$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: P7IiV6onljjj6Kd1DOy7syF6ota9GxxJTt3LRfMJLBM= Subject key identifier: 82:B9:F0:70:A8:B3:1C:28:9D:0F:45:48:9C:85:56:4A:01:C0:AE:37 Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 75 Signing time: Mon 03 Nov 2025 06:59:57 +0000 Manifest this update: Mon 03 Nov 2025 06:59:56 +0000 Manifest next update: Mon 10 Nov 2025 06:59:56 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: jvYj5py9MeiPmymn3/cehQaSBoVHbV2NlHkcWnf62L8=) 2: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: bCkwnolEga96G4fQjLHTSTCqelRgfcxersU3tEYQQXA=) 3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=) 4: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=) 5: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=) 6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=) 7: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=) 8: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=) 9: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: yHDrOZAHkb1aNlUdTrbId0x6TGNas51iB5olcDBHB+Q=) 10: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: Nov 3 06:59:56 2025 GMT Not After : Nov 10 06:59:56 2025 GMT Subject: CN=690852ec-56ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:d1:ea:74:92:32:61:2e:10:97:2b:49:26: ed:37:ab:11:e9:ef:41:89:97:72:44:c9:a1:30:2d: f7:0d:6a:57:4f:74:31:ea:87:a9:02:54:44:f7:4a: 63:1e:c4:b4:3f:3b:3e:0c:d7:a6:a2:ad:89:88:a7: da:69:a3:4d:4b:e2:73:18:86:ff:ed:9f:86:f7:1a: 3b:cd:ac:f5:20:f9:c0:c7:b6:ab:ae:1b:28:ab:cb: 98:e4:5a:28:be:2c:42:ab:ac:8e:12:d2:1f:18:ac: fd:50:90:b2:97:52:fd:dc:1e:c3:5f:a9:9c:92:64: a4:ac:56:1a:e4:25:9a:36:65:86:3d:c2:bd:c9:2f: b7:49:d5:7a:37:e2:26:ec:24:f0:b9:08:cf:86:0d: eb:83:58:f8:b1:fa:99:2e:ed:39:9a:8a:b5:ee:ba: f4:d3:1f:e0:fc:b4:35:9d:4c:2b:43:1a:1e:d2:88: 3f:b1:01:5c:b9:d2:87:94:69:cf:ee:3a:e4:c3:65: 09:f9:ab:aa:ad:13:55:b6:0c:9c:10:9c:bb:c8:82: cb:1a:9c:ba:f4:d6:eb:6b:9b:f6:d9:5e:0a:2d:9a: ee:9a:43:f8:3d:8b:fc:fc:57:53:c4:7d:fc:b1:ce: 9f:d3:95:46:38:fd:86:31:42:86:57:56:36:eb:93: 90:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B9:F0:70:A8:B3:1C:28:9D:0F:45:48:9C:85:56:4A:01:C0:AE:37 X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:45:db:f9:ca:dd:72:a7:34:0e:31:35:1c:e6:42:da:25:9f: 08:1b:a7:d6:73:c8:e6:98:f5:dd:d4:05:9f:f1:6d:e9:76:64: de:f9:a0:94:55:22:11:00:79:fb:a0:2a:f6:9c:6a:bb:b0:40: 5b:22:88:9a:64:82:f5:13:35:4d:a1:9b:53:2c:c8:2a:62:9f: 21:6b:bd:7d:22:9e:01:ea:d4:c1:13:21:fb:b2:97:0b:76:ff: 99:ae:db:d9:c6:01:3a:26:ba:bc:af:fd:fa:bd:c8:7a:d9:bd: b9:24:04:36:e2:e2:9b:2e:c1:db:2b:5e:a8:13:d8:99:dc:4b: d8:fd:70:3a:ec:fe:78:d1:ab:82:8d:d9:a0:e1:87:5f:39:52: 87:20:7c:98:f3:43:2b:83:59:2f:89:46:af:21:a9:2d:ad:6d: 15:68:24:57:5e:38:0b:aa:84:09:ae:89:10:d3:7c:74:52:d8: 73:7c:e2:c0:49:1f:e1:64:c2:3a:74:1d:6e:42:3f:c3:1b:20: 6f:39:71:6a:4e:fa:46:6c:0b:1b:ba:10:c5:17:3c:f6:5b:56: 6a:aa:a1:65:ff:a3:e3:74:34:3c:3c:0a:3a:7c:6f:57:ee:c7: a9:d7:8f:a9:70:39:55:05:19:c2:a6:cd:27:df:56:2b:81:dd: 22:09:92:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0M0YxMTAvBgNVBAUTKDE4OTY3RENEQjcyNEE4NEE3MTcxMUU2NzhBQUIxRDJF NzIyMTVENkMwHhcNMjUxMTAzMDY1OTU2WhcNMjUxMTEwMDY1OTU2WjAYMRYwFAYD VQQDEw02OTA4NTJlYy01NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs3R6nSSMmEuEJcrSSbtN6sR6e9BiZdyRMmhMC33DWpXT3Qx6oepAlRE90pj HsS0Pzs+DNemoq2JiKfaaaNNS+JzGIb/7Z+G9xo7zaz1IPnAx7arrhsoq8uY5Foo vixCq6yOEtIfGKz9UJCyl1L93B7DX6mckmSkrFYa5CWaNmWGPcK9yS+3SdV6N+Im 7CTwuQjPhg3rg1j4sfqZLu05moq17rr00x/g/LQ1nUwrQxoe0og/sQFcudKHlGnP 7jrkw2UJ+auqrRNVtgycEJy7yILLGpy69Nbra5v22V4KLZrumkP4PYv8/FdTxH38 sc6f05VGOP2GMUKGV1Y265OQQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK58HCo sxwonQ9FSJyFVkoBwK43MB8GA1UdIwQYMBaAFBiWfc23JKhKcXEeZ4qrHS5yIV1s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQzRi9ENjg0RkMyRTFB OEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi9HSlo5emJja3FFcHhjUjVuaXFzZExuSWhY V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjQzRi9ENjg0RkMyRTFBOEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi9HSlo5emJja3FF cHhjUjVuaXFzZExuSWhYV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCERdv5yt1ypzQOMTUc5kLaJZ8IG6fWc8jmmPXd1AWf8W3pdmTe+aCU VSIRAHn7oCr2nGq7sEBbIoiaZIL1EzVNoZtTLMgqYp8ha719Ip4B6tTBEyH7spcL dv+ZrtvZxgE6Jrq8r/36vch62b25JAQ24uKbLsHbK16oE9iZ3EvY/XA67P540auC jdmg4YdfOVKHIHyY80Mrg1kviUavIaktrW0VaCRXXjgLqoQJrokQ03x0UthzfOLA SR/hZMI6dB1uQj/DGyBvOXFqTvpGbAsbuhDFFzz2W1ZqqqFl/6PjdDQ8PAo6fG9X 7sep14+pcDlVBRnCps0n31Yrgd0iCZLy -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:35 2025 by rpki-client