$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json) Hash identifier: wgQ110miFQjnI8+Gn1KSar/nT6VVLFOsPFNAKhH485s= Subject key identifier: 92:3E:D0:73:E6:03:CC:F4:FE:2E:4D:37:36:0B:AA:62:AA:A0:AE:64 Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft Manifest number: 02BE Signing time: Wed 05 Nov 2025 01:32:10 +0000 Manifest this update: Wed 05 Nov 2025 01:32:10 +0000 Manifest next update: Wed 12 Nov 2025 01:32:10 +0000 Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: VoQFx+4gPBw2llu1BkDnWKxABGdtEm9KRkalwmtZ17E=) 2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: e8WAY0Y3CoS5+B8mQdHDLApUCt8COdKCwX61EjEYzJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Validity Not Before: Nov 5 01:32:10 2025 GMT Not After : Nov 12 01:32:10 2025 GMT Subject: CN=690aa91a-9ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:00:ff:56:06:76:68:83:d3:d2:6e:fa:94: c1:cf:85:34:dd:ca:da:e1:ea:49:53:e2:18:40:43: 5b:bb:1c:72:d6:ff:72:2f:1c:33:03:69:f1:34:08: f1:21:28:44:ee:4a:4a:94:de:1c:c2:cf:aa:df:1f: 62:69:5e:05:43:c5:c1:ee:fa:9f:08:f1:47:fb:61: a1:07:22:6c:d1:61:a7:f3:28:33:ce:54:9e:71:49: 5a:60:e0:48:1f:bc:db:b3:e6:8b:13:76:8d:40:e4: c1:87:17:10:72:32:b7:a4:11:6b:58:dd:bd:e9:3f: a3:04:44:ef:0d:e1:57:77:1f:4f:b4:c1:90:36:bd: 2e:29:f3:9d:6e:78:ec:94:0e:45:b0:57:6e:92:a2: 08:45:37:5e:c2:3b:77:a6:6e:0e:a7:59:2d:1d:55: 76:d6:18:c1:4e:96:28:11:89:00:90:35:22:3d:d3: b5:de:68:99:fa:86:0e:f3:d1:25:16:bd:6e:78:dd: 51:f9:03:92:1d:c4:88:7e:ee:a0:ae:ea:94:0c:12: 3e:8b:59:2a:76:d8:70:dd:38:cf:ac:3a:7f:46:40: e2:64:c8:36:8e:64:56:2a:42:c2:b3:d0:74:62:8f: 70:30:4d:5e:7f:bf:76:d1:9c:37:ca:c5:82:9f:53: 13:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3E:D0:73:E6:03:CC:F4:FE:2E:4D:37:36:0B:AA:62:AA:A0:AE:64 X509v3 Authority Key Identifier: keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:71:fc:c1:8c:d6:10:4f:d7:94:b3:c6:8f:1e:ea:9b:61:2b: d0:5d:93:e0:ac:e2:71:cf:3f:89:51:3d:30:92:9d:38:a4:98: 4a:3e:3a:a2:8c:37:5f:a4:4d:1d:61:2f:e8:ed:8c:98:fa:26: 61:c2:fe:b8:bf:6a:29:04:b8:71:89:2c:4c:9b:0c:e9:f9:63: ba:2d:4d:02:33:07:59:fe:03:0a:56:48:7a:ad:d8:15:c4:36: 40:d2:8d:b6:dd:02:26:59:0f:01:6c:f8:f2:f5:f6:49:b3:64: 52:53:ce:b2:07:93:24:c6:9d:cf:e1:96:3b:63:99:54:86:0a: 71:b5:10:7d:56:44:73:c9:02:8b:d6:d2:ee:ff:75:f4:7c:10: 0b:8f:04:e0:ac:23:d7:71:56:58:63:92:28:01:da:45:99:f2: 5f:f6:bb:54:52:99:e1:0f:ea:61:c4:63:bf:ec:73:c9:c2:c6: 09:3b:74:c3:53:21:26:58:d0:01:fe:90:c1:ea:c1:3e:db:23: d1:00:4a:44:71:c9:36:2f:0c:0a:54:f3:cf:a9:60:6b:fe:73: bf:90:da:d8:1a:ad:21:d2:94:51:e5:03:66:93:ee:d0:f0:ae: d7:a9:d8:43:6e:17:c3:e3:00:a9:12:6c:30:36:ab:4b:d8:5e: fa:cf:75:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2 MjMwMDU5RTgwHhcNMjUxMTA1MDEzMjEwWhcNMjUxMTEyMDEzMjEwWjAYMRYwFAYD VQQDEw02OTBhYTkxYS05ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dIA/1YGdmiD09Ju+pTBz4U03cra4epJU+IYQENbuxxy1v9yLxwzA2nxNAjx IShE7kpKlN4cws+q3x9iaV4FQ8XB7vqfCPFH+2GhByJs0WGn8ygzzlSecUlaYOBI H7zbs+aLE3aNQOTBhxcQcjK3pBFrWN296T+jBETvDeFXdx9PtMGQNr0uKfOdbnjs lA5FsFdukqIIRTdewjt3pm4Op1ktHVV21hjBTpYoEYkAkDUiPdO13miZ+oYO89El Fr1ueN1R+QOSHcSIfu6gruqUDBI+i1kqdthw3TjPrDp/RkDiZMg2jmRWKkLCs9B0 Yo9wME1ef7920Zw3ysWCn1MTcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI+0HPm A8z0/i5NNzYLqmKqoK5kMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L T20xSXp3UWp4YlJpTUFXZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACcfzBjNYQT9eUs8aPHuqbYSvQXZPgrOJxzz+JUT0wkp04pJhKPjqi jDdfpE0dYS/o7YyY+iZhwv64v2opBLhxiSxMmwzp+WO6LU0CMwdZ/gMKVkh6rdgV xDZA0o223QImWQ8BbPjy9fZJs2RSU86yB5Mkxp3P4ZY7Y5lUhgpxtRB9VkRzyQKL 1tLu/3X0fBALjwTgrCPXcVZYY5IoAdpFmfJf9rtUUpnhD+phxGO/7HPJwsYJO3TD UyEmWNAB/pDB6sE+2yPRAEpEcck2LwwKVPPPqWBr/nO/kNrYGq0h0pRR5QNmk+7Q 8K7XqdhDbhfD4wCpEmwwNqtL2F76z3XN -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:18 2025 by rpki-client