$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft File: gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json) Hash identifier: HSW7kafi3+elIu5ssansMf2Lj3soCZNvV3Vx05dICyA= Subject key identifier: E6:C0:62:5F:FA:A6:96:A8:EC:03:8D:23:31:C7:B7:CA:30:61:44:21 Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft Manifest number: 38 Signing time: Mon 03 Nov 2025 07:35:29 +0000 Manifest this update: Mon 03 Nov 2025 07:35:28 +0000 Manifest next update: Mon 10 Nov 2025 07:35:28 +0000 Files and hashes: 1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: zgiyr5ynXe85HyJ8qs4OxJcobE4ht3yCcs8DQevoQAU=) 2: B92859F46EF611F0BEAA5130C4F9AE02.roa (hash: KxrlmGdN300w3GzZo2NWvwcNeTUF77b4vkK7jJtow4Y=) 3: 90BDD67E6EF611F0B80A0E30C4F9AE02.roa (hash: YAsradZ2aJS18fpOaKgFCMVexkVrOXolStNUtaxy12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Validity Not Before: Nov 3 07:35:28 2025 GMT Not After : Nov 10 07:35:28 2025 GMT Subject: CN=69085b41-40f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:8f:68:98:6a:50:22:6c:63:b3:26:fd:67: dc:e3:55:86:2d:e3:02:d7:c5:5a:3b:b7:cf:9f:68: 08:b0:7d:7e:c8:61:f8:72:5e:54:01:2d:f7:2b:fc: 87:4b:f1:12:71:71:98:4c:32:7c:ee:6a:1e:f5:b4: bc:8a:8a:cd:f0:08:62:17:e7:cf:3b:b8:e5:40:35: b6:7f:a9:82:76:c0:8f:76:3f:73:d7:33:23:d8:99: dc:4f:c6:9e:01:8b:35:3b:60:1e:70:1d:0c:23:30: 08:c9:c4:53:27:5d:32:c7:78:5c:0d:b7:6a:2b:2d: e8:80:31:82:d2:52:93:d9:55:b6:55:da:38:69:a7: 76:16:49:e3:9b:c5:8b:08:f8:4b:95:53:ab:e4:ff: 75:72:8e:c7:d2:63:96:32:3f:25:02:48:16:57:e9: 04:27:81:3c:03:43:27:23:4c:57:5b:17:72:51:62: f6:fe:56:e9:97:6b:1a:81:bd:a2:e9:3a:09:94:b6: b9:57:2a:bb:2a:39:f3:46:b1:f4:67:f7:f7:fb:7a: ad:86:e8:b8:66:22:60:85:19:99:30:fa:09:43:57: 69:bf:04:cb:b2:40:f7:09:cf:22:a4:28:2b:f1:71: 15:74:5a:02:e2:51:0e:e2:d4:12:b8:1f:0d:a1:cb: 6d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C0:62:5F:FA:A6:96:A8:EC:03:8D:23:31:C7:B7:CA:30:61:44:21 X509v3 Authority Key Identifier: keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7e:50:cd:88:55:47:73:19:8f:11:bb:8f:8d:1c:b2:86:84: ec:89:8d:fc:0a:49:7c:69:39:29:2f:37:7e:ec:38:73:0a:07: bc:2d:5e:93:35:a4:c2:91:64:84:d4:2b:12:0b:ad:19:f5:d6: 35:5d:16:93:ab:dd:aa:23:ea:aa:d6:1b:30:c6:06:9b:8d:38: 54:a8:8e:96:60:4b:88:52:92:54:e0:ad:f8:ec:18:4b:56:cb: 9a:a1:ed:22:58:de:7e:4e:33:88:2e:72:7b:b3:8d:bd:e3:b7: a4:0c:45:fb:4f:0f:0f:8c:d9:e6:d2:aa:94:ed:98:2b:93:99: 2f:cd:5e:b4:27:c1:22:bd:69:cd:8f:79:d6:5c:86:59:5c:f8: 2d:34:fa:54:a4:5d:3a:3e:f9:38:8e:62:b2:7c:4b:b3:31:0a: 94:06:6f:20:1b:04:2f:1a:6d:30:fc:e8:0f:f1:06:f6:b1:ae: bc:e9:b7:d1:63:42:43:57:9b:77:10:aa:3e:0f:30:65:d5:3a: 12:8b:cb:0e:f5:4b:5e:84:e9:2d:1c:62:73:71:af:c8:42:15: 0c:2f:b8:2c:76:c1:a4:7d:87:8d:0e:af:d2:ad:98:53:11:01: 13:06:96:32:4d:61:e9:ec:7e:89:9d:65:06:24:0f:68:8f:d3: 19:2b:97:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoODI2QjQ0NzRCQzZGNEYzQkU0MEI1RTc1MTFGMTA1Q0FF N0ZFOEMwQzAeFw0yNTExMDMwNzM1MjhaFw0yNTExMTAwNzM1MjhaMBgxFjAUBgNV BAMTDTY5MDg1YjQxLTQwZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe9o9omGpQImxjsyb9Z9zjVYYt4wLXxVo7t8+faAiwfX7IYfhyXlQBLfcr/IdL 8RJxcZhMMnzuah71tLyKis3wCGIX5887uOVANbZ/qYJ2wI92P3PXMyPYmdxPxp4B izU7YB5wHQwjMAjJxFMnXTLHeFwNt2orLeiAMYLSUpPZVbZV2jhpp3YWSeObxYsI +EuVU6vk/3VyjsfSY5YyPyUCSBZX6QQngTwDQycjTFdbF3JRYvb+VumXaxqBvaLp OgmUtrlXKrsqOfNGsfRn9/f7eq2G6LhmImCFGZkw+glDV2m/BMuyQPcJzyKkKCvx cRV0WgLiUQ7i1BK4Hw2hy23JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5sBiX/qm lqjsA40jMce3yjBhRCEwHwYDVR0jBBgwFoAUgmtEdLxvTzvkC151EfEFyuf+jAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDLzk5MUVBREZFNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ210RWRMeHZUenZrQzE1MUVmRUZ5dWYtakF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDLzk5MUVBREZFNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL2dtdEVkTHh2VHp2 a0MxNTFFZkVGeXVmLWpBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFF+UM2IVUdzGY8Ru4+NHLKGhOyJjfwKSXxpOSkvN37sOHMKB7wtXpM1 pMKRZITUKxILrRn11jVdFpOr3aoj6qrWGzDGBpuNOFSojpZgS4hSklTgrfjsGEtW y5qh7SJY3n5OM4gucnuzjb3jt6QMRftPDw+M2ebSqpTtmCuTmS/NXrQnwSK9ac2P edZchllc+C00+lSkXTo++TiOYrJ8S7MxCpQGbyAbBC8abTD86A/xBvaxrrzpt9Fj QkNXm3cQqj4PMGXVOhKLyw71S16E6S0cYnNxr8hCFQwvuCx2waR9h40Or9KtmFMR ARMGljJNYensfomdZQYkD2iP0xkrlwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:14 2025 by rpki-client