$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: qniNYMCfRtNApCb4hWMWmd5hHV+C9Afkbs29uTgi3KY= Subject key identifier: F1:0D:20:48:40:A8:2B:0F:16:00:66:77:B6:14:69:B8:0B:24:24:9D Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 0225 Signing time: Wed 05 Nov 2025 02:09:31 +0000 Manifest this update: Wed 05 Nov 2025 02:09:31 +0000 Manifest next update: Wed 12 Nov 2025 02:09:31 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: EZSH9PcAiUaPscr1CSyzGWETxupbtuEitWMrQkyQ93s=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Nov 5 02:09:31 2025 GMT Not After : Nov 12 02:09:31 2025 GMT Subject: CN=690ab1db-86c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c1:e9:85:46:0f:80:97:29:62:31:1f:16:91: ee:b5:6f:c2:ff:a3:18:65:5c:d9:cf:a0:4f:04:1e: 7f:e4:ff:05:77:a8:21:41:db:0a:f4:9d:b7:97:ad: 96:ee:c8:63:bb:02:5c:9c:38:28:b9:f6:15:e2:77: 0a:f7:58:26:e1:c7:0f:ac:78:05:2d:23:d7:9e:5e: 87:25:61:63:d1:a0:a7:45:d0:3c:1a:83:34:8d:9d: 90:04:81:03:19:25:9b:67:23:2e:6c:d5:1d:6c:7c: df:77:d2:80:7c:a9:ac:a2:00:ab:21:38:98:ab:8e: a9:4b:e6:4d:28:5b:98:22:26:81:41:cd:63:e5:e5: 90:7f:64:32:da:79:38:3e:4c:62:af:30:e2:75:0e: a7:24:a9:49:b1:29:ad:65:99:14:d3:59:a3:94:91: 12:1e:81:40:94:a9:25:c0:23:81:df:eb:fd:a9:e4: 5f:16:30:05:0f:b8:0f:3c:5d:5d:b8:93:d1:80:26: eb:20:75:57:c1:9e:4a:e4:af:5d:7d:e8:76:c7:91: f9:1c:c0:fc:14:f5:26:6e:53:de:82:ae:e5:38:9c: a4:33:60:9d:63:b9:80:33:26:ea:7c:9d:b8:d3:e2: ec:dc:d3:f6:b8:f9:76:20:8d:23:cf:55:56:a4:95: 09:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0D:20:48:40:A8:2B:0F:16:00:66:77:B6:14:69:B8:0B:24:24:9D X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:1b:85:4a:19:a6:bd:c4:ab:87:56:18:10:93:4f:d5:de:67: 09:0e:2f:7c:bf:da:4f:f9:6d:67:bc:a1:90:86:dc:a3:50:c3: 51:db:e6:61:ed:2a:bf:11:9a:4b:80:63:9b:da:0f:26:12:c4: fa:f5:5a:d4:47:76:4d:2c:85:43:39:de:8d:4a:2b:86:3c:42: 85:07:fd:0d:b8:0c:d3:27:32:b6:a7:4e:ca:46:32:fe:4d:8a: 89:c0:13:6a:f9:82:3e:04:a3:ed:3c:7d:88:a1:cb:8e:54:11: 06:c0:a6:68:6f:5c:34:f5:5a:ea:e5:7e:0e:cd:ef:96:fa:7e: fe:e8:d9:14:f6:4a:02:fc:ee:f6:a8:cf:81:5f:13:55:3f:a6: 88:4c:f0:a2:cc:c8:e4:fc:31:d7:53:ad:56:91:c7:32:d8:fb: 42:cb:82:1d:fc:b6:7f:ae:fa:9b:f5:97:b8:c1:93:08:14:2f: 92:71:d6:f3:c5:c5:23:ff:01:4e:38:2f:7b:5a:7d:51:49:c5: 6d:c7:be:20:91:9d:f7:fe:92:f4:fc:d3:76:59:a9:63:60:02: 7c:87:c3:ef:6a:b9:db:38:ca:88:60:3c:ac:4e:f3:5d:eb:fa: ee:16:74:88:2b:ce:ce:fe:b6:1e:25:c5:55:b0:e4:5d:1f:f5: 95:d0:43:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUxMTA1MDIwOTMxWhcNMjUxMTEyMDIwOTMxWjAYMRYwFAYD VQQDEw02OTBhYjFkYi04NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sHphUYPgJcpYjEfFpHutW/C/6MYZVzZz6BPBB5/5P8Fd6ghQdsK9J23l62W 7shjuwJcnDgoufYV4ncK91gm4ccPrHgFLSPXnl6HJWFj0aCnRdA8GoM0jZ2QBIED GSWbZyMubNUdbHzfd9KAfKmsogCrITiYq46pS+ZNKFuYIiaBQc1j5eWQf2Qy2nk4 PkxirzDidQ6nJKlJsSmtZZkU01mjlJESHoFAlKklwCOB3+v9qeRfFjAFD7gPPF1d uJPRgCbrIHVXwZ5K5K9dfeh2x5H5HMD8FPUmblPegq7lOJykM2CdY7mAMybqfJ24 0+Ls3NP2uPl2II0jz1VWpJUJGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPENIEhA qCsPFgBmd7YUabgLJCSdMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyG4VKGaa9xKuHVhgQk0/V3mcJDi98v9pP+W1nvKGQhtyjUMNR2+Zh 7Sq/EZpLgGOb2g8mEsT69VrUR3ZNLIVDOd6NSiuGPEKFB/0NuAzTJzK2p07KRjL+ TYqJwBNq+YI+BKPtPH2IocuOVBEGwKZob1w09Vrq5X4Oze+W+n7+6NkU9koC/O72 qM+BXxNVP6aITPCizMjk/DHXU61Wkccy2PtCy4Id/LZ/rvqb9Ze4wZMIFC+Scdbz xcUj/wFOOC97Wn1RScVtx74gkZ33/pL0/NN2WaljYAJ8h8PvarnbOMqIYDysTvNd 6/ruFnSIK87O/rYeJcVVsORdH/WV0EPO -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:16 2025 by rpki-client