$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: vDIieI03nhviu/gg8rscgasWWJ+kEYIgm2riHc6G7kU= Subject key identifier: 57:00:51:87:0B:43:6B:43:3F:90:C8:40:59:F1:C8:AE:5F:6E:55:F3 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 1319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 1303 Signing time: Tue 04 Nov 2025 17:07:35 +0000 Manifest this update: Tue 04 Nov 2025 17:07:35 +0000 Manifest next update: Tue 11 Nov 2025 17:07:35 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: yuGZVHuDsEcdnt1dartl4L53A5hKwo2m6s+MoP/2dwA=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4889 (0x1319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Nov 4 17:07:35 2025 GMT Not After : Nov 11 17:07:35 2025 GMT Subject: CN=690a32d7-9a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:9a:04:50:30:fa:65:30:e7:b0:21:8b:78: 61:29:10:d2:b6:b6:cd:08:db:b6:af:f2:82:b8:5d: 74:30:fe:a5:2c:3c:f8:c0:3b:b2:f0:1c:f8:fa:9d: 63:56:0c:8f:e2:78:04:cf:c8:5f:94:8f:5b:a5:2b: 83:3f:b0:fb:ad:c8:da:ab:a3:b0:cf:54:75:93:04: 40:c9:9c:e9:73:98:44:8a:46:ac:0f:3f:38:e8:ca: a9:34:1b:fc:b0:95:43:51:9a:4a:4b:23:5f:c3:c6: 2c:e4:2f:d6:0b:6b:be:be:dd:92:e0:fb:a1:bf:79: 92:1c:00:8a:fe:b8:33:a3:58:a6:b0:2e:32:82:41: 05:40:bf:0c:29:e3:6e:e5:6a:70:98:c7:89:05:f1: ae:50:67:4d:e7:bd:11:fc:bf:0e:f0:82:57:85:4c: 73:52:ac:07:f2:81:55:ac:85:31:d3:42:ab:ef:33: cd:34:63:64:19:25:39:7e:8d:97:f3:8c:92:cd:c7: 77:5f:60:bb:5e:31:5a:45:60:5b:d8:96:7b:93:f9: 34:06:6d:2a:42:3d:df:28:79:46:21:ca:39:2b:3d: 47:b9:f6:dc:4b:6a:08:39:31:eb:45:e2:87:db:4e: 6d:c3:cd:f8:9c:a2:78:17:6c:ed:ac:e6:4f:14:90: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:00:51:87:0B:43:6B:43:3F:90:C8:40:59:F1:C8:AE:5F:6E:55:F3 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e1:2b:bf:99:4b:fb:03:68:21:c9:84:f5:9f:87:4c:48:05: 51:1d:f8:d8:16:88:45:21:13:de:3d:ed:9b:6d:ef:0a:cd:ac: 33:9a:fc:f9:7c:b4:78:2a:e8:e2:f8:03:76:62:f9:3a:c7:35: c6:39:c3:e4:e6:c9:4c:76:7f:f0:8e:ff:78:12:17:8c:58:38: 66:fd:b2:8f:e1:44:c8:ce:d5:a4:20:b2:75:2a:52:9f:4a:a7: 75:27:95:06:d9:66:cc:9b:f4:39:af:38:d6:2c:79:ff:72:95: 07:fc:20:70:c9:bd:9c:c0:6f:66:23:36:95:55:2a:b0:ab:f6: 52:eb:58:26:a2:07:ff:20:3c:ce:ec:0e:db:97:6d:6e:c6:b6: cd:dc:55:f1:76:b4:a6:4c:b0:95:3e:fc:a8:25:d2:fd:3e:9e: ef:0b:4e:3d:0a:e9:1a:02:39:50:ee:79:16:e4:b4:8f:0c:96: 71:55:91:78:c0:a9:9b:b4:03:8c:ab:fd:ad:3f:1a:2d:2a:50: 40:af:cd:d0:bf:39:8c:76:e5:e4:6f:62:55:eb:34:ef:59:46: 85:9a:3f:fa:a5:21:69:bb:0e:aa:dc:df:ac:7c:63:09:13:99: 9f:79:de:5f:8e:6e:41:cc:fc:ba:b1:1d:b6:5b:60:3d:33:5e: 34:13:e5:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUxMTA0MTcwNzM1WhcNMjUxMTExMTcwNzM1WjAYMRYwFAYD VQQDEw02OTBhMzJkNy05YTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW+aBFAw+mUw57Ahi3hhKRDStrbNCNu2r/KCuF10MP6lLDz4wDuy8Bz4+p1j VgyP4ngEz8hflI9bpSuDP7D7rcjaq6Owz1R1kwRAyZzpc5hEikasDz846MqpNBv8 sJVDUZpKSyNfw8Ys5C/WC2u+vt2S4Puhv3mSHACK/rgzo1imsC4ygkEFQL8MKeNu 5WpwmMeJBfGuUGdN570R/L8O8IJXhUxzUqwH8oFVrIUx00Kr7zPNNGNkGSU5fo2X 84ySzcd3X2C7XjFaRWBb2JZ7k/k0Bm0qQj3fKHlGIco5Kz1HufbcS2oIOTHrReKH 205tw834nKJ4F2ztrOZPFJBTxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcAUYcL Q2tDP5DIQFnxyK5fblXzMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA34Su/mUv7A2ghyYT1n4dMSAVRHfjYFohFIRPePe2bbe8Kzawzmvz5 fLR4Kuji+AN2Yvk6xzXGOcPk5slMdn/wjv94EheMWDhm/bKP4UTIztWkILJ1KlKf Sqd1J5UG2WbMm/Q5rzjWLHn/cpUH/CBwyb2cwG9mIzaVVSqwq/ZS61gmogf/IDzO 7A7bl21uxrbN3FXxdrSmTLCVPvyoJdL9Pp7vC049CukaAjlQ7nkW5LSPDJZxVZF4 wKmbtAOMq/2tPxotKlBAr83QvzmMduXkb2JV6zTvWUaFmj/6pSFpuw6q3N+sfGMJ E5mfed5fjm5BzPy6sR22W2A9M140E+Ve -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:15 2025 by rpki-client