$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json) Hash identifier: wy6U6X2mZZYdy+hBnNAC4oNl4uTHWG5fejOLEvzkPeY= Subject key identifier: 0A:5C:EB:50:77:A2:B2:C3:01:D1:3F:4C:DC:5A:5B:5B:06:C3:8A:F5 Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Certificate serial: 1EAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft Manifest number: 1EA9 Signing time: Tue 04 Nov 2025 16:08:37 +0000 Manifest this update: Tue 04 Nov 2025 16:08:36 +0000 Manifest next update: Tue 11 Nov 2025 16:08:36 +0000 Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: SDOaLN155TIhXSdhhcIBpJbIG0XU6KE4n6OEJMpE+Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7850 (0x1eaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Validity Not Before: Nov 4 16:08:36 2025 GMT Not After : Nov 11 16:08:36 2025 GMT Subject: CN=690a2505-1786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:dd:ee:eb:58:23:40:63:4c:bd:b9:a4:ca: a5:1a:b1:7d:38:2a:93:06:90:64:30:7c:7b:a3:e4: 52:19:87:3e:ab:9d:4e:80:cb:e2:96:75:6c:22:2b: 86:61:2d:4f:67:70:fa:4d:58:11:f3:14:bd:d1:5f: fc:1f:e5:39:1b:bf:51:7a:5d:87:b2:98:d0:d5:39: e1:73:16:5b:6d:90:6a:ce:b2:48:cb:11:bc:be:1c: a2:c3:09:ed:bf:bf:59:ab:a0:f2:fa:5c:6b:e7:81: 41:63:e7:fa:6c:dc:5f:f7:41:7c:18:be:fe:ea:d3: 17:1a:f9:63:f7:7f:84:6e:8a:7a:7e:8b:8c:83:8a: b0:cd:0b:41:59:be:38:58:c0:83:51:85:ab:50:84: 73:6f:c6:bb:37:b5:3c:7d:66:6f:c7:e9:59:6a:ad: 50:9f:4f:32:db:d2:8d:9a:32:c1:d3:a2:b1:23:57: 49:6a:8b:a9:89:4f:d9:33:28:f0:33:5c:ac:50:7d: 00:c1:1f:fd:b3:d8:02:69:c4:9a:ab:8e:c0:1d:77: d8:f0:1b:3c:d8:a0:1c:af:47:f2:b5:3f:e6:4d:49: c1:37:17:9c:36:fb:c6:22:db:1a:52:1e:4c:bc:6a: 70:82:d3:27:72:f3:1c:44:53:d3:49:53:8c:fd:e5: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:EB:50:77:A2:B2:C3:01:D1:3F:4C:DC:5A:5B:5B:06:C3:8A:F5 X509v3 Authority Key Identifier: keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b8:84:a0:f6:17:7c:9c:e1:e8:04:e3:a3:b3:fc:a5:4a:a3: 84:7b:36:63:1a:a9:8f:f8:a5:30:c4:92:bc:01:22:41:04:56: 31:4a:4f:8f:56:6b:a6:a3:2a:41:c8:1c:ea:c5:62:89:7a:33: 25:5d:31:a3:8b:0c:ff:13:21:36:32:94:9c:b1:6b:98:06:c5: ce:8f:f3:26:bf:fe:fb:78:69:be:9a:af:da:51:51:1d:9b:a7: fe:72:30:e4:7c:61:02:ab:ce:db:b0:c6:d8:b0:e6:90:2d:a7: a2:bb:cc:ca:3b:0c:3e:e1:7a:c2:74:ec:28:d9:58:4b:4a:7f: ef:2d:b3:71:7b:27:e7:21:a1:8c:d1:58:2b:90:3d:c9:92:6b: 71:cb:d8:27:c6:be:d8:34:9e:ae:f3:64:65:d7:eb:0e:c4:e5: 4d:a6:90:18:ae:2f:7b:7a:34:33:70:a8:75:67:6f:14:de:7c: ba:68:14:c2:01:e2:f4:06:a6:17:dd:20:32:a5:fa:7a:df:dd: bf:a0:13:7f:b9:e5:33:f2:eb:22:bd:f0:bd:92:ac:68:ac:56: f2:2e:96:26:6f:b0:58:a2:cf:ca:95:11:c9:43:4b:e1:03:4a: 12:fd:85:be:56:22:5c:3c:58:81:e4:f9:a4:80:3e:b5:4f:aa: 25:09:c6:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2 Rjc2MjVFNjcwHhcNMjUxMTA0MTYwODM2WhcNMjUxMTExMTYwODM2WjAYMRYwFAYD VQQDEw02OTBhMjUwNS0xNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztLd7utYI0BjTL25pMqlGrF9OCqTBpBkMHx7o+RSGYc+q51OgMvilnVsIiuG YS1PZ3D6TVgR8xS90V/8H+U5G79Rel2HspjQ1TnhcxZbbZBqzrJIyxG8vhyiwwnt v79Zq6Dy+lxr54FBY+f6bNxf90F8GL7+6tMXGvlj93+Ebop6fouMg4qwzQtBWb44 WMCDUYWrUIRzb8a7N7U8fWZvx+lZaq1Qn08y29KNmjLB06KxI1dJaoupiU/ZMyjw M1ysUH0AwR/9s9gCacSaq47AHXfY8Bs82KAcr0fytT/mTUnBNxecNvvGItsaUh5M vGpwgtMncvMcRFPTSVOM/eVbFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApc61B3 orLDAdE/TNxaW1sGw4r1MB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2 M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4uISg9hd8nOHoBOOjs/ylSqOEezZjGqmP+KUwxJK8ASJBBFYxSk+P VmumoypByBzqxWKJejMlXTGjiwz/EyE2MpScsWuYBsXOj/Mmv/77eGm+mq/aUVEd m6f+cjDkfGECq87bsMbYsOaQLaeiu8zKOww+4XrCdOwo2VhLSn/vLbNxeyfnIaGM 0VgrkD3Jkmtxy9gnxr7YNJ6u82Rl1+sOxOVNppAYri97ejQzcKh1Z28U3ny6aBTC AeL0BqYX3SAypfp6392/oBN/ueUz8usivfC9kqxorFbyLpYmb7BYos/KlRHJQ0vh A0oS/YW+ViJcPFiB5PmkgD61T6olCcY+ -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:17 2025 by rpki-client