$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: jq8fimJJMTuWZBo8qhe1p0GSWSfEePlFUDoFs3/Xz9s= Subject key identifier: 65:78:04:83:F9:0B:29:33:53:FF:31:58:72:72:DB:E9:35:2B:D2:09 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C1B Signing time: Sat 18 Oct 2025 19:32:37 +0000 Manifest this update: Sat 18 Oct 2025 19:32:37 +0000 Manifest next update: Sat 25 Oct 2025 19:32:37 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: DxNjonkSLmzR3mVjp1JZX2DxOSU+Bp/IYiW0loJamAE=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Oct 18 19:32:37 2025 GMT Not After : Oct 25 19:32:37 2025 GMT Subject: CN=68f3eb55-e503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:5b:05:21:c1:d1:38:d6:b2:ab:fa:99:e4: f4:81:4e:b1:5a:9e:da:61:43:80:e9:cb:dd:bb:05: 73:2b:df:3e:f6:fd:83:87:bf:05:4a:aa:bd:88:5c: 00:17:d5:c9:0a:01:7f:49:fc:d4:f6:7c:49:1e:38: 70:bf:01:1a:35:a4:cf:2c:ba:cf:fd:4f:b6:4d:c8: a5:8a:f3:39:2a:b5:4f:31:ed:fe:1f:0a:f8:f8:f0: 8e:a2:b9:aa:14:4c:4f:c2:3f:e7:94:81:ad:d6:7e: 7b:55:3c:09:d6:1c:0f:84:36:75:d1:b3:b0:43:31: ad:90:71:cb:de:e8:50:f3:c5:25:ac:52:8c:86:9a: 4b:13:57:09:18:3a:5b:eb:c8:ca:98:35:26:bf:06: bf:fe:30:5c:0d:ba:76:5a:c8:7b:95:c3:f4:45:df: c7:38:9e:f7:f5:a5:c7:09:d2:80:ba:70:d2:5a:17: 5a:7d:09:04:80:9c:74:89:93:1d:97:48:b4:69:79: 4c:21:17:e9:28:a7:82:ff:06:25:8a:98:4b:94:d0: c3:3f:07:19:c4:13:ec:b7:58:e6:4c:24:71:0c:21: 89:7e:9a:2a:17:bd:fa:c6:f6:86:f1:86:85:4d:35: 95:d0:21:be:62:a5:77:65:95:d4:8f:37:23:c1:c9: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:04:83:F9:0B:29:33:53:FF:31:58:72:72:DB:E9:35:2B:D2:09 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c8:88:2a:70:e8:a5:97:bc:66:ee:0c:ce:53:86:97:a0:d0: 86:c9:20:21:3f:02:2a:e9:98:d4:01:b5:65:a6:84:0b:a0:35: c3:f5:aa:ef:0d:f5:c0:a7:60:61:68:45:56:ac:d9:53:07:2c: 76:0c:c4:12:20:a2:5d:46:7e:23:20:6f:38:70:38:04:f6:96: a6:eb:cf:7d:4a:73:7b:48:f5:46:31:ae:e2:53:f6:c3:d7:de: e7:da:27:d9:ae:92:a7:82:af:44:c4:fe:9e:fc:85:50:8a:17: d5:c1:66:48:d0:8a:26:ba:c6:08:0a:2a:5a:23:63:a1:be:58: d9:9e:54:a9:90:d4:01:ee:1c:c1:03:ad:83:81:3a:89:5c:08: 44:db:55:ec:29:19:c2:6f:78:d2:1d:b8:8f:af:5d:d0:b1:aa: 47:fa:2e:3c:1f:74:e2:fa:89:59:c4:3a:1d:2b:db:21:fc:34: 5c:e2:b3:af:f8:3d:37:eb:89:d5:a2:65:10:9b:7b:fc:fe:1c: 1a:6d:82:33:11:5f:16:bc:29:32:dd:39:9a:aa:10:c3:41:39: 8a:0b:f5:cc:05:54:82:38:f4:07:64:0c:3e:15:64:87:d3:22: 83:17:cf:0f:03:99:db:24:f1:96:e9:c2:31:56:00:d6:73:f0: e6:69:4a:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUxMDE4MTkzMjM3WhcNMjUxMDI1MTkzMjM3WjAYMRYwFAYD VQQDEw02OGYzZWI1NS1lNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0JbBSHB0TjWsqv6meT0gU6xWp7aYUOA6cvduwVzK98+9v2Dh78FSqq9iFwA F9XJCgF/SfzU9nxJHjhwvwEaNaTPLLrP/U+2TcilivM5KrVPMe3+Hwr4+PCOormq FExPwj/nlIGt1n57VTwJ1hwPhDZ10bOwQzGtkHHL3uhQ88UlrFKMhppLE1cJGDpb 68jKmDUmvwa//jBcDbp2Wsh7lcP0Rd/HOJ739aXHCdKAunDSWhdafQkEgJx0iZMd l0i0aXlMIRfpKKeC/wYliphLlNDDPwcZxBPst1jmTCRxDCGJfpoqF736xvaG8YaF TTWV0CG+YqV3ZZXUjzcjwcmLpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV4BIP5 CykzU/8xWHJy2+k1K9IJMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSyIgqcOill7xm7gzOU4aXoNCGySAhPwIq6ZjUAbVlpoQLoDXD9arv DfXAp2BhaEVWrNlTByx2DMQSIKJdRn4jIG84cDgE9pam6899SnN7SPVGMa7iU/bD 197n2ifZrpKngq9ExP6e/IVQihfVwWZI0IomusYICipaI2OhvljZnlSpkNQB7hzB A62DgTqJXAhE21XsKRnCb3jSHbiPr13QsapH+i48H3Ti+olZxDodK9sh/DRc4rOv +D0364nVomUQm3v8/hwabYIzEV8WvCky3TmaqhDDQTmKC/XMBVSCOPQHZAw+FWSH 0yKDF88PA5nbJPGW6cIxVgDWc/DmaUpz -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:09 2025 by rpki-client