$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft File: gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json) Hash identifier: 4jt1ptD9GWUmMLkwp4+Vd4cSp/KYSzomTbNtCP2QMag= Subject key identifier: 40:CB:FF:9B:F8:29:2C:FB:0E:2A:64:76:88:2B:23:43:83:CA:C5:75 Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft Manifest number: 0943 Signing time: Sat 18 Oct 2025 21:17:29 +0000 Manifest this update: Sat 18 Oct 2025 21:17:28 +0000 Manifest next update: Sat 25 Oct 2025 21:17:28 +0000 Files and hashes: 1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: 38RwnWMV9oIhxmd6jeL/VDuo7ZxJHyBGMHo6KnAMkBM=) 2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: cT6sVy2cPkGv5IyoVyqlT1wpNogGAW7RrVuiP5uIBJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Validity Not Before: Oct 18 21:17:28 2025 GMT Not After : Oct 25 21:17:28 2025 GMT Subject: CN=68f403e9-5acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:9c:5b:9c:db:17:95:8f:76:63:47:e7:66: 77:be:25:ec:69:bc:15:6d:7d:c6:20:ab:48:b0:e0: a4:da:b2:b4:c9:c8:d3:6e:53:73:15:cd:16:d3:6c: 81:8d:a4:62:1b:2e:0e:48:bc:87:f5:2e:90:05:a7: f0:a7:52:50:e3:78:86:16:de:07:88:83:9f:89:74: f8:20:d5:85:9b:5f:5f:9e:ea:76:c0:94:d1:ea:a8: 1e:c6:c4:3d:c6:67:3f:96:73:35:7c:72:a3:8a:d3: 5a:e5:19:c5:ab:c5:57:7b:88:80:49:06:a3:69:2e: 29:20:f3:b0:89:99:41:3d:7e:0e:bc:41:3c:07:42: 88:1b:c8:41:37:e8:54:e1:73:4e:6b:7f:5c:2c:97: f5:e4:b1:1c:d0:a0:da:ab:8f:ad:c5:28:3f:46:a2: 8e:6f:7e:90:ad:71:b9:f7:f6:2e:d7:17:90:d2:81: d2:9f:ca:19:7b:4a:31:54:b5:0e:2e:0a:22:80:1a: 2e:91:97:52:52:6c:d2:14:27:48:00:5b:c3:74:ae: 86:4c:18:e9:76:23:fb:d6:59:d4:7e:5d:06:98:0e: c3:b5:dd:e2:db:cd:1f:9d:bc:b5:32:19:a5:71:51: 66:72:f1:55:a3:27:9a:ca:b2:62:7a:85:53:4f:3a: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CB:FF:9B:F8:29:2C:FB:0E:2A:64:76:88:2B:23:43:83:CA:C5:75 X509v3 Authority Key Identifier: keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:43:38:2b:ba:fb:80:d4:fa:26:9e:d4:05:6a:ac:4c:a3:d1: 23:83:3e:73:71:c6:4b:03:89:6e:90:5f:a9:61:d9:1c:5f:de: 1a:06:04:6b:24:02:4c:eb:d1:60:b6:66:9e:6b:b2:a3:1b:05: b6:ac:1e:b8:b5:fd:ff:b9:60:f3:dc:b2:92:21:d1:13:3b:b1: 19:4b:83:c1:64:3e:a8:27:66:83:2c:f8:d8:67:be:27:f3:00: 73:fd:5e:7a:5e:61:cd:e5:c0:21:4b:bd:82:eb:df:33:12:7e: c1:44:6e:ab:c4:c2:77:27:96:7a:68:b7:e0:7b:8f:63:be:1d: 4e:ba:37:4f:99:5b:6b:e9:5d:d4:53:88:90:94:b5:0c:79:6e: 6a:1e:59:c0:9c:47:9e:2b:30:53:b6:04:7e:dd:50:89:b2:d2: 46:26:b2:18:82:25:b9:2d:d6:db:f0:67:ca:69:af:0c:ef:50: 2a:62:8b:22:39:d6:5b:2a:24:8e:33:24:41:88:66:25:1d:c3: 5c:68:d9:63:28:48:01:b8:57:5e:10:b7:29:fe:bd:c2:92:dd: 98:8a:3d:1b:c6:7b:cf:d3:e6:13:6f:1c:2b:44:60:1c:58:ef: ea:e5:e6:7b:37:5f:b9:72:78:1a:09:05:63:ec:81:05:9f:4a: c8:5b:bf:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwMDUxMTAvBgNVBAUTKDgzMERDRkNCNUE5QUEwQzdGQTdEN0FCOTk4OURBMjM0 M0RFRDJDMjIwHhcNMjUxMDE4MjExNzI4WhcNMjUxMDI1MjExNzI4WjAYMRYwFAYD VQQDEw02OGY0MDNlOS01YWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/ycW5zbF5WPdmNH52Z3viXsabwVbX3GIKtIsOCk2rK0ycjTblNzFc0W02yB jaRiGy4OSLyH9S6QBafwp1JQ43iGFt4HiIOfiXT4INWFm19fnup2wJTR6qgexsQ9 xmc/lnM1fHKjitNa5RnFq8VXe4iASQajaS4pIPOwiZlBPX4OvEE8B0KIG8hBN+hU 4XNOa39cLJf15LEc0KDaq4+txSg/RqKOb36QrXG59/Yu1xeQ0oHSn8oZe0oxVLUO LgoigBoukZdSUmzSFCdIAFvDdK6GTBjpdiP71lnUfl0GmA7Dtd3i280fnby1Mhml cVFmcvFVoyeayrJieoVTTzqlfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDL/5v4 KSz7DipkdogrI0ODysV1MB8GA1UdIwQYMBaAFIMNz8tamqDH+n16uZidojQ97Swi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzAwNS84Q0E2ODI3NkFB RTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9NZjZmWHE1bUoyaU5EM3RM Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3M1B5MXFhb01mNmZYcTVtSjJpTkQzdExDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzAwNS84Q0E2ODI3NkFBRTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9N ZjZmWHE1bUoyaU5EM3RMQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZQzgruvuA1PomntQFaqxMo9Ejgz5zccZLA4lukF+pYdkcX94aBgRr JAJM69Fgtmaea7KjGwW2rB64tf3/uWDz3LKSIdETO7EZS4PBZD6oJ2aDLPjYZ74n 8wBz/V56XmHN5cAhS72C698zEn7BRG6rxMJ3J5Z6aLfge49jvh1OujdPmVtr6V3U U4iQlLUMeW5qHlnAnEeeKzBTtgR+3VCJstJGJrIYgiW5Ldbb8GfKaa8M71AqYosi OdZbKiSOMyRBiGYlHcNcaNljKEgBuFdeELcp/r3Ckt2Yij0bxnvP0+YTbxwrRGAc WO/q5eZ7N1+5cngaCQVj7IEFn0rIW781 -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:41 2025 by rpki-client