$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: KvBCibNNVOXldLaKF9htx/Oc3hqKm+KtxwQ4RFUiSSI= Subject key identifier: BE:90:F0:58:4E:40:5F:6B:AF:B5:96:5E:CC:D3:72:9D:39:A3:21:ED Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 06EF Signing time: Tue 04 Nov 2025 20:37:46 +0000 Manifest this update: Tue 04 Nov 2025 20:37:45 +0000 Manifest next update: Tue 11 Nov 2025 20:37:45 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: 7hhyyVarWLH5kTn6JNchHZxh2Pp5PXCNMQNGHuvZob4=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: 8hBGvOyNwxB7qMibVDGpuRU5HevQ+Tcv9ZjJM79y8+w=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: s8i5IxWnvTImsz9H5D4MuEQAm14mPHlkRay9ZZj+Qsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Nov 4 20:37:45 2025 GMT Not After : Nov 11 20:37:45 2025 GMT Subject: CN=690a6419-5aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:d0:97:b9:5e:1a:e9:c2:6d:0d:7d:67:20: 23:de:a7:04:99:69:32:b1:74:26:74:e5:fd:7b:60: 45:f9:bf:9b:d3:db:2d:93:82:cc:a7:33:2a:68:8c: 35:69:43:b1:10:a8:35:15:73:da:8f:b7:30:7d:7c: 01:ce:9a:a8:4b:ab:18:40:e5:dc:3f:7f:c2:42:f7: c2:4d:d2:24:e1:e5:6b:a4:2e:af:dc:0d:28:70:5b: 5a:b6:f5:fa:f5:d6:cd:fb:47:fd:8e:4d:5f:e6:d0: af:65:95:55:a8:fd:09:9a:b7:27:a2:0f:82:5d:9f: 48:03:0a:3d:01:3b:b3:53:d3:7b:ab:1b:57:93:c8: 3d:29:a0:bf:1c:58:94:7e:8b:4b:83:73:eb:20:66: 99:d4:b1:7e:13:80:57:3d:30:b4:cc:a9:75:9f:07: 19:ae:81:8b:3a:50:f5:83:38:2d:42:6f:92:1a:88: 3e:e3:90:e6:73:02:15:2a:d8:20:6c:a0:3c:61:99: 03:17:84:0f:93:ae:00:a0:96:f9:01:49:84:3b:2c: fb:b8:e2:94:10:91:0e:4e:9e:77:72:4b:c0:06:96: eb:fc:12:2e:c3:8b:91:93:ab:39:87:72:73:c1:9e: a7:29:36:85:5a:97:d6:50:d9:f3:7b:1e:67:a3:66: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:90:F0:58:4E:40:5F:6B:AF:B5:96:5E:CC:D3:72:9D:39:A3:21:ED X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5c:59:fe:c4:04:17:4d:b5:1e:63:ba:78:a4:6b:11:d9:27: 2e:3b:c2:7e:38:83:bd:e8:89:ff:27:c0:2d:5d:17:51:1d:35: 1e:db:1e:f8:f2:05:0d:cb:d6:92:e2:0d:f2:57:1a:de:f9:df: fe:23:11:28:a1:69:13:59:1a:42:12:f3:e9:67:25:c6:56:c1: 5b:bc:28:43:d9:77:04:bc:29:98:9e:00:79:b4:55:9c:1e:4c: ca:95:b2:59:c7:1d:35:f5:b3:6b:5c:cd:84:49:77:2b:02:ad: 09:0b:b1:90:ad:65:9a:de:39:68:d9:2c:94:3b:e8:6d:9e:5b: ae:e2:30:3f:ba:05:7a:ac:4e:9d:c7:5e:43:05:bd:27:58:8d: cc:49:13:37:1b:1a:b6:cb:f7:d2:46:52:c6:2a:c1:71:6e:97: ea:8b:f3:ec:42:fa:ef:f8:33:e4:ef:7a:e7:0b:5e:44:e4:13: 3e:b8:39:f9:54:55:70:24:b7:83:ca:ef:a7:07:1b:9b:c9:0a: 4d:7a:66:66:a9:72:d5:78:b5:2c:20:d6:6e:84:f0:a4:df:6a: 3c:2c:5e:2a:74:6a:78:31:96:e1:75:9b:d5:e0:48:27:da:77: 02:5c:3e:6d:2c:c8:04:60:b4:d9:96:10:69:84:41:af:1d:92: 0c:1d:69:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUxMTA0MjAzNzQ1WhcNMjUxMTExMjAzNzQ1WjAYMRYwFAYD VQQDEw02OTBhNjQxOS01YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd7Ql7leGunCbQ19ZyAj3qcEmWkysXQmdOX9e2BF+b+b09stk4LMpzMqaIw1 aUOxEKg1FXPaj7cwfXwBzpqoS6sYQOXcP3/CQvfCTdIk4eVrpC6v3A0ocFtatvX6 9dbN+0f9jk1f5tCvZZVVqP0Jmrcnog+CXZ9IAwo9ATuzU9N7qxtXk8g9KaC/HFiU fotLg3PrIGaZ1LF+E4BXPTC0zKl1nwcZroGLOlD1gzgtQm+SGog+45DmcwIVKtgg bKA8YZkDF4QPk64AoJb5AUmEOyz7uOKUEJEOTp53ckvABpbr/BIuw4uRk6s5h3Jz wZ6nKTaFWpfWUNnzex5no2Yn+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6Q8FhO QF9rr7WWXszTcp05oyHtMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQXFn+xAQXTbUeY7p4pGsR2ScuO8J+OIO96In/J8AtXRdRHTUe2x74 8gUNy9aS4g3yVxre+d/+IxEooWkTWRpCEvPpZyXGVsFbvChD2XcEvCmYngB5tFWc HkzKlbJZxx019bNrXM2ESXcrAq0JC7GQrWWa3jlo2SyUO+htnluu4jA/ugV6rE6d x15DBb0nWI3MSRM3Gxq2y/fSRlLGKsFxbpfqi/PsQvrv+DPk73rnC15E5BM+uDn5 VFVwJLeDyu+nBxubyQpNemZmqXLVeLUsINZuhPCk32o8LF4qdGp4MZbhdZvV4Egn 2ncCXD5tLMgEYLTZlhBphEGvHZIMHWkN -----END CERTIFICATE-----Generated at Wed Nov 5 13:11:46 2025 by rpki-client