$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json) Hash identifier: zAZ9OYwj4YlBOHw/Ai7ThuCjjDVTVaMg0hR0iH5Ieko= Subject key identifier: E7:C2:F9:A7:BE:63:BC:16:7B:08:4A:CE:6E:81:B9:2A:52:17:17:E9 Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft Manifest number: 0697 Signing time: Tue 04 Nov 2025 22:27:24 +0000 Manifest this update: Tue 04 Nov 2025 22:27:23 +0000 Manifest next update: Tue 11 Nov 2025 22:27:23 +0000 Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: FPA6tiimyXGXf5ihRkvONbjdtZwv4q/bA/s/JQNAWe4=) 2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: rIs0TSp/FOVS2yEmJo3gyqgsWO9NpZnz1xIrp85P4OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Validity Not Before: Nov 4 22:27:23 2025 GMT Not After : Nov 11 22:27:23 2025 GMT Subject: CN=690a7dcb-c9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:97:d4:13:94:5c:db:8d:ab:a3:fd:17:8b: 35:ee:d6:b5:44:7a:32:ed:37:ea:89:22:64:d4:ba: 25:48:1c:c6:25:4a:48:f3:fb:9b:ad:ad:7f:fb:5f: dc:d4:25:50:ae:d9:ed:bd:52:f3:b3:53:69:b9:5f: 59:ce:cf:eb:94:6f:18:dc:b4:38:a7:a6:65:41:94: f1:94:2d:d2:b1:95:85:3e:29:71:cc:e5:f0:bc:56: c8:ec:8d:a0:f0:6f:9a:04:ff:2f:8a:f0:3b:24:ef: 73:0d:e1:39:a3:e5:65:de:83:be:60:a7:f1:91:2e: ae:42:a7:e9:55:57:2a:3a:09:bb:c0:f2:f0:e1:4b: f0:68:c3:f8:d8:cb:1a:08:f6:2c:fe:ab:23:9a:1b: 35:3b:82:f0:ad:9d:07:bd:e6:69:4e:b2:7d:93:6b: 3d:5b:51:11:db:6a:04:6d:bb:77:fb:f6:10:e8:ce: 23:9a:80:4a:d5:1e:f2:7c:3b:8c:ac:18:46:99:d8: 6e:81:dc:fa:2e:95:93:ee:0c:3c:56:a8:93:b8:f4: a4:92:c4:2b:a2:5c:bf:b4:d8:8a:17:dd:2e:49:dd: 33:3c:ae:0c:e8:a0:db:66:e7:4d:ad:db:35:8d:a4: f2:87:46:70:8b:a6:47:2f:01:b7:77:78:31:a0:8a: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:F9:A7:BE:63:BC:16:7B:08:4A:CE:6E:81:B9:2A:52:17:17:E9 X509v3 Authority Key Identifier: keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e3:55:1b:92:8e:4b:f4:10:44:2e:a9:61:ce:d3:c6:6c:13: f6:28:fa:03:c7:0f:43:72:07:01:03:1f:24:ca:5e:63:43:5f: dd:90:61:7a:92:6c:2f:17:12:b3:eb:49:9f:60:25:3d:9a:99: 7b:fd:49:a4:ed:0b:fd:c7:e4:b9:48:18:a1:9a:6a:2d:4f:07: 9a:ea:be:a2:40:cd:41:75:5f:7e:48:61:ca:cb:a3:47:04:b7: f5:a1:4f:78:50:a1:a0:23:94:26:5d:31:55:ce:6d:a2:2d:ca: 74:1b:5f:df:8c:fe:26:de:5a:7b:3d:71:54:8f:27:4f:b1:d1: 42:5c:1d:d9:5e:af:96:a5:94:83:65:01:f1:49:b4:70:dd:55: 61:ba:7c:6e:7d:97:55:a3:76:7d:28:12:e4:97:92:76:17:e5: 81:0d:fe:46:da:95:ac:34:18:71:5b:ab:59:be:5f:5e:60:08: 8c:3e:3f:27:5c:e3:f5:73:c3:ed:7d:ad:3b:63:8b:01:bf:ab: 75:ab:d5:2f:3e:ae:8b:9a:0a:f8:16:ce:29:64:35:2a:9f:cd: f8:18:ab:02:44:c7:a3:cf:01:f2:ec:2c:9e:f9:87:b4:95:f6: 3d:04:3b:32:37:91:17:81:55:6c:ef:40:b6:7b:70:cd:8e:66: 33:06:bc:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2 RjkwQkZDNjAwHhcNMjUxMTA0MjIyNzIzWhcNMjUxMTExMjIyNzIzWjAYMRYwFAYD VQQDEw02OTBhN2RjYi1jOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyViX1BOUXNuNq6P9F4s17ta1RHoy7TfqiSJk1LolSBzGJUpI8/ubra1/+1/c 1CVQrtntvVLzs1NpuV9Zzs/rlG8Y3LQ4p6ZlQZTxlC3SsZWFPilxzOXwvFbI7I2g 8G+aBP8vivA7JO9zDeE5o+Vl3oO+YKfxkS6uQqfpVVcqOgm7wPLw4UvwaMP42Msa CPYs/qsjmhs1O4LwrZ0HveZpTrJ9k2s9W1ER22oEbbt3+/YQ6M4jmoBK1R7yfDuM rBhGmdhugdz6LpWT7gw8VqiTuPSkksQroly/tNiKF90uSd0zPK4M6KDbZudNrds1 jaTyh0Zwi6ZHLwG3d3gxoIrPEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfC+ae+ Y7wWewhKzm6BuSpSFxfpMB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBRC80QjY1MDY1ODhERTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpj MTR2Y09pRXJDMzV2a0xfR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW41Ubko5L9BBELqlhztPGbBP2KPoDxw9DcgcBAx8kyl5jQ1/dkGF6 kmwvFxKz60mfYCU9mpl7/Umk7Qv9x+S5SBihmmotTwea6r6iQM1BdV9+SGHKy6NH BLf1oU94UKGgI5QmXTFVzm2iLcp0G1/fjP4m3lp7PXFUjydPsdFCXB3ZXq+WpZSD ZQHxSbRw3VVhunxufZdVo3Z9KBLkl5J2F+WBDf5G2pWsNBhxW6tZvl9eYAiMPj8n XOP1c8Ptfa07Y4sBv6t1q9UvPq6Lmgr4Fs4pZDUqn834GKsCRMejzwHy7Cye+Ye0 lfY9BDsyN5EXgVVs70C2e3DNjmYzBrwr -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:17 2025 by rpki-client