$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: sM+z60qklXRnfIcfHz3MX/GJGESF+Qv60IMLpggNcf0= Subject key identifier: 22:B4:F9:3A:3C:57:CC:E7:3E:FD:8A:04:45:45:36:55:D1:FC:CC:2B Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 04BB Signing time: Wed 05 Nov 2025 00:00:03 +0000 Manifest this update: Wed 05 Nov 2025 00:00:02 +0000 Manifest next update: Wed 12 Nov 2025 00:00:02 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: uC9wZ+2WAGoyPAiI2svDMOT7pNPlz7RNmky7WLL+gjU=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: M1i4rWrbGKWHBYp62z8SKmnQxpHNlWERMJQXrk6a0Go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Nov 5 00:00:02 2025 GMT Not After : Nov 12 00:00:02 2025 GMT Subject: CN=690a9382-f9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:99:a2:a0:b0:bc:4b:15:9e:08:85:e2:9b: 81:22:23:40:4b:e9:47:82:83:e5:0b:fc:bb:b1:c8: 03:ed:d8:e6:79:0c:67:07:fa:1e:48:87:17:0a:89: fe:0b:11:0e:9f:13:74:ce:a9:e9:c3:5e:d0:38:b8: 59:7f:76:f4:17:6a:b5:49:78:d3:f8:17:5f:c8:56: 25:c2:ea:79:32:f4:26:89:78:00:ce:11:ee:9d:43: ef:e8:3b:b3:e8:26:aa:9d:ab:19:a7:c4:4c:39:ef: 22:75:88:e1:46:2b:2e:e2:4e:e3:ee:91:9b:d9:9a: 52:65:d2:f9:49:b5:69:94:84:59:df:1c:f7:d9:ac: 1f:c5:8c:9c:56:d7:c0:26:4e:ac:da:3a:85:f9:61: 68:4a:62:69:f6:55:c4:a9:be:c6:f1:6a:a0:9f:91: 7d:4f:79:cb:cf:3c:7e:45:b8:bd:04:3d:8e:31:37: 99:94:0c:b7:b0:11:57:68:5b:b1:20:b6:c2:46:0a: d2:b3:70:66:8b:f8:31:8b:07:a0:10:35:53:0b:c1: 02:ef:99:8a:2b:b9:39:b8:91:c7:39:51:e4:bd:e7: 27:ee:4a:58:67:46:18:60:79:5e:d6:8b:df:89:12: 9f:17:4b:19:9d:c8:cc:2c:70:6d:15:da:50:ef:84: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B4:F9:3A:3C:57:CC:E7:3E:FD:8A:04:45:45:36:55:D1:FC:CC:2B X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4c:da:43:2b:32:af:15:eb:82:9e:84:42:ba:12:fd:36:10: e9:df:07:fb:b8:b1:0e:0c:8d:1d:f8:4b:b3:ff:4e:fd:2d:8b: b1:ad:3c:18:f7:4c:85:36:02:9b:8c:7e:15:b8:e3:e6:e9:d6: ef:4d:99:38:a7:45:a1:63:41:7c:0a:22:fe:fb:d2:69:0e:04: ec:32:db:92:34:8d:3a:72:c5:98:8d:8d:60:06:be:d3:42:7e: 24:d3:bc:54:5f:84:93:74:ff:2f:e5:7b:9d:41:02:11:54:ba: d6:76:de:4a:b5:35:bf:10:a6:01:3c:2c:22:8b:6f:f7:28:65: a5:e9:97:76:f2:5e:fa:b4:11:17:86:a3:58:b7:b7:1e:0f:ed: 16:46:be:87:a0:09:d6:d5:17:b1:ca:72:88:4d:db:be:45:8f: 9d:67:cf:b8:52:e1:a6:4f:43:14:33:d1:5a:1b:68:01:c9:5f: e3:cc:f6:12:4e:f1:64:fc:d7:55:0e:e9:22:cf:4d:bd:7c:76: 74:71:aa:e1:1f:81:45:1c:bf:ed:ca:f1:d2:92:18:ed:d2:33: 9f:0f:f2:3f:9a:0b:ce:08:20:61:b0:a6:3c:da:92:2b:c3:5a: 4f:22:ef:23:af:59:57:d6:f3:89:77:3a:b0:a8:a2:59:24:68: 2a:48:3e:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUxMTA1MDAwMDAyWhcNMjUxMTEyMDAwMDAyWjAYMRYwFAYD VQQDEw02OTBhOTM4Mi1mOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcqZoqCwvEsVngiF4puBIiNAS+lHgoPlC/y7scgD7djmeQxnB/oeSIcXCon+ CxEOnxN0zqnpw17QOLhZf3b0F2q1SXjT+BdfyFYlwup5MvQmiXgAzhHunUPv6Duz 6CaqnasZp8RMOe8idYjhRisu4k7j7pGb2ZpSZdL5SbVplIRZ3xz32awfxYycVtfA Jk6s2jqF+WFoSmJp9lXEqb7G8Wqgn5F9T3nLzzx+Rbi9BD2OMTeZlAy3sBFXaFux ILbCRgrSs3Bmi/gxiwegEDVTC8EC75mKK7k5uJHHOVHkvecn7kpYZ0YYYHle1ovf iRKfF0sZncjMLHBtFdpQ74SMLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCK0+To8 V8znPv2KBEVFNlXR/MwrMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJTNpDKzKvFeuCnoRCuhL9NhDp3wf7uLEODI0d+Euz/079LYuxrTwY 90yFNgKbjH4VuOPm6dbvTZk4p0WhY0F8CiL++9JpDgTsMtuSNI06csWYjY1gBr7T Qn4k07xUX4STdP8v5XudQQIRVLrWdt5KtTW/EKYBPCwii2/3KGWl6Zd28l76tBEX hqNYt7ceD+0WRr6HoAnW1RexynKITdu+RY+dZ8+4UuGmT0MUM9FaG2gByV/jzPYS TvFk/NdVDukiz029fHZ0carhH4FFHL/tyvHSkhjt0jOfD/I/mgvOCCBhsKY82pIr w1pPIu8jr1lX1vOJdzqwqKJZJGgqSD6N -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:40 2025 by rpki-client