$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: BQRyZ1z8AG4D66j1alVF5UXSNNDutUfGcu0Aaoh5qSM= Subject key identifier: AC:87:7B:03:8A:35:4A:29:3E:F3:AF:2A:F8:0C:75:56:3A:DA:92:BE Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 0799 Signing time: Sat 18 Oct 2025 22:47:25 +0000 Manifest this update: Sat 18 Oct 2025 22:47:24 +0000 Manifest next update: Sat 25 Oct 2025 22:47:24 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: 6q3W2tmQFw7e2/rGKDk2GzyvGN3dDO0fMU8vQdA6nP4=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Oct 18 22:47:24 2025 GMT Not After : Oct 25 22:47:24 2025 GMT Subject: CN=68f418fc-06c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:4c:81:a0:b4:57:dd:34:56:77:ef:93:55: a2:26:21:f2:2d:8f:36:a7:ba:54:70:38:61:66:7e: a6:40:ee:94:fb:86:75:a4:db:c7:3a:d4:7d:20:95: b2:9b:da:40:94:96:fe:ab:81:f0:41:3f:ec:0d:ae: d8:5b:36:18:54:d5:c4:30:b4:05:95:79:6e:8f:b6: 9f:a0:2d:2d:42:7f:2d:02:67:27:07:4d:d5:cc:c6: 1c:93:29:6b:ae:d5:8f:ab:0d:36:52:9f:32:a7:36: 55:d9:6b:0c:ca:b7:d7:37:10:21:ee:f3:2d:1c:fa: 06:49:f5:14:06:2f:59:b5:37:32:1a:4a:9c:0e:42: a1:d8:ff:6c:6b:ab:81:b5:8d:14:f4:39:00:d9:86: 90:d6:3a:88:25:a3:60:8f:35:4e:b4:06:58:f0:de: 3d:71:66:93:2a:cd:c2:63:08:a4:90:6b:68:e3:d2: 0a:51:2d:b1:26:af:4f:be:a8:26:e2:b7:b6:97:6d: cc:d4:d4:08:c7:66:14:b4:a6:2f:e5:19:86:7d:77: 43:23:4e:a1:a0:14:f0:1c:43:42:0e:fa:d9:9e:ea: ca:17:ef:12:4e:54:71:ec:45:60:61:e5:d6:e4:a4: 95:00:33:c0:79:42:1b:1e:44:1d:9a:6f:d9:14:e4: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:87:7B:03:8A:35:4A:29:3E:F3:AF:2A:F8:0C:75:56:3A:DA:92:BE X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2c:66:11:dc:c8:2e:1d:b1:e7:a2:0d:05:ec:46:c9:6d:ea: ec:fe:a8:d3:e6:02:24:83:aa:80:0f:db:7a:1d:cc:b0:19:f1: 5a:28:b4:09:d9:9a:3d:5f:58:75:17:13:22:ac:53:6e:dd:df: d0:bc:5e:4b:c6:25:25:9f:3f:e9:e2:81:34:fc:a0:69:b0:d4: e3:75:6d:58:33:33:71:84:73:07:d6:98:e4:b2:2f:c8:d0:c4: 9c:fb:b8:f3:08:71:a0:f4:30:bc:af:23:54:f8:86:40:03:73: 22:f7:3a:4c:78:d3:2b:4e:1f:ed:ee:4a:7f:ea:06:a5:c3:61: a2:eb:0a:3c:a5:45:c1:db:0f:9c:db:ef:51:96:1d:46:a7:d6: f2:9c:43:17:6d:1f:52:a2:14:e3:46:e1:7a:68:7e:b2:30:9f: 2c:ac:6a:48:bf:7f:f1:f2:6d:47:b8:6a:b8:ee:f0:ea:af:78: 27:2b:85:6e:25:d6:df:43:ca:bf:c3:84:95:d8:59:34:01:b2: 2e:af:aa:3a:02:eb:8c:3b:a9:42:92:1c:2e:23:c8:60:5a:ec: 79:9f:7b:5a:8f:11:d4:bd:e7:9a:26:5a:fe:83:b7:5d:80:75: 2a:0a:0f:56:b7:23:0e:59:e6:cd:61:4b:13:f1:e3:66:45:27: b6:5a:fa:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUxMDE4MjI0NzI0WhcNMjUxMDI1MjI0NzI0WjAYMRYwFAYD VQQDEw02OGY0MThmYy0wNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0NMgaC0V900Vnfvk1WiJiHyLY82p7pUcDhhZn6mQO6U+4Z1pNvHOtR9IJWy m9pAlJb+q4HwQT/sDa7YWzYYVNXEMLQFlXluj7afoC0tQn8tAmcnB03VzMYckylr rtWPqw02Up8ypzZV2WsMyrfXNxAh7vMtHPoGSfUUBi9ZtTcyGkqcDkKh2P9sa6uB tY0U9DkA2YaQ1jqIJaNgjzVOtAZY8N49cWaTKs3CYwikkGto49IKUS2xJq9Pvqgm 4re2l23M1NQIx2YUtKYv5RmGfXdDI06hoBTwHENCDvrZnurKF+8STlRx7EVgYeXW 5KSVADPAeUIbHkQdmm/ZFORxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyHewOK NUopPvOvKvgMdVY62pK+MB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeLGYR3MguHbHnog0F7EbJbers/qjT5gIkg6qAD9t6HcywGfFaKLQJ 2Zo9X1h1FxMirFNu3d/QvF5LxiUlnz/p4oE0/KBpsNTjdW1YMzNxhHMH1pjksi/I 0MSc+7jzCHGg9DC8ryNU+IZAA3Mi9zpMeNMrTh/t7kp/6galw2Gi6wo8pUXB2w+c 2+9Rlh1Gp9bynEMXbR9SohTjRuF6aH6yMJ8srGpIv3/x8m1HuGq47vDqr3gnK4Vu JdbfQ8q/w4SV2Fk0AbIur6o6AuuMO6lCkhwuI8hgWux5n3tajxHUveeaJlr+g7dd gHUqCg9WtyMOWebNYUsT8eNmRSe2Wvp/ -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:04 2025 by rpki-client