$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft File: gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json) Hash identifier: IgFuNkWH9iLMPcSaJl+ER/r8NJY8T9fq8a0yAdXzIw8= Subject key identifier: 92:BE:72:B3:C4:0D:F5:6B:6C:F9:98:F0:E2:C3:B1:D2:9A:90:E5:AE Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F Certificate issuer: /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft Manifest number: 3C Signing time: Mon 03 Nov 2025 05:28:13 +0000 Manifest this update: Mon 03 Nov 2025 05:28:13 +0000 Manifest next update: Mon 10 Nov 2025 05:28:13 +0000 Files and hashes: 1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: 861yogpwdWdqmosp3SyEvw0z3obPKU8SPQwzBlFqQs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F Validity Not Before: Nov 3 05:28:13 2025 GMT Not After : Nov 10 05:28:13 2025 GMT Subject: CN=69083d6d-8036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e4:cd:cb:c5:bb:4d:db:1e:bc:5c:56:6b:67: 49:5a:e0:ed:32:7c:cb:50:b9:5a:a1:6c:3d:4c:c8: c7:94:7c:ea:8a:c4:36:6c:66:bc:a9:94:e1:58:74: 36:f1:c3:78:bf:46:20:b9:ae:3d:c5:09:d7:5d:5f: 61:d6:05:b3:cb:a7:9b:84:e0:c7:0d:f9:07:c6:6b: 4a:c3:80:57:fa:d5:46:93:bd:84:87:e7:2e:2b:5c: 59:54:eb:d7:5f:21:4d:be:cc:06:2b:58:3e:81:28: c3:72:31:c8:b0:83:a4:19:eb:33:56:c9:d3:46:24: 35:e1:e6:73:22:b1:7d:d5:0f:f8:38:3f:bd:d4:1f: d2:12:d0:25:0f:53:29:61:6b:b1:50:2c:ce:34:d2: 41:c3:2c:f0:bc:8e:35:b4:c0:41:2d:13:c1:34:8f: 3d:9b:90:6b:6d:af:f5:c0:1a:a5:aa:b1:40:97:0b: 7a:d3:8a:26:29:15:2b:5e:0d:9d:ca:7b:de:3f:5c: 86:58:ba:72:4f:eb:1d:3d:10:ba:dc:9b:8d:4f:33: 11:88:67:8c:87:e8:16:86:22:6e:67:7c:94:0f:f6: 99:bb:1a:f5:7f:d2:a5:46:a5:c3:ae:15:6a:81:ab: a5:ed:52:d2:91:8f:48:45:89:4a:45:76:72:98:4b: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:72:B3:C4:0D:F5:6B:6C:F9:98:F0:E2:C3:B1:D2:9A:90:E5:AE X509v3 Authority Key Identifier: keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:28:98:89:d7:8c:2f:b2:0e:56:23:5e:d2:46:d8:2c:03:6b: 03:cf:c3:f3:75:61:6f:c9:9a:5a:60:3a:59:a1:38:b6:a6:48: 8a:11:9e:d8:05:12:03:cf:de:3c:7a:20:ce:fd:86:8d:40:a1: 1b:94:e8:5f:54:cc:0d:22:96:d0:8b:03:25:88:2e:c3:05:93: f9:32:93:60:e7:52:20:2e:5e:d4:1f:fd:39:e4:dc:9d:3c:5a: b9:58:d2:d3:a9:db:76:52:4c:96:21:24:e6:96:6e:c3:0b:06: bb:34:62:2a:7f:ed:cf:3a:e4:98:df:39:5a:70:85:b1:8a:e3: ee:a1:61:1d:62:55:a6:1f:9d:ce:d7:ac:ac:f7:3b:25:90:b2: 31:96:51:ad:f0:49:13:46:cd:f2:51:19:b8:23:fe:41:10:25: e5:22:55:2d:8c:61:98:17:38:b2:cf:c1:64:20:3c:4a:3d:8a: 40:53:51:d4:2b:8c:09:21:50:ec:26:ea:e3:df:a9:cc:d2:01: 0d:f0:b1:e2:32:b1:19:31:1e:53:35:63:c1:13:0a:c7:5b:1f: 63:ff:ad:b8:61:fa:59:aa:e5:8a:df:2a:f0:6f:f0:8d:fd:0e: 9a:8a:87:70:35:00:6c:0a:ac:1f:79:f0:82:4e:73:03:57:50: 87:e9:48:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoODE4QkJFMDUxMTA4QTlBNjJCMDZGQzY5RTRCRkEzNjk3 RTY1RTMwRjAeFw0yNTExMDMwNTI4MTNaFw0yNTExMTAwNTI4MTNaMBgxFjAUBgNV BAMTDTY5MDgzZDZkLTgwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDt5M3LxbtN2x68XFZrZ0la4O0yfMtQuVqhbD1MyMeUfOqKxDZsZryplOFYdDbx w3i/RiC5rj3FCdddX2HWBbPLp5uE4McN+QfGa0rDgFf61UaTvYSH5y4rXFlU69df IU2+zAYrWD6BKMNyMciwg6QZ6zNWydNGJDXh5nMisX3VD/g4P73UH9IS0CUPUylh a7FQLM400kHDLPC8jjW0wEEtE8E0jz2bkGttr/XAGqWqsUCXC3rTiiYpFSteDZ3K e94/XIZYunJP6x09ELrcm41PMxGIZ4yH6BaGIm5nfJQP9pm7GvV/0qVGpcOuFWqB q6XtUtKRj0hFiUpFdnKYS/5ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkr5ys8QN 9Wts+Zjw4sOx0pqQ5a4wHwYDVR0jBBgwFoAUgYu+BREIqaYrBvxp5L+jaX5l4w8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0NENkQ2QzdFNUUy MDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1l1LUJSRUlxYVlyQnZ4cDVMLWphWDVsNHc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0L0NENkQ2QzdFNUUyMDExRjBBREFBNEI2RkM0RjlBRTAyL2dZdS1CUkVJcWFZ ckJ2eHA1TC1qYVg1bDR3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIcomInXjC+yDlYjXtJG2CwDawPPw/N1YW/JmlpgOlmhOLamSIoRntgF EgPP3jx6IM79ho1AoRuU6F9UzA0iltCLAyWILsMFk/kyk2DnUiAuXtQf/Tnk3J08 WrlY0tOp23ZSTJYhJOaWbsMLBrs0Yip/7c865JjfOVpwhbGK4+6hYR1iVaYfnc7X rKz3OyWQsjGWUa3wSRNGzfJRGbgj/kEQJeUiVS2MYZgXOLLPwWQgPEo9ikBTUdQr jAkhUOwm6uPfqczSAQ3wseIysRkxHlM1Y8ETCsdbH2P/rbhh+lmq5YrfKvBv8I39 DpqKh3A1AGwKrB958IJOcwNXUIfpSOs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:01:15 2025 by rpki-client