$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: kI0BP2nbyUGbGrQ/59pq3iZsYcztvBfej6PexXxWyKk= Subject key identifier: AE:47:C5:C5:C7:2B:50:52:FD:4C:04:CA:42:56:2D:12:E2:F2:2E:B0 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 09ED Signing time: Tue 04 Nov 2025 20:00:20 +0000 Manifest this update: Tue 04 Nov 2025 20:00:19 +0000 Manifest next update: Tue 11 Nov 2025 20:00:19 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: W+AuQuaVUEIJcljY2a9EIkZXRVdgRKoUBUs9kqA6kbk=) 2: E09840C4D5B511EFB22A647DC4F9AE02.roa (hash: UUua9CtlmlNUMxfEXymhiloAwqTpKtC9fDGIWh1Bzk8=) 3: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: +YzJrYGnbGLCjVsOBK3rhph4HgKiBqVFBpU2hsaMvKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Nov 4 20:00:19 2025 GMT Not After : Nov 11 20:00:19 2025 GMT Subject: CN=690a5b54-8ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:95:19:76:d5:1c:68:7a:56:6f:39:26:28: 00:cb:4f:92:60:45:23:4a:4f:cc:fc:17:79:d0:3b: 53:09:f5:90:fa:cf:12:b2:89:41:4a:fc:84:a0:05: 13:09:5f:f8:45:e6:85:46:11:61:60:45:b9:05:cf: 82:22:70:b9:66:24:78:41:cc:82:52:fb:99:93:05: 71:43:9d:06:d3:46:8e:eb:de:a9:24:2b:03:93:cb: 34:df:91:a7:bc:24:11:08:02:81:1c:bd:43:f8:a3: 94:6f:3b:7f:6e:6e:41:d3:9a:23:40:d9:c8:b3:4c: 54:93:78:91:4c:4a:d5:3f:ea:dd:9c:76:80:05:ea: 87:ce:55:1d:f9:03:f1:37:37:62:b2:c3:b0:bf:9a: 79:13:f4:6d:39:91:12:10:e5:3e:01:d5:86:c4:5d: 14:d2:3c:45:c5:10:84:b1:3b:af:68:b5:d8:64:ca: 8c:54:5c:8e:76:3d:4e:a5:51:de:c8:67:b1:04:ef: 97:6e:0f:c6:45:20:4c:05:5c:c6:a9:78:86:13:49: 72:f9:b3:97:64:11:19:4f:c4:48:8c:18:d7:e3:6d: 77:d4:97:b5:8c:1b:5e:fb:02:97:54:c5:9e:11:52: 2e:3e:e4:4a:5b:89:e8:1a:4f:5d:32:fa:6e:f0:ab: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:47:C5:C5:C7:2B:50:52:FD:4C:04:CA:42:56:2D:12:E2:F2:2E:B0 X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4f:e4:60:4e:f0:33:e8:c6:12:c5:88:9a:f2:8a:e0:b3:06: e4:d9:e1:3f:6b:04:51:29:32:04:aa:f8:0c:c9:85:12:9a:ae: c3:a5:8a:6c:f4:88:03:14:78:7c:04:85:b1:8c:32:54:b7:a5: 9d:30:f0:f2:23:71:35:43:2c:90:68:57:72:85:b4:92:ef:9c: 22:d9:dc:e3:b7:32:56:35:d0:36:cb:83:5f:ad:2b:a0:12:ec: d7:30:fe:a6:0e:e4:98:36:a4:90:75:7e:3a:ef:ae:fd:f9:94: 28:12:04:40:45:3a:b1:e3:3d:9a:59:b7:7a:ba:aa:3e:60:bd: 82:ce:8b:a9:f7:4a:67:98:f3:27:d7:c2:29:c2:d6:95:1e:41: eb:78:11:9a:3e:da:b0:37:ff:6a:a8:c6:6f:c4:b5:89:0d:f5: 2e:b8:89:cb:21:da:1f:d9:fc:a9:72:69:a4:df:90:1e:08:6a: a7:5a:25:c5:05:9b:24:27:b6:4d:aa:9c:43:93:f4:22:92:63: cc:88:a0:25:f6:56:a2:c8:e3:6f:da:55:37:c4:28:da:14:32: f6:4d:e5:ef:7b:e5:0b:9b:17:d2:a5:94:80:c8:80:c7:d1:8a: 03:5f:7d:94:16:da:9c:33:fe:2a:e1:f9:c8:7d:8a:ff:bc:19: 8c:64:6b:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUxMTA0MjAwMDE5WhcNMjUxMTExMjAwMDE5WjAYMRYwFAYD VQQDEw02OTBhNWI1NC04Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynyVGXbVHGh6Vm85JigAy0+SYEUjSk/M/Bd50DtTCfWQ+s8SsolBSvyEoAUT CV/4ReaFRhFhYEW5Bc+CInC5ZiR4QcyCUvuZkwVxQ50G00aO696pJCsDk8s035Gn vCQRCAKBHL1D+KOUbzt/bm5B05ojQNnIs0xUk3iRTErVP+rdnHaABeqHzlUd+QPx NzdissOwv5p5E/RtOZESEOU+AdWGxF0U0jxFxRCEsTuvaLXYZMqMVFyOdj1OpVHe yGexBO+Xbg/GRSBMBVzGqXiGE0ly+bOXZBEZT8RIjBjX42131Je1jBte+wKXVMWe EVIuPuRKW4noGk9dMvpu8Kup3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5HxcXH K1BS/UwEykJWLRLi8i6wMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrT+RgTvAz6MYSxYia8orgswbk2eE/awRRKTIEqvgMyYUSmq7DpYps 9IgDFHh8BIWxjDJUt6WdMPDyI3E1QyyQaFdyhbSS75wi2dzjtzJWNdA2y4NfrSug EuzXMP6mDuSYNqSQdX467679+ZQoEgRARTqx4z2aWbd6uqo+YL2Czoup90pnmPMn 18IpwtaVHkHreBGaPtqwN/9qqMZvxLWJDfUuuInLIdof2fypcmmk35AeCGqnWiXF BZskJ7ZNqpxDk/QikmPMiKAl9laiyONv2lU3xCjaFDL2TeXve+ULmxfSpZSAyIDH 0YoDX32UFtqcM/4q4fnIfYr/vBmMZGv/ -----END CERTIFICATE-----Generated at Wed Nov 5 15:47:35 2025 by rpki-client