$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: lAB66UBWE/nkmmCIB2Jt6uFJ0K3qbrdSnZOO5IGaYOo= Subject key identifier: 46:81:71:88:D1:1B:D4:DD:8D:E3:EB:FC:C9:A0:2C:BA:FF:7D:32:F3 Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 1995 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 1F6B Signing time: Sun 02 Nov 2025 16:23:50 +0000 Manifest this update: Sun 02 Nov 2025 16:23:50 +0000 Manifest next update: Sun 09 Nov 2025 16:23:50 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: /9sjyvzqwPSrB2riqw41DGMA+pwXqM5gASlDEWWGm14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6549 (0x1995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: Nov 2 16:23:50 2025 GMT Not After : Nov 9 16:23:50 2025 GMT Subject: CN=69078596-07cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:c9:95:78:fb:be:a9:0b:16:7f:63:dd:42: 91:e0:76:0c:23:66:10:3c:bf:bc:9a:24:4f:90:bf: 11:86:9a:a4:57:d1:4d:2f:af:2e:30:33:5e:eb:d1: 45:9d:02:a5:d3:4f:09:9e:c9:9e:26:41:e6:19:63: 57:89:79:97:17:92:63:4f:a6:43:a9:5b:fe:a7:d8: 95:b8:e1:98:8f:e7:0a:d0:e9:75:8a:c7:ef:fd:52: ea:ab:98:88:58:05:3c:16:fe:f3:34:37:9e:df:42: 6c:70:d6:d8:19:3b:9d:21:d0:54:44:4f:ca:dc:86: 84:e3:9a:dc:2c:bb:a2:81:dc:44:45:36:75:f4:6e: e2:4d:a8:44:50:ad:45:f4:cc:44:3b:17:cf:b5:2c: a6:cc:0f:2f:3f:7c:16:13:fc:87:e4:f1:cc:a6:4f: 3c:87:92:05:a6:af:80:b0:44:8a:9c:c7:06:fb:9d: ec:46:95:80:6e:7d:74:e4:d8:28:f6:ff:ef:92:61: db:8c:08:23:22:3c:38:17:52:dc:23:08:d4:22:5b: 02:de:47:47:fb:7c:68:29:34:08:93:95:0f:b9:bc: 31:eb:5f:a7:db:e9:3e:9a:ab:45:b1:37:cc:c0:e8: b1:e9:0c:84:09:0e:07:39:e1:a7:05:b1:48:f6:96: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:81:71:88:D1:1B:D4:DD:8D:E3:EB:FC:C9:A0:2C:BA:FF:7D:32:F3 X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f8:76:e1:94:7e:2b:b8:a9:a5:65:de:be:0e:b5:05:98:34: e0:4f:af:eb:b4:fa:f1:5e:83:b9:65:17:7d:2f:0e:8d:0e:af: 03:a5:dd:ae:27:6d:34:fb:d6:e7:97:01:1b:ef:e2:4b:1c:d6: c4:31:c9:ce:e7:29:8f:80:3a:43:5b:d1:dc:63:76:df:db:e2: a5:2a:8c:d1:3a:c5:60:55:16:b2:4e:43:a1:de:0d:c4:e1:9d: 21:d2:9d:be:3e:65:cb:02:d6:f4:87:93:86:a8:0c:c1:77:13: 3c:de:49:d9:c2:7c:dd:f4:a0:32:1c:3e:11:c2:6e:73:7a:96: 34:21:bb:4e:8f:89:27:25:1b:c6:39:36:1e:55:98:f2:df:ae: 3a:2f:08:94:02:6b:3d:ab:9b:c4:cd:e0:90:ca:31:4a:15:b0: ec:05:8e:66:e8:13:fd:c7:67:b8:80:35:c4:72:f6:b9:5b:13: 54:c2:e8:5d:24:74:fa:7d:2d:69:0c:f2:73:1a:5a:e9:18:30: 3e:31:d0:d1:67:fd:da:69:00:21:07:63:ae:b6:7e:46:c1:b0: a0:b7:4f:23:3d:39:74:64:f0:8d:c3:86:00:8a:35:7d:79:0b: 76:ef:10:5d:cd:1e:88:ce:fa:e6:b5:ee:c8:d9:67:86:e8:b3: 5f:bc:75:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjUxMTAyMTYyMzUwWhcNMjUxMTA5MTYyMzUwWjAYMRYwFAYD VQQDEw02OTA3ODU5Ni0wN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOHJlXj7vqkLFn9j3UKR4HYMI2YQPL+8miRPkL8RhpqkV9FNL68uMDNe69FF nQKl008JnsmeJkHmGWNXiXmXF5JjT6ZDqVv+p9iVuOGYj+cK0Ol1isfv/VLqq5iI WAU8Fv7zNDee30JscNbYGTudIdBURE/K3IaE45rcLLuigdxERTZ19G7iTahEUK1F 9MxEOxfPtSymzA8vP3wWE/yH5PHMpk88h5IFpq+AsESKnMcG+53sRpWAbn105Ngo 9v/vkmHbjAgjIjw4F1LcIwjUIlsC3kdH+3xoKTQIk5UPubwx61+n2+k+mqtFsTfM wOix6QyECQ4HOeGnBbFI9paN4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaBcYjR G9TdjePr/MmgLLr/fTLzMB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+HbhlH4ruKmlZd6+DrUFmDTgT6/rtPrxXoO5ZRd9Lw6NDq8Dpd2u J200+9bnlwEb7+JLHNbEMcnO5ymPgDpDW9HcY3bf2+KlKozROsVgVRayTkOh3g3E 4Z0h0p2+PmXLAtb0h5OGqAzBdxM83knZwnzd9KAyHD4Rwm5zepY0IbtOj4knJRvG OTYeVZjy3646LwiUAms9q5vEzeCQyjFKFbDsBY5m6BP9x2e4gDXEcva5WxNUwuhd JHT6fS1pDPJzGlrpGDA+MdDRZ/3aaQAhB2Outn5GwbCgt08jPTl0ZPCNw4YAijV9 eQt27xBdzR6Izvrmte7I2WeG6LNfvHWx -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:50 2025 by rpki-client