$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: KRxtISvzUuRGinijJ/RyeqiRYzhtqV1U8st/fltFj6w= Subject key identifier: 03:FC:F6:50:AC:78:C9:7A:50:2C:E9:69:EE:5B:7E:B2:E6:AB:83:5F Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 0213 Signing time: Wed 05 Nov 2025 02:19:43 +0000 Manifest this update: Wed 05 Nov 2025 02:19:42 +0000 Manifest next update: Wed 12 Nov 2025 02:19:42 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: Jvi4DmTPT0CXkiUpMGePU9RhSHAsK1+NJQx+LnXW6Sk=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: Nov 5 02:19:42 2025 GMT Not After : Nov 12 02:19:42 2025 GMT Subject: CN=690ab43e-3ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:fd:45:12:d6:4a:7f:62:51:a2:00:71:36: 4f:71:e9:c3:aa:b8:c1:8c:13:7a:3b:ce:43:ec:26: 0a:e8:25:9b:10:c2:4e:e4:a6:35:4b:84:64:a9:19: 5c:c6:d8:e9:5a:21:3a:ab:d2:54:13:90:ef:74:b9: 6f:28:82:6a:32:1b:e8:9e:eb:c3:0b:76:5e:21:55: cb:8c:36:c7:69:55:85:2b:05:8e:8c:13:b1:34:68: 72:f9:dc:8d:4e:6f:bf:91:bf:0c:fd:70:27:b4:f4: 56:0f:b1:8f:e8:4f:dd:2d:3c:52:6f:5b:46:5b:7f: 41:56:5c:f1:ed:c7:66:38:00:11:39:fa:d4:16:cc: fc:1d:62:24:5d:e2:fe:58:c2:ab:21:2c:f9:3b:a1: 5e:54:47:20:ad:86:92:82:52:86:29:22:d0:e6:85: 26:3f:10:ff:d7:b2:0a:77:13:7e:54:66:27:11:3c: a0:fa:0c:36:b8:fe:43:86:ef:2b:4e:ed:85:38:5c: 45:3a:58:3a:6e:9b:e9:a6:9d:d3:b2:d5:20:06:b6: 3f:b2:11:ea:5d:a2:93:79:91:9a:96:19:6a:57:33: 74:3f:76:11:f4:c1:ae:11:07:06:2c:26:f7:0a:f6: c5:1a:3e:e7:57:9f:2f:5f:ae:cc:6f:cd:be:08:eb: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FC:F6:50:AC:78:C9:7A:50:2C:E9:69:EE:5B:7E:B2:E6:AB:83:5F X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:58:f8:32:8b:6d:fe:d2:00:1b:e9:99:73:52:ad:27:17:72: 31:ae:73:9b:df:1a:78:7b:e0:10:52:ca:c2:3c:90:fe:29:fa: 92:8e:dd:0a:55:7a:bb:0f:65:82:5b:8d:33:c6:2c:49:a0:5c: 6b:6b:ce:46:ab:e3:dd:a3:c1:8a:5b:b4:2c:09:c1:5d:4a:59: a2:f1:2f:b3:92:74:65:33:9e:65:b2:52:e2:74:c4:68:a7:10: 03:e3:96:d9:c0:42:93:3a:79:62:65:91:c1:d3:cb:4f:5e:c8: 4a:a8:64:02:03:0c:3b:c0:57:67:4f:37:36:88:0f:26:cb:c4: 90:99:e8:58:9b:ba:2a:1e:b0:09:10:b2:5b:e3:12:8d:70:f2: 39:8f:52:a9:8c:c8:17:6a:57:9a:37:3e:1a:d5:70:b8:0c:f9: 60:14:73:47:f0:b4:5d:7c:ee:3f:95:5a:69:33:18:bb:ad:ee: 21:7c:5e:0a:bb:61:26:c4:2b:b8:ed:9d:69:ac:33:08:4c:7f: 99:75:8a:ab:76:07:48:25:73:f7:7c:21:23:5e:aa:0b:70:cb: 1a:1d:82:b7:8f:1f:5c:1d:72:b1:f3:85:8e:dc:72:ef:d2:27: bb:22:21:97:29:d7:7e:c4:1f:cd:d2:e4:41:62:5f:c3:b0:29: 7f:18:9e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUxMTA1MDIxOTQyWhcNMjUxMTEyMDIxOTQyWjAYMRYwFAYD VQQDEw02OTBhYjQzZS0zYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFT9RRLWSn9iUaIAcTZPcenDqrjBjBN6O85D7CYK6CWbEMJO5KY1S4RkqRlc xtjpWiE6q9JUE5DvdLlvKIJqMhvonuvDC3ZeIVXLjDbHaVWFKwWOjBOxNGhy+dyN Tm+/kb8M/XAntPRWD7GP6E/dLTxSb1tGW39BVlzx7cdmOAAROfrUFsz8HWIkXeL+ WMKrISz5O6FeVEcgrYaSglKGKSLQ5oUmPxD/17IKdxN+VGYnETyg+gw2uP5Dhu8r Tu2FOFxFOlg6bpvppp3TstUgBrY/shHqXaKTeZGalhlqVzN0P3YR9MGuEQcGLCb3 CvbFGj7nV58vX67Mb82+COuajQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP89lCs eMl6UCzpae5bfrLmq4NfMB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9WPgyi23+0gAb6ZlzUq0nF3IxrnOb3xp4e+AQUsrCPJD+KfqSjt0K VXq7D2WCW40zxixJoFxra85Gq+Pdo8GKW7QsCcFdSlmi8S+zknRlM55lslLidMRo pxAD45bZwEKTOnliZZHB08tPXshKqGQCAww7wFdnTzc2iA8my8SQmehYm7oqHrAJ ELJb4xKNcPI5j1KpjMgXaleaNz4a1XC4DPlgFHNH8LRdfO4/lVppMxi7re4hfF4K u2EmxCu47Z1prDMITH+ZdYqrdgdIJXP3fCEjXqoLcMsaHYK3jx9cHXKx84WO3HLv 0ie7IiGXKdd+xB/N0uRBYl/DsCl/GJ5h -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:53 2025 by rpki-client