$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: kaeoLcN4GKpZAroNNxHNbKSHGPJAKTzZVteNFWDErUU= Subject key identifier: 29:7D:F7:B1:90:CD:90:99:68:B0:73:E4:12:0A:FA:8B:01:1E:9D:F8 Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 0C Signing time: Sun 19 Oct 2025 11:35:45 +0000 Manifest this update: Sun 19 Oct 2025 11:35:45 +0000 Manifest next update: Sun 26 Oct 2025 11:35:45 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: 9ksEBuIozLOqPbWXqAXMtIOkA8t9UQ6Qju7AJai9K28=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: Ty3keWksVpROp5e1j4cINLe1/6qFn8g6RY9zGQ2Ec2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Oct 19 11:35:45 2025 GMT Not After : Oct 26 11:35:45 2025 GMT Subject: CN=68f4cd11-01ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:64:b8:b1:bb:5e:f8:dc:9e:71:be:ff:ba: ae:cf:e0:76:3e:93:12:43:cb:a6:8a:b0:b3:0b:2b: e8:2c:2f:e2:6e:7c:e2:ae:b4:9c:e7:01:e5:6a:9e: 3d:4a:7c:65:27:76:c1:cf:06:90:44:64:82:6b:dd: 62:c6:22:bf:b8:5e:ca:58:c9:7c:a7:ea:2c:80:fb: be:1c:c4:05:eb:37:55:5d:5e:6b:78:ac:d5:cf:42: 20:97:99:be:8d:c6:30:dd:7f:9d:17:e5:3b:91:64: f0:00:56:93:d9:8f:e4:b6:69:62:5c:47:fb:d6:ee: 5d:d9:22:54:2c:62:b3:ca:13:21:a0:2d:0b:d8:72: b0:77:6e:ca:21:7b:a3:29:34:4d:d3:45:e4:3d:13: de:9e:cc:90:18:59:89:a1:35:6c:e3:9f:61:a2:bb: 57:f1:68:81:92:3e:90:be:ec:e4:52:67:75:8a:a3: d6:3e:82:f7:e9:51:45:3a:46:c0:fb:07:61:71:11: 0e:41:97:b4:8a:92:7f:79:e7:27:8b:dd:4f:18:be: f5:12:74:b7:f1:79:58:e8:7e:db:3b:49:ad:27:fb: 0b:1e:84:18:8f:c6:a1:da:e3:17:8d:c2:92:3b:d0: 4f:03:66:0a:03:35:b0:31:16:07:dd:71:cd:4b:e9: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:F7:B1:90:CD:90:99:68:B0:73:E4:12:0A:FA:8B:01:1E:9D:F8 X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:58:f0:58:72:cf:3a:ff:af:85:b5:f3:6c:31:79:30:35:86: b2:cb:d2:b0:f5:24:a0:a3:8b:d3:79:5d:77:d6:1c:49:25:b6: 92:cd:b8:b6:2f:b9:23:fb:75:42:df:d7:3a:b1:ce:60:2b:4b: 4d:91:ba:96:2e:d5:a0:a2:22:78:d9:22:04:23:eb:4f:da:ad: 90:ee:7c:b2:0e:03:8a:37:21:8c:fe:66:1b:9d:7c:60:39:d1: 3a:78:f2:05:8e:1a:3c:52:61:8e:c5:be:cf:d6:5c:f9:cc:44: 7a:cd:90:97:08:a2:36:77:14:ce:38:1b:66:1c:a9:43:8b:91: 66:3b:1e:c2:79:86:94:3e:1e:c5:f2:ac:86:ba:29:fc:bf:58: 7a:22:43:ef:5d:21:ee:c0:60:6b:d8:d0:6a:f9:76:b5:81:a1: 53:09:38:a6:bb:eb:54:8b:40:9e:67:90:3e:c0:28:ec:14:d7: 9a:0c:e7:86:e4:93:c8:95:e3:b3:f7:17:26:65:02:02:83:b8: 03:b7:c1:58:78:9d:9b:c9:4a:11:0f:e7:72:8d:08:d0:36:3d: 7b:09:cd:91:4e:9d:9c:6e:4c:ac:0c:74:79:de:bb:17:a4:1b: 92:5e:f7:2e:ec:ee:d4:56:40:21:dc:7f:c5:ca:70:3a:66:fc: 20:12:8a:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNTEwMTkxMTM1NDVaFw0yNTEwMjYxMTM1NDVaMBgxFjAUBgNV BAMTDTY4ZjRjZDExLTAxYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNI2S4sbte+Nyecb7/uq7P4HY+kxJDy6aKsLMLK+gsL+JufOKutJznAeVqnj1K fGUndsHPBpBEZIJr3WLGIr+4XspYyXyn6iyA+74cxAXrN1VdXmt4rNXPQiCXmb6N xjDdf50X5TuRZPAAVpPZj+S2aWJcR/vW7l3ZIlQsYrPKEyGgLQvYcrB3bsohe6Mp NE3TReQ9E96ezJAYWYmhNWzjn2Giu1fxaIGSPpC+7ORSZ3WKo9Y+gvfpUUU6RsD7 B2FxEQ5Bl7SKkn955yeL3U8YvvUSdLfxeVjofts7Sa0n+wsehBiPxqHa4xeNwpI7 0E8DZgoDNbAxFgfdcc1L6VPdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKX33sZDN kJlosHPkEgr6iwEenfgwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAChY8Fhyzzr/r4W182wxeTA1hrLL0rD1JKCji9N5XXfWHEkltpLNuLYv uSP7dULf1zqxzmArS02RupYu1aCiInjZIgQj60/arZDufLIOA4o3IYz+ZhudfGA5 0Tp48gWOGjxSYY7Fvs/WXPnMRHrNkJcIojZ3FM44G2YcqUOLkWY7HsJ5hpQ+HsXy rIa6Kfy/WHoiQ+9dIe7AYGvY0Gr5drWBoVMJOKa761SLQJ5nkD7AKOwU15oM54bk k8iV47P3FyZlAgKDuAO3wVh4nZvJShEP53KNCNA2PXsJzZFOnZxuTKwMdHneuxek G5Je9y7s7tRWQCHcf8XKcDpm/CASiqw= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:50 2025 by rpki-client