$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: 78/eEdtIj0LlzmZSrsznsRBmE0K06TkAkCOtPfuNEko= Subject key identifier: 2C:AC:B0:46:26:D4:01:EC:C3:3E:B7:97:CF:12:47:7D:E0:B7:16:5B Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 0231 Signing time: Mon 03 Nov 2025 02:16:47 +0000 Manifest this update: Mon 03 Nov 2025 02:16:46 +0000 Manifest next update: Mon 10 Nov 2025 02:16:46 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: BmdEmTJMgsjU08ctMj43KHFXPrJPO8tyLOL2GL4CJTk=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: guoDsfCdlPfgkYSScjR/9hRsT4QBuvGrmx7XsTxsYOY=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: PGJbQnjc1bTQtRJhtYYqM6Jzz/Z0WeIug83GlsZ1DPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: Nov 3 02:16:46 2025 GMT Not After : Nov 10 02:16:46 2025 GMT Subject: CN=6908108f-312c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:34:00:c7:4c:9c:74:8a:5e:e2:f9:2b:55: 59:23:8d:47:6e:5b:e4:bf:5d:79:70:a5:41:22:2f: 24:bd:d0:d9:ce:83:9a:3a:f5:8e:07:2b:bb:56:c3: 94:87:86:12:d6:f7:9d:83:39:38:3a:05:7c:3e:2c: 32:1e:a2:6d:07:04:0d:de:d1:68:19:82:a1:c3:49: 04:61:40:d0:24:17:fe:18:c9:61:71:20:0a:be:fd: 59:d6:91:34:eb:34:e5:79:42:e8:5e:b7:a1:f0:be: 49:b9:58:95:97:0d:c9:b0:5d:fb:01:ec:8d:6b:44: c4:16:32:a7:2f:47:cc:cb:db:59:89:be:c8:a7:e1: bd:14:3b:2a:cb:28:74:4c:c7:df:24:55:23:61:fe: ac:38:8f:d0:03:60:cc:6a:6a:c5:ac:f3:db:b1:d6: 77:fe:c5:f9:a3:a8:03:58:8b:47:e3:cf:52:dc:3c: cb:41:ed:d1:bd:89:eb:7f:f1:b7:07:d0:de:f1:d4: cf:9f:96:b0:45:8a:31:1a:e7:44:95:a9:d7:b5:56: c1:54:e2:b6:c9:40:20:7f:3a:2d:34:50:16:f9:45: 45:ed:02:0b:d4:f3:48:61:4e:16:78:9d:20:54:f5: c8:f4:ac:a4:be:0e:36:17:06:79:f1:f0:f6:92:d7: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AC:B0:46:26:D4:01:EC:C3:3E:B7:97:CF:12:47:7D:E0:B7:16:5B X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:24:66:8f:1a:e2:70:e8:2f:d6:b4:b1:63:3c:82:c4:c6:ec: fe:c9:12:82:07:75:17:cc:11:40:86:0e:03:d6:7f:17:41:c9: d4:75:7f:2f:a5:72:9e:a5:a3:90:05:da:f0:45:fc:a1:ce:e6: c4:e8:51:da:5a:b7:a9:53:e3:28:3e:32:33:f4:94:4f:24:e4: 1f:c2:b3:38:3c:51:6a:3b:2f:bc:f9:23:1c:13:ea:c8:06:2d: 77:a7:84:f1:c1:02:70:a2:b3:91:64:eb:75:a8:46:15:16:dd: 32:a0:a3:0f:f7:15:66:e5:fb:f1:09:5b:e6:6e:6d:46:9c:07: 43:03:8a:c2:22:69:83:ea:88:20:af:f1:7e:a2:ba:b2:85:09: 78:87:83:c4:d5:b2:c4:3b:af:0f:6d:ea:d8:69:34:b6:a8:92: 7c:7f:cd:12:cf:4d:1b:c8:2b:ef:70:69:15:93:ce:b4:f0:fb: 61:2a:41:7d:fe:c3:d4:09:5b:b9:63:dd:41:80:3c:45:b8:91: a7:4d:3f:f8:0f:70:43:60:2e:23:9d:4b:3f:6d:08:b2:71:a8: 03:53:0c:6f:d8:d3:c9:3f:49:6a:b5:0f:6b:1d:9b:8d:f3:5d: a4:b3:f5:de:11:d7:02:ec:17:0e:24:2e:af:6f:cd:df:0d:69: eb:59:3c:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjUxMTAzMDIxNjQ2WhcNMjUxMTEwMDIxNjQ2WjAYMRYwFAYD VQQDEw02OTA4MTA4Zi0zMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArys0AMdMnHSKXuL5K1VZI41Hblvkv115cKVBIi8kvdDZzoOaOvWOByu7VsOU h4YS1vedgzk4OgV8PiwyHqJtBwQN3tFoGYKhw0kEYUDQJBf+GMlhcSAKvv1Z1pE0 6zTleULoXreh8L5JuViVlw3JsF37AeyNa0TEFjKnL0fMy9tZib7Ip+G9FDsqyyh0 TMffJFUjYf6sOI/QA2DMamrFrPPbsdZ3/sX5o6gDWItH489S3DzLQe3RvYnrf/G3 B9De8dTPn5awRYoxGudElanXtVbBVOK2yUAgfzotNFAW+UVF7QIL1PNIYU4WeJ0g VPXI9Kykvg42FwZ58fD2kteR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyssEYm 1AHswz63l88SR33gtxZbMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgJGaPGuJw6C/WtLFjPILExuz+yRKCB3UXzBFAhg4D1n8XQcnUdX8v pXKepaOQBdrwRfyhzubE6FHaWrepU+MoPjIz9JRPJOQfwrM4PFFqOy+8+SMcE+rI Bi13p4TxwQJworORZOt1qEYVFt0yoKMP9xVm5fvxCVvmbm1GnAdDA4rCImmD6ogg r/F+orqyhQl4h4PE1bLEO68PberYaTS2qJJ8f80Sz00byCvvcGkVk8608PthKkF9 /sPUCVu5Y91BgDxFuJGnTT/4D3BDYC4jnUs/bQiycagDUwxv2NPJP0lqtQ9rHZuN 812ks/XeEdcC7BcOJC6vb83fDWnrWTzj -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:46 2025 by rpki-client