82:0a:0b:83:f4:49:e9: a3:34:0b:a4:86:d4:06:13:5a:93:8d:78:9b:e4:17: d5:f3:57:f1:98:ca:95:78:54:da:05:e0:72:0b:c2: 8c:f4:65:ca:df:cb:aa:25:96:7a:27:a7:9f:0e:ac: a1:f5:a6:42:6b:9d:bf:0f:9e:80:e6:fa:b8:bd:54: 23:e8:db:b9:dd:a9:c1:dd:23:1c:9b:75:f8:53:86: 4b:f4:d6:c3:c7:0f:8d:e5:7e:35:b8:34:75:51:2d: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:94:ED:B7:7F:71:CE:9A:64:AE:7C:72:2D:61:CF:FD:03:1F:A0 X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:19:6e:c8:68:e0:be:33:52:cc:ce:8b:9f:e2:7d:2a:69:11: f7:f6:dc:3b:b3:80:27:d5:d1:ad:ef:09:f5:3c:54:2e:05:41: 87:dd:e8:52:6e:90:26:05:fb:25:c2:85:8f:08:a9:42:1b:8f: 61:60:4c:00:d2:90:f0:7f:9f:1a:f5:d2:08:09:2c:69:0e:90: 02:c9:1b:e3:f5:c2:5a:71:ac:c9:ef:70:0a:b9:92:6e:98:2e: 4c:08:c1:e7:6c:63:b5:b9:12:ad:3d:dd:cc:26:77:6c:e6:de: 35:4a:fd:29:3a:c2:20:41:6c:2c:eb:1b:ed:f7:62:34:3b:11: 1d:a9:76:d4:bd:4c:79:90:84:5b:db:e6:98:78:75:d0:5f:54: 67:27:85:49:fd:f7:c7:eb:d9:7f:09:1c:a9:8d:69:07:4d:d2: d8:5b:d6:15:79:f7:61:96:55:4c:70:4e:dc:ba:45:e3:bc:2e: d0:e2:b4:e8:5f:8a:bd:6d:63:88:e4:46:bb:a5:dc:d8:a5:61: d0:bc:98:e0:64:54:73:20:53:ea:e4:66:8c:02:3a:fc:ac:09: d5:81:18:5a:f9:a9:43:d9:28:ad:af:24:e9:7d:ca:2a:6b:29: 41:05:20:1a:7a:74:c1:95:a2:55:e5:3d:23:fc:b3:df:3d:e4: 5a:9b:5e:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUxMTAzMDUwMTE1WhcNMjUxMTEwMDUwMTE1WjAYMRYwFAYD VQQDEw02OTA4MzcxYi0yYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2B32wPOz8oASaEzASfu2rFgBdKgzNe5+R3Oqy/2nIvTPaEYEleVXqOvQhRv1 d3gy6UGxxwzmyJP/hLjGiLuw/2e+TsGfKCg2gbl+2/BsCX9MqN+GbVVN7gc0Pkzw 10YawVh5lY575F9G1My5YpoTVg/sBjmV6ieITgyEWur0a04JptpLQy/mP+Z68wAO OZLrxHF74tloloiLU+cYUIIKC4P0SemjNAukhtQGE1qTjXib5BfV81fxmMqVeFTa BeByC8KM9GXK38uqJZZ6J6efDqyh9aZCa52/D56A5vq4vVQj6Nu53anB3SMcm3X4 U4ZL9NbDxw+N5X41uDR1US2+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJWlO23 f3HOmmSufHItYc/9Ax+gMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXGW7IaOC+M1LMzouf4n0qaRH39tw7s4An1dGt7wn1PFQuBUGH3ehS bpAmBfslwoWPCKlCG49hYEwA0pDwf58a9dIICSxpDpACyRvj9cJacazJ73AKuZJu mC5MCMHnbGO1uRKtPd3MJnds5t41Sv0pOsIgQWws6xvt92I0OxEdqXbUvUx5kIRb 2+aYeHXQX1RnJ4VJ/ffH69l/CRypjWkHTdLYW9YVefdhllVMcE7cukXjvC7Q4rTo X4q9bWOI5Ea7pdzYpWHQvJjgZFRzIFPq5GaMAjr8rAnVgRha+alD2SitryTpfcoq aylBBSAaenTBlaJV5T0j/LPfPeRam17p -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:08 2025 by rpki-client