$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: tjOUs9Eb/uyijwajJzmDBP4VXYuI5DaLCaHFLbHFhRo= Subject key identifier: 2D:11:2D:05:A4:3A:FB:49:CE:E8:4F:48:8B:72:F1:B0:E0:EF:19:54 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 035C Signing time: Sun 19 Oct 2025 03:00:53 +0000 Manifest this update: Sun 19 Oct 2025 03:00:52 +0000 Manifest next update: Sun 26 Oct 2025 03:00:52 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: K/N7e1qMN1zpaatgBfiYoK6OTozRR1t3EJmYahEJ808=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Oct 19 03:00:52 2025 GMT Not After : Oct 26 03:00:52 2025 GMT Subject: CN=68f45465-1036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:4a:f1:58:c8:ba:43:b5:90:d1:a9:ee:c3: 48:a7:8b:15:41:8e:28:e4:9e:87:4e:69:2e:4d:db: db:58:3a:63:0d:04:80:3b:ab:da:85:7d:5b:87:0f: 94:67:d4:17:89:53:95:d0:67:dc:3b:c1:c2:a5:96: a2:bb:6e:1b:f8:f0:d6:2e:08:19:b5:7f:48:25:bb: 85:46:90:d1:3e:9c:3e:e1:18:77:cf:27:78:d6:3d: 60:30:07:a6:4b:36:97:00:38:2d:00:cd:29:e8:d7: be:19:09:9e:d8:9e:3d:2a:71:1e:0c:31:8b:15:7d: 8e:7f:f9:67:be:b9:38:75:9d:ab:e1:f9:77:1a:e6: 65:6a:21:8d:6f:ba:65:c7:6c:7c:0d:13:5d:cf:df: 1f:98:28:1a:56:a6:4a:98:34:e7:f0:2e:a2:b5:19: 8a:6b:ad:f2:e8:ab:6d:f0:58:9f:9a:2f:9f:1d:a2: 7b:8a:f6:8e:fd:7e:b3:a6:ef:b0:71:18:2b:f6:38: ea:a2:8d:7d:31:d7:f5:5c:cb:21:d6:2c:d7:d8:ec: 03:08:f0:d2:00:c0:7a:44:bb:50:9a:8f:b6:d4:a6: 86:35:1e:81:62:ee:3b:5a:9d:40:62:de:16:5e:60: 04:75:31:5d:51:c9:a7:0e:c1:3e:e0:6c:02:d5:a1: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:11:2D:05:A4:3A:FB:49:CE:E8:4F:48:8B:72:F1:B0:E0:EF:19:54 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e8:5a:ca:9d:ba:b6:6a:80:d1:0d:2d:5c:43:ca:31:79:fe: 72:c0:95:50:98:7a:ab:43:68:da:b9:d9:31:b3:98:14:51:21: 8b:1c:db:17:a4:0d:cf:b9:6d:7e:4a:21:ab:5a:ee:b0:34:03: 71:b3:89:dc:5b:47:c8:ea:6e:c8:33:f6:87:c2:f0:a6:dd:57: 41:02:8a:3a:b0:6e:0e:26:20:9e:2a:a9:2d:a5:1c:73:d9:97: de:b0:ef:2d:1e:e5:44:83:23:cd:2b:84:39:ec:4d:d2:8b:21: 2c:31:07:38:5f:d2:c4:f7:e9:b5:fe:6c:72:e1:25:6c:83:85: 7e:86:be:c5:b2:fe:02:db:59:22:1d:d5:ad:a4:b6:06:cb:20: 67:6d:35:c1:6a:d8:fa:47:de:45:bd:76:c4:3d:76:61:49:85: 52:12:a3:d8:37:12:93:2a:1e:71:e9:e0:a7:72:ad:4a:ae:f8: d1:6d:16:05:13:c1:86:59:2a:b5:bc:0c:db:5d:7b:2b:ae:b7: 6d:15:f1:2b:08:c4:ce:d3:03:e6:4d:72:7d:60:8f:88:ed:03: 5a:96:df:d3:d3:08:60:33:6a:e4:93:de:be:8f:5b:03:92:bf: e6:32:d9:dc:47:de:7b:84:f0:83:c4:2b:12:63:26:63:77:cc: 52:26:05:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUxMDE5MDMwMDUyWhcNMjUxMDI2MDMwMDUyWjAYMRYwFAYD VQQDEw02OGY0NTQ2NS0xMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ5K8VjIukO1kNGp7sNIp4sVQY4o5J6HTmkuTdvbWDpjDQSAO6vahX1bhw+U Z9QXiVOV0GfcO8HCpZaiu24b+PDWLggZtX9IJbuFRpDRPpw+4Rh3zyd41j1gMAem SzaXADgtAM0p6Ne+GQme2J49KnEeDDGLFX2Of/lnvrk4dZ2r4fl3GuZlaiGNb7pl x2x8DRNdz98fmCgaVqZKmDTn8C6itRmKa63y6Ktt8Fifmi+fHaJ7ivaO/X6zpu+w cRgr9jjqoo19Mdf1XMsh1izX2OwDCPDSAMB6RLtQmo+21KaGNR6BYu47Wp1AYt4W XmAEdTFdUcmnDsE+4GwC1aGcLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0RLQWk OvtJzuhPSIty8bDg7xlUMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC6FrKnbq2aoDRDS1cQ8oxef5ywJVQmHqrQ2jaudkxs5gUUSGLHNsX pA3PuW1+SiGrWu6wNANxs4ncW0fI6m7IM/aHwvCm3VdBAoo6sG4OJiCeKqktpRxz 2ZfesO8tHuVEgyPNK4Q57E3SiyEsMQc4X9LE9+m1/mxy4SVsg4V+hr7Fsv4C21ki HdWtpLYGyyBnbTXBatj6R95FvXbEPXZhSYVSEqPYNxKTKh5x6eCncq1KrvjRbRYF E8GGWSq1vAzbXXsrrrdtFfErCMTO0wPmTXJ9YI+I7QNalt/T0whgM2rkk96+j1sD kr/mMtncR957hPCDxCsSYyZjd8xSJgUe -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:19 2025 by rpki-client