$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json) Hash identifier: 7i7UbORjB8tTLkieb+IkT5YiCbPC9ZRAqHqryG73cjk= Subject key identifier: 0E:8D:DA:44:43:E0:14:8C:0D:06:48:3D:5F:FB:2C:2F:B9:DA:1F:83 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft Manifest number: 0131 Signing time: Wed 05 Nov 2025 04:41:08 +0000 Manifest this update: Wed 05 Nov 2025 04:41:07 +0000 Manifest next update: Wed 12 Nov 2025 04:41:07 +0000 Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: wWtJ7g9gXLrsMPtYxIhqGDKCCwIkMRNq65L34bZ3xjk=) 2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: DySwA8C4czN5vHz0fLCB/xltzHfCwXmq3TdjlNfOwqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: Nov 5 04:41:07 2025 GMT Not After : Nov 12 04:41:07 2025 GMT Subject: CN=690ad563-81ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:b7:a9:39:96:db:3a:a9:c5:9f:f4:19:ce: 5b:f9:f1:9b:65:a5:e2:89:2a:cc:7d:60:30:2b:03: e6:d8:4f:a9:95:e7:bf:de:d3:97:82:ac:93:a5:66: 3d:00:80:d1:d3:10:fc:aa:d3:cd:d1:33:fd:63:bf: 2a:38:9b:29:6c:d8:a3:27:5e:09:2c:0f:f9:2a:ad: 17:23:ba:49:46:bc:42:5a:94:e4:07:43:dc:13:6c: 6f:91:f5:65:5e:84:c0:90:8d:51:16:dc:0a:9b:81: 96:4f:88:1a:a9:3e:18:7d:0e:32:97:9f:02:6d:d6: ed:4f:fc:54:93:9a:fa:c8:13:af:7b:dd:33:c1:24: 10:c5:35:f4:f0:41:14:62:11:24:ba:8b:fa:99:4a: 99:99:6b:13:fd:65:8f:79:6f:7a:49:fa:8a:10:5c: 95:6a:7f:46:6e:eb:7b:fc:51:0a:78:fe:11:88:e2: 0e:20:64:15:af:7f:7d:ec:46:ab:9e:1f:83:31:06: de:29:92:cc:8d:f3:88:01:c2:bb:82:39:e1:f1:13: 1d:ff:47:50:69:28:0e:70:e7:79:0b:88:27:2c:67: eb:a5:26:7d:e1:3f:80:29:1c:88:53:59:0b:9b:e1: 57:5a:7e:75:cf:e7:9a:a0:58:ad:62:d9:6b:d4:3d: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8D:DA:44:43:E0:14:8C:0D:06:48:3D:5F:FB:2C:2F:B9:DA:1F:83 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:bd:fa:3f:0f:d7:33:f7:db:3e:e6:e8:4e:09:d4:91:41:c6: a9:00:f4:9e:ca:4f:b7:7e:78:26:7e:d3:ed:4f:d7:08:bc:4a: 17:97:f8:00:b3:d6:a6:c7:a5:ae:20:21:5d:ff:4d:d9:66:da: 49:9f:a0:d2:99:60:94:6b:ef:89:b7:53:2d:31:e7:e4:59:81: 99:98:23:0b:90:ad:16:20:73:16:8b:82:cd:bd:de:b2:f2:2b: c7:99:ba:5d:c5:9a:ec:a5:f0:7d:1d:c9:ac:f8:8f:77:61:e2: 82:a9:13:2e:14:0a:00:e9:ae:3d:45:c7:a2:43:4d:11:ae:90: d7:09:e5:a0:f7:7b:b2:bd:d3:a1:a8:10:bc:31:bb:cc:56:35: 90:dd:ea:ff:29:92:25:63:10:53:70:3b:3c:45:9f:7a:c7:36: 47:bc:00:05:32:23:2d:a0:a5:9b:d5:96:67:5e:c3:79:07:77: 20:c4:3f:aa:20:33:a9:0b:06:ef:35:2b:62:00:af:87:fd:8c: 3d:91:51:ed:f9:bb:80:55:a9:d3:48:57:bf:58:f2:f0:94:4f: 8a:85:79:b7:c5:9d:61:d6:d8:d0:a0:76:99:37:df:1d:6e:03: 11:42:a2:f9:61:db:4f:23:2d:35:c1:da:49:40:a7:8c:de:ed: 24:38:62:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUxMTA1MDQ0MTA3WhcNMjUxMTEyMDQ0MTA3WjAYMRYwFAYD VQQDEw02OTBhZDU2My04MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlK3qTmW2zqpxZ/0Gc5b+fGbZaXiiSrMfWAwKwPm2E+plee/3tOXgqyTpWY9 AIDR0xD8qtPN0TP9Y78qOJspbNijJ14JLA/5Kq0XI7pJRrxCWpTkB0PcE2xvkfVl XoTAkI1RFtwKm4GWT4gaqT4YfQ4yl58CbdbtT/xUk5r6yBOve90zwSQQxTX08EEU YhEkuov6mUqZmWsT/WWPeW96SfqKEFyVan9Gbut7/FEKeP4RiOIOIGQVr3997Ear nh+DMQbeKZLMjfOIAcK7gjnh8RMd/0dQaSgOcOd5C4gnLGfrpSZ94T+AKRyIU1kL m+FXWn51z+eaoFitYtlr1D1IMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6N2kRD 4BSMDQZIPV/7LC+52h+DMB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1T Nmkyc2hybUtPWXp3eGIxdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIvfo/D9cz99s+5uhOCdSRQcapAPSeyk+3fngmftPtT9cIvEoXl/gA s9amx6WuICFd/03ZZtpJn6DSmWCUa++Jt1MtMefkWYGZmCMLkK0WIHMWi4LNvd6y 8ivHmbpdxZrspfB9Hcms+I93YeKCqRMuFAoA6a49RceiQ00RrpDXCeWg93uyvdOh qBC8MbvMVjWQ3er/KZIlYxBTcDs8RZ96xzZHvAAFMiMtoKWb1ZZnXsN5B3cgxD+q IDOpCwbvNStiAK+H/Yw9kVHt+buAVanTSFe/WPLwlE+KhXm3xZ1h1tjQoHaZN98d bgMRQqL5YdtPIy01wdpJQKeM3u0kOGL8 -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:50 2025 by rpki-client