$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: FpIECzipQgKyZVyC2qMUVP1mIqsMRceDFpoPklx7Auo= Subject key identifier: 1E:90:32:BC:B8:AA:43:7D:AF:48:9C:16:9D:1C:E1:7E:A3:CF:53:D7 Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 01F5 Signing time: Sun 02 Nov 2025 17:34:56 +0000 Manifest this update: Sun 02 Nov 2025 17:34:55 +0000 Manifest next update: Sun 09 Nov 2025 17:34:55 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: 1WoLxWDVIuG4CfLtQ4bWEwvwxw3IoV1D7zVURSNlIkA=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Nov 2 17:34:55 2025 GMT Not After : Nov 9 17:34:55 2025 GMT Subject: CN=69079640-ecc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:5f:49:1e:35:43:3c:ac:2e:00:66:7f:d3: 18:e2:80:68:68:04:40:b3:62:a6:f6:7a:92:d1:ca: 01:4d:fb:d6:82:8c:cd:f3:3c:8e:d3:d8:cb:b8:be: b5:b3:35:b2:43:1e:2a:25:c2:76:ba:7e:2e:1b:ee: 30:53:09:d4:8d:71:86:3c:fc:40:99:e9:a2:36:ee: ef:c8:91:7f:53:f0:c1:ea:8d:2c:d1:0c:63:46:2a: e8:0d:0a:a2:6e:a1:3a:c4:18:3c:0f:86:a1:bb:f9: 2d:c8:71:a3:ce:7e:05:46:f3:7b:18:a2:89:28:8b: 59:a2:23:f4:96:09:f0:42:61:5a:64:77:51:12:89: 99:bd:fd:75:54:18:d8:5c:c0:b4:92:a2:83:d1:2f: bb:bc:4e:80:5e:ed:86:cd:4e:c4:84:e3:00:10:98: a3:68:8f:8b:d4:b8:84:d0:8d:db:55:b7:af:83:a4: 74:db:21:27:2a:9b:5a:f3:65:3f:04:f7:78:c4:18: ef:fb:cc:1f:16:8e:3d:60:96:b4:61:49:31:c8:43: 3c:7d:42:ec:56:3c:0f:96:06:2b:28:f5:44:25:f9: 8f:af:6a:6c:34:ad:7d:ce:4b:49:ef:1e:0f:bb:45: 1d:1c:9e:01:dc:6b:ce:ae:cc:0e:4e:5d:b6:b6:2d: 0c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:90:32:BC:B8:AA:43:7D:AF:48:9C:16:9D:1C:E1:7E:A3:CF:53:D7 X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cf:01:30:97:56:54:0c:bc:7c:5f:1d:47:e4:cb:51:18:89: 41:c0:f6:1a:ca:6e:e6:e2:b1:7b:6d:07:16:f7:e2:37:90:e2: 9e:d7:c6:8d:14:60:d1:47:50:9f:ca:d2:d0:5c:ca:60:61:6f: 8a:fa:b8:12:b7:6c:ae:49:18:78:e8:57:fa:9e:82:25:88:03: 8b:21:e5:25:dd:4c:70:7f:7d:af:e7:72:98:14:40:95:9b:7b: 0a:9d:83:50:09:a7:c8:88:e7:f8:20:fd:e8:c2:0f:9e:eb:be: 9c:bc:1f:ff:78:6f:c0:27:68:06:71:5e:a1:68:7d:11:7e:b1: 48:5c:1a:22:4a:aa:70:65:62:86:86:25:be:9a:8f:9a:c7:06: b0:53:a6:bf:52:cd:aa:d8:b6:fd:27:7d:0c:28:85:dc:e7:53: ee:45:57:fa:be:94:d1:dc:e5:f2:66:52:7a:07:dd:91:c1:f9: 92:da:66:c4:a7:39:3f:9e:29:c6:c9:32:a3:35:bf:b4:37:12: 5a:01:6b:59:90:a3:1f:92:74:bd:02:60:b8:f5:62:98:f8:76: fc:eb:c7:1a:9e:71:e9:bf:92:89:0d:12:46:fc:2c:c3:64:02: 07:b6:63:30:9c:23:fa:10:ca:03:6c:3b:4c:44:93:1d:92:10: eb:fe:37:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUxMTAyMTczNDU1WhcNMjUxMTA5MTczNDU1WjAYMRYwFAYD VQQDEw02OTA3OTY0MC1lY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHxfSR41QzysLgBmf9MY4oBoaARAs2Km9nqS0coBTfvWgozN8zyO09jLuL61 szWyQx4qJcJ2un4uG+4wUwnUjXGGPPxAmemiNu7vyJF/U/DB6o0s0QxjRiroDQqi bqE6xBg8D4ahu/ktyHGjzn4FRvN7GKKJKItZoiP0lgnwQmFaZHdREomZvf11VBjY XMC0kqKD0S+7vE6AXu2GzU7EhOMAEJijaI+L1LiE0I3bVbevg6R02yEnKpta82U/ BPd4xBjv+8wfFo49YJa0YUkxyEM8fULsVjwPlgYrKPVEJfmPr2psNK19zktJ7x4P u0UdHJ4B3GvOrswOTl22ti0MDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6QMry4 qkN9r0icFp0c4X6jz1PXMB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtzwEwl1ZUDLx8Xx1H5MtRGIlBwPYaym7m4rF7bQcW9+I3kOKe18aN FGDRR1CfytLQXMpgYW+K+rgSt2yuSRh46Ff6noIliAOLIeUl3Uxwf32v53KYFECV m3sKnYNQCafIiOf4IP3owg+e676cvB//eG/AJ2gGcV6haH0RfrFIXBoiSqpwZWKG hiW+mo+axwawU6a/Us2q2Lb9J30MKIXc51PuRVf6vpTR3OXyZlJ6B92RwfmS2mbE pzk/ninGyTKjNb+0NxJaAWtZkKMfknS9AmC49WKY+Hb868cannHpv5KJDRJG/CzD ZAIHtmMwnCP6EMoDbDtMRJMdkhDr/jfa -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:26 2025 by rpki-client