$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: V0REdg9jHScshc2TimpsnTchMv2/0+hG8No532LASP0= Subject key identifier: 65:0A:F1:57:87:3D:6E:4A:11:E4:A1:9C:4A:4E:1A:F8:F0:55:31:8C Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 106C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 1063 Signing time: Sat 18 Oct 2025 17:57:30 +0000 Manifest this update: Sat 18 Oct 2025 17:57:30 +0000 Manifest next update: Sat 25 Oct 2025 17:57:30 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: MspzOXAeUG+107KaDHvD58+fc7hVEakDcrIFVF3cpLQ=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: bskjGki25S2tjkA4uEDOBCllOjX3cMsximD4ACjwrOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Oct 18 17:57:30 2025 GMT Not After : Oct 25 17:57:30 2025 GMT Subject: CN=68f3d50a-c261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:59:44:ea:b0:54:2c:ea:35:a4:53:4b:8a: 3d:79:a7:62:cd:b3:61:87:dd:3d:4b:de:c1:b5:7a: 8f:35:3d:82:c1:f7:29:b1:c9:6d:ed:bf:5a:51:5b: 9e:50:be:89:fc:17:66:21:df:b1:13:d8:0a:37:61: ce:4a:52:29:1e:18:2a:1d:3b:03:f5:8b:76:fd:ea: 8a:d4:65:bf:06:f3:80:b1:6e:f2:42:fb:05:ca:99: 07:3c:28:49:8b:a2:fe:49:c9:0c:87:d0:00:88:83: 0b:c8:7b:48:d4:18:38:b5:48:77:21:95:eb:f7:ee: e2:ad:60:ab:e6:7b:53:00:78:cf:46:98:4a:8a:f9: 86:aa:91:08:09:16:37:d6:b5:a7:3b:fe:c7:bd:7d: 41:64:0e:d7:80:70:e5:25:f2:ac:4d:8a:64:8b:ca: 01:83:38:4a:39:c2:c8:11:13:71:83:b5:c6:69:a7: d2:1d:30:99:3b:6c:40:95:1b:3b:76:14:4a:4e:63: 8f:2d:be:23:51:80:7d:7f:99:c8:c2:d0:47:23:69: 12:87:2a:8a:47:57:6a:d4:9d:87:b6:4c:35:7f:60: 03:17:1a:0a:f4:4d:6a:70:9e:8b:80:e4:68:8f:34: 52:5e:d3:0d:d8:c9:92:50:d9:a8:31:e4:31:f6:71: 12:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0A:F1:57:87:3D:6E:4A:11:E4:A1:9C:4A:4E:1A:F8:F0:55:31:8C X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:65:0d:86:4f:f2:27:cb:1e:60:08:d0:0a:37:e0:86:16: b5:f6:95:36:22:ae:ba:0d:12:1d:50:30:8b:a6:c1:e7:1b:1e: cd:31:d9:2f:34:ef:7e:50:94:65:82:2d:3d:e4:d8:27:1b:86: f2:b2:e2:cd:fe:de:dd:bc:a3:07:4c:e7:8f:7b:be:e7:19:5f: 9f:9a:29:81:d6:2f:47:d2:27:c8:bc:46:a3:78:d5:c0:c2:8e: ec:c1:71:2a:fd:30:06:6e:92:0f:0f:fe:3e:b0:14:a7:fe:d5: c8:f2:7b:5e:b7:4c:aa:76:f5:ff:c6:6b:dc:1f:1c:d8:e5:7a: e9:96:5b:a2:c7:50:49:d5:28:11:d6:d6:15:4c:14:c2:a8:f7: ec:96:be:10:86:ce:d3:27:0b:19:05:c5:ee:a6:79:32:8c:32: 81:4c:d8:42:68:15:d3:e6:82:05:6c:45:df:55:19:d8:34:a5: f4:1b:a9:e9:df:a4:7a:55:8f:87:8b:95:b4:2e:43:2d:8f:54: c5:10:9f:09:6f:1c:d1:b3:8d:2a:e9:bf:60:00:c8:d0:98:99: 5c:be:ee:99:f2:e4:d9:e7:5e:e7:64:be:cd:ba:4b:e8:ed:ad: 0f:1f:7c:fa:63:cc:74:4c:0a:34:82:df:db:b3:d4:ca:a7:31: f7:85:75:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUxMDE4MTc1NzMwWhcNMjUxMDI1MTc1NzMwWjAYMRYwFAYD VQQDEw02OGYzZDUwYS1jMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDtZROqwVCzqNaRTS4o9eadizbNhh909S97BtXqPNT2Cwfcpsclt7b9aUVue UL6J/BdmId+xE9gKN2HOSlIpHhgqHTsD9Yt2/eqK1GW/BvOAsW7yQvsFypkHPChJ i6L+SckMh9AAiIMLyHtI1Bg4tUh3IZXr9+7irWCr5ntTAHjPRphKivmGqpEICRY3 1rWnO/7HvX1BZA7XgHDlJfKsTYpki8oBgzhKOcLIERNxg7XGaafSHTCZO2xAlRs7 dhRKTmOPLb4jUYB9f5nIwtBHI2kShyqKR1dq1J2Htkw1f2ADFxoK9E1qcJ6LgORo jzRSXtMN2MmSUNmoMeQx9nESvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUK8VeH PW5KEeShnEpOGvjwVTGMMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbXWUNhk/yJ8seYAjQCjfghha19pU2Iq66DRIdUDCLpsHnGx7NMdkv NO9+UJRlgi095NgnG4bysuLN/t7dvKMHTOePe77nGV+fmimB1i9H0ifIvEajeNXA wo7swXEq/TAGbpIPD/4+sBSn/tXI8ntet0yqdvX/xmvcHxzY5Xrplluix1BJ1SgR 1tYVTBTCqPfslr4Qhs7TJwsZBcXupnkyjDKBTNhCaBXT5oIFbEXfVRnYNKX0G6np 36R6VY+Hi5W0LkMtj1TFEJ8JbxzRs40q6b9gAMjQmJlcvu6Z8uTZ517nZL7Nukvo 7a0PH3z6Y8x0TAo0gt/bs9TKpzH3hXVM -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:24 2025 by rpki-client