$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: F+qkCBSeljjreA9luBNYwmmWq0AjCN9BfoIVyqGKN/g= Subject key identifier: 92:81:B2:A2:93:32:32:8E:4A:6D:FB:7C:A5:4A:F5:70:E9:7F:2E:B1 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 03D4 Signing time: Sun 19 Oct 2025 02:36:30 +0000 Manifest this update: Sun 19 Oct 2025 02:36:30 +0000 Manifest next update: Sun 26 Oct 2025 02:36:30 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: /4SSHV60JdF5mz8bcNY1d9p7Q+hww8n/WGQd/6EwMIg=) 2: 888790B6CD3A11EF87D85012C4F9AE02.roa (hash: AvFxWnXdXVRW4gSsV2SM184h5qE1FtXhjp3kh4Swn5U=) 3: 38E23C8AACAE11EEAD36566EC4F9AE02.roa (hash: WV0++0ZN/bagS69tHu4GzxXJWra/B4BQBtuEVcU79xQ=) 4: 39B38CD6ACAE11EEAD36566EC4F9AE02.roa (hash: CVz2Xf9+JNVQc+OnMj39alF6Xn/77a8odRw6ivgbb84=) 5: 2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (hash: PSuOk5hKLAcVmpB6whliDPWrfFKAhRcAnnfVLoCffRg=) 6: 8CA353C4EF5E11EF9E61950EC4F9AE02.roa (hash: 5Blz9K5XE6h6oYg/gQUJxXMDOjmAua+CLgWpZB5MaIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Oct 19 02:36:30 2025 GMT Not After : Oct 26 02:36:30 2025 GMT Subject: CN=68f44eae-e64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:bd:0f:32:95:7c:ab:75:cf:c6:50:c0:f0: 4d:5c:d3:8f:b0:78:5b:36:24:73:7e:0f:3b:42:32: fe:67:f7:90:20:cf:00:b9:18:43:ad:74:85:79:e2: 36:27:c7:4a:43:2d:8d:cd:e1:f1:8d:96:78:ed:7a: 28:2b:f1:71:8e:3a:5b:d7:08:c9:40:90:40:6c:cb: 68:1b:72:50:7a:2d:d3:8a:ed:4a:ef:78:e7:14:d3: 6e:b3:4e:2f:1b:05:7f:6f:7a:26:23:4d:0f:af:24: 4c:30:cd:47:9a:7d:99:5b:cb:d9:d0:d5:4a:a8:32: ea:60:a7:d1:25:f2:3d:76:e4:4d:85:8c:1c:42:c9: be:2f:b0:16:c6:8b:40:84:d1:a6:b8:b9:99:da:a6: f6:72:4c:31:f6:e3:0d:a8:d0:6a:12:2d:74:5d:71: 3a:ed:34:64:85:80:8e:7c:3d:9a:6b:32:d9:3b:0a: e7:17:11:39:0a:f0:b5:4b:5a:20:39:c9:08:3d:25: 08:47:f9:f2:3d:04:31:8c:0d:7f:fd:76:da:96:ae: f1:1c:40:9d:eb:e4:4f:a5:59:0d:2e:93:0b:b9:0e: c7:95:9a:50:a3:26:87:6e:ee:da:be:43:61:3e:85: fa:47:85:64:8b:71:e3:65:a7:de:8e:99:ee:a4:88: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:81:B2:A2:93:32:32:8E:4A:6D:FB:7C:A5:4A:F5:70:E9:7F:2E:B1 X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:70:9f:d0:1e:56:6c:90:3e:c1:74:0f:a8:68:96:dc:47:b5: 27:14:ac:82:36:43:8f:2d:5e:ea:b6:3e:26:ef:51:a0:72:89: 7d:9e:d1:0f:e4:dd:ae:7e:a4:4b:3a:fe:d3:76:09:88:6d:25: 5c:fd:83:c9:d3:c4:83:35:09:94:a8:a5:fe:08:57:24:f1:8c: 50:0a:5b:58:a2:33:89:4d:4d:43:f9:ff:6c:33:da:0d:ee:89: 3a:01:e0:d0:9f:6b:fd:cd:41:90:5f:d4:17:62:6a:48:96:49: 0a:4f:df:fe:91:c2:8f:ee:76:fa:2d:83:32:93:ab:38:86:66: 55:d0:cf:17:8d:62:a5:6e:20:8f:99:2f:18:16:ad:b5:ef:48: 52:73:2b:c3:1b:22:ea:d4:81:54:fd:b7:1f:94:c3:66:1e:5d: 19:de:a2:1b:54:fe:77:e8:1d:ae:b7:8e:63:99:47:f3:85:df: 24:ab:da:e4:aa:65:e6:58:a3:58:50:0a:b6:08:a3:b1:cd:15: 2b:f4:3f:75:39:9b:30:79:a4:45:06:ff:b2:b8:49:0f:54:b7: 73:92:c2:ee:eb:76:54:32:ba:07:41:29:61:43:ab:37:16:0c: da:bb:90:7f:b1:90:4a:ec:01:a0:3f:61:fb:a6:bf:dc:ad:7e: 1c:d2:65:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUxMDE5MDIzNjMwWhcNMjUxMDI2MDIzNjMwWjAYMRYwFAYD VQQDEw02OGY0NGVhZS1lNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAste9DzKVfKt1z8ZQwPBNXNOPsHhbNiRzfg87QjL+Z/eQIM8AuRhDrXSFeeI2 J8dKQy2NzeHxjZZ47XooK/Fxjjpb1wjJQJBAbMtoG3JQei3Tiu1K73jnFNNus04v GwV/b3omI00PryRMMM1Hmn2ZW8vZ0NVKqDLqYKfRJfI9duRNhYwcQsm+L7AWxotA hNGmuLmZ2qb2ckwx9uMNqNBqEi10XXE67TRkhYCOfD2aazLZOwrnFxE5CvC1S1og OckIPSUIR/nyPQQxjA1//Xbalq7xHECd6+RPpVkNLpMLuQ7HlZpQoyaHbu7avkNh PoX6R4Vki3HjZafejpnupIg0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKBsqKT MjKOSm37fKVK9XDpfy6xMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdcJ/QHlZskD7BdA+oaJbcR7UnFKyCNkOPLV7qtj4m71Ggcol9ntEP 5N2ufqRLOv7TdgmIbSVc/YPJ08SDNQmUqKX+CFck8YxQCltYojOJTU1D+f9sM9oN 7ok6AeDQn2v9zUGQX9QXYmpIlkkKT9/+kcKP7nb6LYMyk6s4hmZV0M8XjWKlbiCP mS8YFq2170hScyvDGyLq1IFU/bcflMNmHl0Z3qIbVP536B2ut45jmUfzhd8kq9rk qmXmWKNYUAq2CKOxzRUr9D91OZsweaRFBv+yuEkPVLdzksLu63ZUMroHQSlhQ6s3 Fgzau5B/sZBK7AGgP2H7pr/crX4c0mUe -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:01 2025 by rpki-client