$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: XNlKjtO+cZHLw8jrlOszb3/aVod4bmVX+w9vjWLpY9E= Subject key identifier: A2:8D:A2:35:5F:68:FB:2E:08:7F:0F:6E:ED:42:EA:24:EE:C4:A6:79 Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03FE Signing time: Wed 05 Nov 2025 00:32:30 +0000 Manifest this update: Wed 05 Nov 2025 00:32:30 +0000 Manifest next update: Wed 12 Nov 2025 00:32:30 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: Qpp609RumtpPVG3DxsFy2zCu8lltMOb757GJBnSM80E=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Nov 5 00:32:30 2025 GMT Not After : Nov 12 00:32:30 2025 GMT Subject: CN=690a9b1e-10e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:11:15:e5:69:7a:f3:3a:92:7c:50:9b:47: eb:6d:d6:fa:33:28:c4:1d:46:43:60:02:2a:de:af: 27:81:40:fb:45:ec:d6:21:23:29:d3:83:56:6a:89: 73:58:ff:26:54:3b:52:f5:72:ac:67:b4:98:a8:ef: ea:21:1f:8c:e2:63:be:2d:1f:d5:80:79:a3:65:76: b9:5a:ce:20:2d:97:fb:d6:56:e3:a6:c7:9b:2e:47: a8:d9:75:45:1d:cf:71:4e:85:a2:6e:7a:53:de:97: d8:c3:73:c5:c9:7b:e2:26:db:56:9b:1c:c8:75:48: 74:a2:8e:e0:79:92:66:c3:02:11:40:2a:4b:03:37: 64:7e:06:33:81:59:bf:5b:e8:cd:f6:8d:39:87:6e: bb:ca:ba:66:39:d6:c4:b2:9a:cc:14:d5:97:3f:81: ab:4e:f5:08:af:21:74:e4:d6:14:70:ba:1f:9e:35: 07:2f:de:29:89:c0:91:9a:b5:81:9f:c2:ff:a2:b9: 7f:74:96:f2:a5:87:6d:0b:e7:98:22:47:1c:73:6f: ed:d0:31:f3:e2:de:30:0f:16:7f:da:bb:ea:58:cb: b1:f3:6a:0f:5b:e2:9b:69:87:67:13:40:d8:c3:ca: e2:a5:b7:f2:0b:3e:be:56:32:ab:12:5c:5c:25:a3: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8D:A2:35:5F:68:FB:2E:08:7F:0F:6E:ED:42:EA:24:EE:C4:A6:79 X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:77:f1:ff:f5:3b:7c:3f:26:28:55:d9:7a:36:0b:4b:4f:16: bc:c7:e8:89:fe:fc:ef:f1:f7:61:93:1b:ff:30:83:60:f1:e9: 22:82:f7:31:58:38:37:3a:80:de:42:00:0d:56:e9:30:6e:a7: ee:28:10:0d:06:d9:f2:af:f9:c7:76:ce:11:2a:09:5d:3d:ce: 94:56:18:53:8d:45:c4:22:f1:6d:fe:04:6b:d0:34:d9:8b:e1: 32:b8:b8:b9:c9:db:38:a5:30:05:33:0b:b4:59:34:40:ed:c7: 8e:d0:06:e3:b3:fb:97:00:07:b2:9b:65:6f:c9:e0:bc:36:4b: 24:54:f4:20:22:81:67:9b:23:58:17:7e:8f:f5:2c:c7:12:65: 6b:ca:ca:44:56:1b:24:e1:8a:53:f2:f8:10:9c:56:46:25:8d: d6:c1:b7:8b:8a:be:8d:ba:0b:45:19:ad:4d:d2:75:98:79:d6: 04:dd:1d:40:e0:31:bc:02:f3:b9:c4:ba:2f:cf:c1:13:33:33: 36:e6:08:8d:12:c6:2c:b5:61:bf:0d:69:f3:d8:e3:44:64:f2: 7e:5d:85:3c:10:dd:a8:00:de:fe:c3:8d:6e:bb:4b:19:b0:c4: 5e:12:34:f1:a7:f9:1a:3b:6a:cd:0f:86:f1:fc:79:02:75:b2: a9:c0:cd:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUxMTA1MDAzMjMwWhcNMjUxMTEyMDAzMjMwWjAYMRYwFAYD VQQDEw02OTBhOWIxZS0xMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfARFeVpevM6knxQm0frbdb6MyjEHUZDYAIq3q8ngUD7RezWISMp04NWaolz WP8mVDtS9XKsZ7SYqO/qIR+M4mO+LR/VgHmjZXa5Ws4gLZf71lbjpsebLkeo2XVF Hc9xToWibnpT3pfYw3PFyXviJttWmxzIdUh0oo7geZJmwwIRQCpLAzdkfgYzgVm/ W+jN9o05h267yrpmOdbEsprMFNWXP4GrTvUIryF05NYUcLofnjUHL94picCRmrWB n8L/orl/dJbypYdtC+eYIkccc2/t0DHz4t4wDxZ/2rvqWMux82oPW+KbaYdnE0DY w8ripbfyCz6+VjKrElxcJaO0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKNojVf aPsuCH8Pbu1C6iTuxKZ5MB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBad/H/9Tt8PyYoVdl6NgtLTxa8x+iJ/vzv8fdhkxv/MINg8ekigvcx WDg3OoDeQgANVukwbqfuKBANBtnyr/nHds4RKgldPc6UVhhTjUXEIvFt/gRr0DTZ i+EyuLi5yds4pTAFMwu0WTRA7ceO0Abjs/uXAAeym2VvyeC8NkskVPQgIoFnmyNY F36P9SzHEmVryspEVhsk4YpT8vgQnFZGJY3WwbeLir6NugtFGa1N0nWYedYE3R1A 4DG8AvO5xLovz8ETMzM25giNEsYstWG/DWnz2ONEZPJ+XYU8EN2oAN7+w41uu0sZ sMReEjTxp/kaO2rND4bx/HkCdbKpwM1v -----END CERTIFICATE-----Generated at Wed Nov 5 13:47:44 2025 by rpki-client