$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json) Hash identifier: 0SE89HFQyESc23x1jfRYFnJo7rqhytI8KvyIPpbRZJI= Subject key identifier: 62:35:E7:42:CC:8D:E8:81:3C:DD:20:12:7A:38:59:14:8A:89:04:B8 Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft Manifest number: 73 Signing time: Sun 19 Oct 2025 10:11:28 +0000 Manifest this update: Sun 19 Oct 2025 10:11:27 +0000 Manifest next update: Sun 26 Oct 2025 10:11:27 +0000 Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: 2MxBoIbnhO7c4oMQKxrxAHgCzSnm9IWSoGuddzFHAiU=) 2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 9OScaduExEngNPz5wsuWcHvwLQIw8gltPcbBA5tFHWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2 Validity Not Before: Oct 19 10:11:27 2025 GMT Not After : Oct 26 10:11:27 2025 GMT Subject: CN=68f4b950-86c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:0d:97:77:f9:df:00:59:ea:bb:3e:c5:9c: da:57:05:ac:ff:9d:4a:5e:5b:94:07:f3:11:c0:fc: fe:f9:c0:80:6e:62:51:f2:24:6a:af:89:4f:a4:e8: d9:02:c8:06:dc:0d:20:ea:98:5c:2d:fc:1f:f1:53: 72:a1:a8:20:3a:9f:62:80:4b:60:fa:8c:5e:6a:b9: 35:d8:15:c2:06:c2:5f:cf:42:90:e7:4d:ac:4f:53: 89:67:27:aa:88:fa:7c:27:2e:73:a6:ed:00:fb:42: 89:33:f1:6b:f3:b3:c4:d6:c6:24:af:4a:ee:3a:27: 23:77:37:d4:6b:0b:a3:57:9b:df:be:69:fe:d4:0d: 16:3c:1f:1b:0d:08:e1:18:54:88:4a:11:f2:54:fa: 71:ed:99:c4:7f:8a:8b:55:74:53:e6:e2:76:9a:c0: 83:35:ba:db:a2:4c:c3:26:0f:14:cf:8e:4d:b3:f7: a2:b9:46:5d:07:b0:c9:d2:4d:8a:7d:67:d0:8b:e7: 42:d4:e7:2d:f3:0a:70:1c:e8:a6:7a:9c:71:2c:ae: 11:df:29:94:4b:65:26:b6:36:87:ce:a4:64:66:05: 7a:d3:09:9d:26:18:7d:ea:b3:b5:2e:03:43:15:db: d5:c1:24:63:8a:2f:7d:28:9e:e7:ab:29:0c:70:30: 12:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:35:E7:42:CC:8D:E8:81:3C:DD:20:12:7A:38:59:14:8A:89:04:B8 X509v3 Authority Key Identifier: keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ed:1a:09:26:51:43:94:6c:a9:4f:f6:4f:70:11:1e:ef:93: e3:ef:e2:ea:8b:54:9d:a7:50:54:43:ac:b4:a0:32:40:8f:e5: cb:c7:fb:de:60:d9:3b:8e:d6:d3:03:bf:b1:4d:e7:39:d5:e3: ab:d4:b7:84:3d:91:a4:6d:34:b0:d2:81:3e:41:0a:39:d3:2a: 3a:59:7f:c6:f0:35:49:5d:c8:23:82:53:31:69:36:bd:8c:11: 35:4f:25:f5:ea:36:1e:bc:03:ff:15:79:06:30:34:9e:6c:96: ae:26:13:01:74:a1:3f:c0:4f:6b:5f:cf:39:9f:ae:1f:1e:cf: ac:98:b5:4b:7e:04:61:3f:e4:dc:23:e8:7a:e2:08:62:bc:bb: 28:00:6d:3e:22:35:6f:ef:b9:ac:9a:c5:31:cb:3b:fc:83:61: d8:e2:da:74:7c:cb:ef:58:a8:8f:b6:8a:c1:4b:c3:e6:92:91: 14:8d:b1:f1:29:ee:00:28:08:72:c4:e3:ba:82:5f:58:7f:0b: 31:06:a8:1c:c7:d2:aa:59:4b:c2:81:a7:bc:02:fb:a4:4a:d1: ac:6c:94:73:4c:91:18:c2:aa:83:1e:cf:85:af:ad:f6:37:5f: 57:1e:5b:52:80:72:f2:9c:ac:ff:33:45:84:dd:6d:f6:a2:d4: 57:38:5d:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEZEODExMC8GA1UEBRMoODA0NjMwNzREODNGNUU4MDM1NEQxOTcwNTg2RjU0QTg5 NjVFMThEMjAeFw0yNTEwMTkxMDExMjdaFw0yNTEwMjYxMDExMjdaMBgxFjAUBgNV BAMTDTY4ZjRiOTUwLTg2YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAPA2Xd/nfAFnquz7FnNpXBaz/nUpeW5QH8xHA/P75wIBuYlHyJGqviU+k6NkC yAbcDSDqmFwt/B/xU3KhqCA6n2KAS2D6jF5quTXYFcIGwl/PQpDnTaxPU4lnJ6qI +nwnLnOm7QD7Qokz8Wvzs8TWxiSvSu46JyN3N9RrC6NXm9++af7UDRY8HxsNCOEY VIhKEfJU+nHtmcR/iotVdFPm4naawIM1utuiTMMmDxTPjk2z96K5Rl0HsMnSTYp9 Z9CL50LU5y3zCnAc6KZ6nHEsrhHfKZRLZSa2NofOpGRmBXrTCZ0mGH3qs7UuA0MV 29XBJGOKL30onuerKQxwMBJrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYjXnQsyN 6IE83SASejhZFIqJBLgwHwYDVR0jBBgwFoAUgEYwdNg/XoA1TRlwWG9UqJZeGNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RkQ4L0YzNTEyQTBBRkND NTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9BMVRSbHdXRzlVcUpaZUdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0VZd2ROZ19Yb0ExVFJsd1dHOVVxSlplR05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RkQ4L0YzNTEyQTBBRkNDNTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9B MVRSbHdXRzlVcUpaZUdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALLtGgkmUUOUbKlP9k9wER7vk+Pv4uqLVJ2nUFRDrLSgMkCP5cvH+95g 2TuO1tMDv7FN5znV46vUt4Q9kaRtNLDSgT5BCjnTKjpZf8bwNUldyCOCUzFpNr2M ETVPJfXqNh68A/8VeQYwNJ5slq4mEwF0oT/AT2tfzzmfrh8ez6yYtUt+BGE/5Nwj 6HriCGK8uygAbT4iNW/vuayaxTHLO/yDYdji2nR8y+9YqI+2isFLw+aSkRSNsfEp 7gAoCHLE47qCX1h/CzEGqBzH0qpZS8KBp7wC+6RK0axslHNMkRjCqoMez4WvrfY3 X1ceW1KAcvKcrP8zRYTdbfai1Fc4XQU= -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:51 2025 by rpki-client