$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: SNu+5niQHv9P8Oo+dV0lHd+e49KmPMHabiaQ2u+iza4= Subject key identifier: D9:E7:BF:8F:43:C8:AA:B5:B1:68:09:36:BD:4C:26:09:A0:08:07:88 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3FBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3B4B Signing time: Tue 04 Nov 2025 14:20:12 +0000 Manifest this update: Tue 04 Nov 2025 14:20:12 +0000 Manifest next update: Tue 11 Nov 2025 14:20:12 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: vi7gO14qpxJImKNGAaki9AW9jq9LC3pxfcPmXByuka0=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: zIbTXKElzSRDJDgFmgpHOKMMizwQLMFjRvUcTHCmSxI=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: +mgdTNP414SUTOGaWf8OsfORlNcz2M/R4gZld0HJ9Ck=) 4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: zGDGvlgT7VbRq78nqt2KCJawvdgk5RBzL4wyIDNIpkw=) 5: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: o3x3WNu8DVpOALptWI63rwh2Z21Ks2owpGrEUHSGlCk=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: TQSzjpxrOYYy8gpn8cpyl7UgdqE6NAtOL8QTPBk1Mrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16318 (0x3fbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Nov 4 14:20:12 2025 GMT Not After : Nov 11 14:20:12 2025 GMT Subject: CN=690a0b9c-b215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:93:12:36:fa:65:8d:4d:5d:8a:ad:04:df: 71:5f:1f:2f:9c:f7:f6:f2:6b:a7:db:67:ee:1d:df: ff:a8:b8:64:6c:80:c8:4a:34:48:22:bd:b6:cd:7b: 31:b2:0a:94:ab:5e:33:b2:4e:74:52:a2:65:89:aa: 36:e6:e0:a9:8a:d7:e4:d5:28:58:26:18:f2:d8:1a: ad:93:bd:34:4b:ff:8e:b4:f9:c5:3d:24:91:ae:2f: b8:98:9d:a1:22:53:20:29:5d:2f:e8:f1:fb:ac:e0: 19:da:e9:1d:45:a0:28:4d:0a:92:61:a8:b3:07:db: bf:e0:d0:79:a2:f4:17:49:ea:ce:bf:89:87:83:60: e5:8e:26:33:a8:b7:b4:93:05:93:de:74:e7:f2:13: f2:de:50:ce:d6:cd:9a:fb:de:50:79:26:2b:a5:dc: 0f:c5:5b:51:02:53:38:94:dc:5a:59:b0:47:51:d1: 7d:cb:99:f8:18:4e:21:d6:85:60:da:48:9b:cd:ff: 70:93:56:93:ed:87:52:69:c0:26:78:39:59:38:ee: 49:cc:45:c0:89:d9:b9:03:95:c3:7a:df:b2:ba:2b: 8a:a8:36:a8:c2:ee:d7:b6:3d:0d:f6:d6:e8:fe:f4: c0:f2:4a:8f:a5:be:a1:ed:a9:d4:46:9b:75:44:c8: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:BF:8F:43:C8:AA:B5:B1:68:09:36:BD:4C:26:09:A0:08:07:88 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:54:5f:eb:29:be:5b:d0:a5:6b:87:93:c2:0f:b0:11:1a:b6: 1c:04:f5:42:b7:9e:c0:bc:32:bf:b5:c4:41:cd:af:7f:43:7e: ac:75:51:36:71:bd:9b:04:a0:01:47:f0:96:60:98:e1:47:75: 63:e2:1b:c2:8e:2c:d8:c7:28:fd:01:86:7b:14:95:8c:c5:db: 72:65:a8:a5:b7:74:e6:8f:30:c9:57:76:10:ff:02:55:29:64: d4:87:1b:a8:b7:b0:87:95:48:3f:9f:30:74:57:97:5d:d8:c9: d0:a2:db:cd:90:8e:8b:6b:3e:8d:e1:71:26:50:67:49:f5:75: 65:f8:32:e0:95:3b:72:bc:6f:b5:71:39:0e:59:e6:a1:9d:92: a5:0f:d7:d9:11:a9:e0:66:42:be:2a:f7:80:44:bf:e5:0c:76: 58:17:5f:de:31:60:ae:39:fc:ee:df:9c:58:77:c8:cd:a0:fe: 2b:cf:90:b7:b1:ac:be:59:71:28:b6:88:e8:d0:6b:76:1b:90: fe:a7:e3:be:68:ba:eb:b5:0d:6b:ec:5a:29:17:cf:2b:6f:95: 1d:b9:51:83:e2:37:8b:92:53:17:71:66:ff:b3:57:63:2f:cd: 6b:82:ff:07:ca:9f:8a:72:2c:23:f0:08:fb:c2:a7:41:7c:b5: 20:9c:d6:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUxMTA0MTQyMDEyWhcNMjUxMTExMTQyMDEyWjAYMRYwFAYD VQQDEw02OTBhMGI5Yy1iMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuU2TEjb6ZY1NXYqtBN9xXx8vnPf28mun22fuHd//qLhkbIDISjRIIr22zXsx sgqUq14zsk50UqJliao25uCpitfk1ShYJhjy2Bqtk700S/+OtPnFPSSRri+4mJ2h IlMgKV0v6PH7rOAZ2ukdRaAoTQqSYaizB9u/4NB5ovQXSerOv4mHg2DljiYzqLe0 kwWT3nTn8hPy3lDO1s2a+95QeSYrpdwPxVtRAlM4lNxaWbBHUdF9y5n4GE4h1oVg 2kibzf9wk1aT7YdSacAmeDlZOO5JzEXAidm5A5XDet+yuiuKqDaowu7Xtj0N9tbo /vTA8kqPpb6h7anURpt1RMgPBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnnv49D yKq1sWgJNr1MJgmgCAeIMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3VF/rKb5b0KVrh5PCD7ARGrYcBPVCt57AvDK/tcRBza9/Q36sdVE2 cb2bBKABR/CWYJjhR3Vj4hvCjizYxyj9AYZ7FJWMxdtyZailt3TmjzDJV3YQ/wJV KWTUhxuot7CHlUg/nzB0V5dd2MnQotvNkI6Laz6N4XEmUGdJ9XVl+DLglTtyvG+1 cTkOWeahnZKlD9fZEangZkK+KveARL/lDHZYF1/eMWCuOfzu35xYd8jNoP4rz5C3 say+WXEotojo0Gt2G5D+p+O+aLrrtQ1r7FopF88rb5UduVGD4jeLklMXcWb/s1dj L81rgv8Hyp+Kciwj8Aj7wqdBfLUgnNbU -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:23 2025 by rpki-client