$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json) Hash identifier: xvgGaOUtcTbbmjSqquO6RF3ydgvaTys3VPuGOdD6n4A= Subject key identifier: 5D:6D:CD:A0:86:22:63:30:C6:88:E0:8A:D6:07:92:5B:A8:BC:D6:C6 Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft Manifest number: 072B Signing time: Tue 04 Nov 2025 21:55:09 +0000 Manifest this update: Tue 04 Nov 2025 21:55:08 +0000 Manifest next update: Tue 11 Nov 2025 21:55:08 +0000 Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: EbVkVwYeHdPunQ3+kvKFWxDO+X9FAxOCbvCqCm360SY=) 2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: Nov 4 21:55:08 2025 GMT Not After : Nov 11 21:55:08 2025 GMT Subject: CN=690a763d-bdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:ef:75:fb:b2:14:55:52:0a:15:ab:17:75: 02:81:34:bb:74:dd:8c:2a:fe:06:9c:ee:6b:2b:68: a5:00:f1:51:df:6e:8a:4a:24:83:d2:0e:25:82:5c: 3f:76:c3:89:19:32:ec:7a:d0:e1:59:76:f0:e9:b1: ee:91:11:25:cc:dc:c6:55:6e:52:bc:02:40:a4:65: 54:ea:ab:70:f1:a0:c9:c2:32:d1:c2:36:f5:5e:df: d4:04:79:7e:34:da:02:30:7e:27:8c:9b:81:6d:7a: 0a:7d:60:4f:eb:4d:70:c5:59:fe:60:df:2f:6d:93: 53:68:c3:a3:1f:ea:d6:a4:ea:2c:c1:31:60:1a:50: 49:48:f5:e0:7a:f1:bb:c2:f4:73:58:54:05:6d:ca: 99:dc:4c:5b:c0:f3:76:90:62:ee:cd:f2:6c:6b:39: 69:32:91:11:ac:a2:02:5a:54:5e:48:03:0d:fc:06: ae:80:64:ad:d1:3b:10:36:7e:b2:c9:66:c2:78:bb: b5:28:4b:8b:d6:87:84:05:d1:f9:83:53:65:69:dc: b2:02:ad:74:8b:bf:16:29:f7:ac:5f:fa:95:2b:59: a6:a8:f6:16:17:23:84:2c:e7:7d:57:56:d8:9f:87: 0b:1b:c1:39:3e:d9:76:21:e4:62:b5:d8:c1:c3:5d: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6D:CD:A0:86:22:63:30:C6:88:E0:8A:D6:07:92:5B:A8:BC:D6:C6 X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8d:b1:22:20:52:96:7f:79:88:3b:e1:77:34:bd:94:16:9f: ed:33:b5:9f:31:45:71:cc:c0:b8:f5:49:af:85:65:ec:0e:e9: 24:01:23:f9:47:8f:5a:ec:b4:26:ce:0d:53:da:2e:6d:19:1c: 7f:eb:ac:6f:e8:b4:d9:c3:57:0c:48:9a:c2:43:99:cc:b3:fd: 82:9a:0d:42:44:d7:2c:91:b1:32:a4:cc:d4:06:d8:05:1c:d9: fd:83:88:87:4d:a2:ad:f3:7a:79:d4:8a:84:17:81:09:b7:a0: 81:a8:8c:ba:93:e5:1e:06:e0:aa:c4:22:50:66:41:80:7f:07: d8:70:00:19:2c:1f:05:7b:05:c0:8e:7e:28:ac:85:d2:50:21: a6:19:16:73:0f:81:be:7e:95:f5:33:1b:26:72:1f:eb:ae:be: 75:d5:ae:9b:ce:3b:a5:9a:f4:29:a5:63:7c:97:56:bf:49:a8: 0b:4c:8a:83:03:1b:b8:ef:c5:01:1d:49:26:85:08:cd:ac:e0: af:a0:6a:16:98:53:90:c5:55:83:7b:01:00:28:97:27:c9:b0: b0:2f:2d:e7:49:1b:81:d4:74:50:22:e8:61:1b:52:f0:43:a7: f5:ac:61:71:8f:26:9f:c5:4b:38:29:43:a7:8a:43:90:59:2e: 95:80:32:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjUxMTA0MjE1NTA4WhcNMjUxMTExMjE1NTA4WjAYMRYwFAYD VQQDEw02OTBhNzYzZC1iZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovnvdfuyFFVSChWrF3UCgTS7dN2MKv4GnO5rK2ilAPFR326KSiSD0g4lglw/ dsOJGTLsetDhWXbw6bHukRElzNzGVW5SvAJApGVU6qtw8aDJwjLRwjb1Xt/UBHl+ NNoCMH4njJuBbXoKfWBP601wxVn+YN8vbZNTaMOjH+rWpOoswTFgGlBJSPXgevG7 wvRzWFQFbcqZ3ExbwPN2kGLuzfJsazlpMpERrKICWlReSAMN/AaugGSt0TsQNn6y yWbCeLu1KEuL1oeEBdH5g1NladyyAq10i78WKfesX/qVK1mmqPYWFyOELOd9V1bY n4cLG8E5Ptl2IeRitdjBw12H3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1tzaCG ImMwxojgitYHkluovNbGMB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ dERfVlExaVRqZEh6R2hhUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgjbEiIFKWf3mIO+F3NL2UFp/tM7WfMUVxzMC49UmvhWXsDukkASP5 R49a7LQmzg1T2i5tGRx/66xv6LTZw1cMSJrCQ5nMs/2Cmg1CRNcskbEypMzUBtgF HNn9g4iHTaKt83p51IqEF4EJt6CBqIy6k+UeBuCqxCJQZkGAfwfYcAAZLB8FewXA jn4orIXSUCGmGRZzD4G+fpX1Mxsmch/rrr511a6bzjulmvQppWN8l1a/SagLTIqD Axu478UBHUkmhQjNrOCvoGoWmFOQxVWDewEAKJcnybCwLy3nSRuB1HRQIuhhG1Lw Q6f1rGFxjyafxUs4KUOnikOQWS6VgDJ0 -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:18 2025 by rpki-client