$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: ABizW40DVWSHn7WM/+2RKKtWA4nukQAw5axLd8M+W4g= Subject key identifier: 2A:EF:41:4D:FC:DE:C8:4F:92:DA:EC:92:99:01:27:79:6F:E5:E3:D8 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 7E Signing time: Wed 05 Nov 2025 06:57:14 +0000 Manifest this update: Wed 05 Nov 2025 06:57:14 +0000 Manifest next update: Wed 12 Nov 2025 06:57:14 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: F/Ky8gtX2nMFPXecpqEu5z2wnwZnoehGYHWGn5aspPE=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: Nov 5 06:57:14 2025 GMT Not After : Nov 12 06:57:14 2025 GMT Subject: CN=690af54a-96e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:2e:2a:90:0d:75:61:97:6d:1f:91:ed:d9: 0d:43:d6:c5:e0:9f:1b:db:a3:d1:2e:61:1c:3c:59: 02:d2:84:21:22:d8:e4:83:8c:49:6b:c9:70:d7:6d: 42:13:27:af:99:1c:15:e5:2b:63:fa:b6:be:08:e6: ad:f1:01:97:45:6a:9c:50:68:e0:aa:6b:39:a3:50: 44:b5:0b:90:5c:33:b3:d2:3b:4d:6a:b3:b1:a6:7f: af:22:33:a5:a0:a1:f0:de:59:1a:33:f2:70:f4:44: 9a:e1:14:3a:ca:63:5d:5e:97:05:d5:24:60:51:c7: 83:f4:79:86:c9:e4:e2:9c:ad:0f:85:c5:ac:98:7d: c2:0a:f6:bf:fb:d6:e5:b7:40:5e:81:cd:d7:ec:18: b2:55:8e:ac:5b:ce:87:6a:54:00:75:79:9a:d0:eb: ff:b4:91:71:84:28:05:67:32:87:e1:81:d6:6a:e3: 17:9c:57:c2:7a:24:32:13:7d:a8:d9:0a:7b:77:87: a3:c2:ec:77:09:e5:f3:c5:85:96:d6:54:b6:96:07: 14:db:cf:6d:12:88:d6:0b:6b:7a:5c:95:b4:46:fa: 6b:31:6f:ef:44:be:20:33:ab:9a:a0:3f:f5:65:15: 27:10:ac:13:52:1c:ff:9f:29:7c:63:9e:f8:90:6c: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:41:4D:FC:DE:C8:4F:92:DA:EC:92:99:01:27:79:6F:E5:E3:D8 X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c9:62:23:47:30:91:68:f8:b2:04:50:aa:88:45:72:85:14: 5b:42:88:88:f3:82:9f:c9:9b:86:71:81:d3:4f:46:09:f2:33: ce:9c:51:59:32:65:d9:ec:33:7c:0c:e7:14:62:d1:37:3a:ba: 20:42:ff:fd:10:cb:c9:86:c2:72:39:89:40:70:46:c8:ef:65: 36:aa:5f:b8:35:41:4b:d6:3b:54:7f:c3:76:c6:52:6b:12:8f: f9:09:e8:4e:de:6b:c3:da:03:36:38:da:dc:9a:b6:30:9f:5a: 3d:a5:4b:3b:c1:dc:63:27:91:77:8e:04:6e:27:25:70:1b:d6: 01:af:e9:53:62:d4:4a:c0:ae:44:19:e9:ab:3e:f7:3a:5d:45: 92:88:0f:47:75:6f:95:7d:bf:39:8c:3e:f8:77:a7:5b:20:37: 78:ed:4c:9a:c6:1b:e5:c6:38:ce:c5:11:5e:13:5a:ac:d7:99: fa:7b:2f:38:01:e9:44:93:18:f1:41:7c:52:c4:96:bb:d7:2c: fd:03:ed:70:10:07:07:32:cf:17:82:db:69:ab:8c:9f:0c:68: 33:4c:46:03:84:c9:ab:e4:f1:7d:49:96:2b:a8:82:a2:cf:29: da:c3:54:cf:38:4a:5b:80:e0:4c:71:01:63:fb:70:90:1f:d1: 93:b9:64:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFREUxMTAvBgNVBAUTKDgwRkI1MjYzNkE5RTUwQzA4ODY4RTYyNzUyMEExQTBE OEE4N0YwNDYwHhcNMjUxMTA1MDY1NzE0WhcNMjUxMTEyMDY1NzE0WjAYMRYwFAYD VQQDEw02OTBhZjU0YS05NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt4uKpANdWGXbR+R7dkNQ9bF4J8b26PRLmEcPFkC0oQhItjkg4xJa8lw121C EyevmRwV5Stj+ra+COat8QGXRWqcUGjgqms5o1BEtQuQXDOz0jtNarOxpn+vIjOl oKHw3lkaM/Jw9ESa4RQ6ymNdXpcF1SRgUceD9HmGyeTinK0PhcWsmH3CCva/+9bl t0Begc3X7BiyVY6sW86HalQAdXma0Ov/tJFxhCgFZzKH4YHWauMXnFfCeiQyE32o 2Qp7d4ejwux3CeXzxYWW1lS2lgcU289tEojWC2t6XJW0RvprMW/vRL4gM6uaoD/1 ZRUnEKwTUhz/nyl8Y574kGzDewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrvQU38 3shPktrskpkBJ3lv5ePYMB8GA1UdIwQYMBaAFID7UmNqnlDAiGjmJ1IKGg2Kh/BG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0VERS81OTA0RDk3MEZC NUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9nUHRTWTJxZVVNQ0lhT1luVWdvYURZcUg4 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0VERS81OTA0RDk3MEZCNUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9nUHRTWTJxZVVN Q0lhT1luVWdvYURZcUg4RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRyWIjRzCRaPiyBFCqiEVyhRRbQoiI84KfyZuGcYHTT0YJ8jPOnFFZ MmXZ7DN8DOcUYtE3OrogQv/9EMvJhsJyOYlAcEbI72U2ql+4NUFL1jtUf8N2xlJr Eo/5CehO3mvD2gM2ONrcmrYwn1o9pUs7wdxjJ5F3jgRuJyVwG9YBr+lTYtRKwK5E GemrPvc6XUWSiA9HdW+Vfb85jD74d6dbIDd47UyaxhvlxjjOxRFeE1qs15n6ey84 AelEkxjxQXxSxJa71yz9A+1wEAcHMs8Xgttpq4yfDGgzTEYDhMmr5PF9SZYrqIKi zynaw1TPOEpbgOBMcQFj+3CQH9GTuWSG -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:55 2025 by rpki-client